Cyber Attack Simulation

Professional security testing and vulnerability assessment tool for simulating cyber attacks and generating comprehensive security reports.

This package is inconsistent: it claims to be a hosted attack-simulation service but provides no server address, no auth method, no provenance, and no safety/authorization checks. Before installing or enabling this skill: 1) Do not allow autonomous invocation for this skill — require explicit user confirmation for every run. 2) Ask the publisher for the server base URL, authentication mechanism (API key, OAuth), and proof of identity/ownership (homepage, org info). 3) Require written proof that simulations will only run against authorized, non-production test targets and request audit/logging and rate-limiting controls. 4) Have your security team review any network calls the agent will make; prefer skills that declare required env vars and which restrict target scopes (allow-lists). 5) If you cannot validate the service owner and controls, do not enable the skill — it could be misused to launch real attacks or to trick the agent into performing harmful actions. Note: the absence of static scanner findings does not mean this is safe — this skill is mostly documentation, so the real risk is in how the agent (or a user) uses it.

Type: OpenClaw Skill Name: toolweb-cyber-attack-simulation Version: 1.0.0 The skill provides a 'Cyber Attack Simulation Platform' that allows an AI agent to initiate network-based attacks, including phishing, SQL injection, and DDoS, against arbitrary hostnames and ports. While the documentation in SKILL.md describes it as a professional security testing tool, the provision of active attack capabilities to an AI agent represents a high-risk surface that could be misused for unauthorized scanning or exploitation. The tool interacts with external endpoints at api.mkkpro.com and toolweb.in.