shodan-skills

查询 Shodan 物联网搜索引擎获取设备信息、安全数据和网络资产；当用户需要进行 IP 地址分析、设备搜索、DNS 查询、网络安全评估或获取物联网设备信息时使用

This skill appears coherent and implements Shodan API calls as described, but consider the following before installing: (1) Protect your SHODAN_API_KEY — store it securely and avoid sharing logs that include it. The script sends the key as a query parameter (Shodan's documented method), which can appear in logs or proxies. (2) Be mindful of legal/ethical constraints: querying or enumerating devices you do not own or have permission to test can be unlawful. (3) Observe Shodan rate limits and use count/facets to reduce quota usage. (4) Ensure Python and the requests dependency are installed from trusted sources. (5) If you need stronger assurance, review the included scripts yourself (they are small and readable) or use a read-only / limited Shodan key if available.

Type: OpenClaw Skill Name: shodan-skills Version: 1.0.0 The 'shodan-skills' bundle is a legitimate tool for interacting with the Shodan API. The Python script (scripts/shodan_api.py) correctly implements standard Shodan endpoints (host, search, DNS) using the requests library and securely retrieves the API key from environment variables. The documentation (SKILL.md and references/api-reference.md) provides clear, helpful instructions for the AI agent without any evidence of prompt injection, data exfiltration, or malicious intent.