← Back to Skills Marketplace
Website Security Audit
by
666-Moonlight
· GitHub ↗
· v1.0.0
· MIT-0
98
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install website-security-audit
Description
网站安全鉴定技能。对任意 URL 进行安全风险评估,综合域名信息、SSL证书、网站内容、技术特征、备案信息等多维度分析,判断网站是否可信、安全、有风险。当用户询问"查看某个网站是否有风险"、"帮我鉴定这个网站"、"检查这个链接安全吗"、"网站安全评估"时使用此技能。
Usage Guidance
This skill appears coherent for auditing websites, but be aware: it will load arbitrary URLs and capture page content. Avoid giving it links that require you to log in or that point to internal/private systems (to prevent exposing credentials or sensitive data). If you plan to audit unknown or suspicious sites, run checks from an isolated environment (VM or sandbox) and do not submit any passwords or tokens. Note the optional ProSearch helper references a Windows-specific local script path and may not work on other machines; it is optional and not required for the core audit.
Capability Analysis
Type: OpenClaw Skill
Name: website-security-audit
Version: 1.0.0
The website-security-audit skill is a legitimate tool designed to perform security assessments of URLs by analyzing SSL certificates, domain age, and Chinese ICP/Public Security filings. It utilizes standard OpenClaw browser actions and a local search script (prosearch.cjs) to gather information and generate a structured risk report, with no evidence of malicious intent, data exfiltration, or harmful prompt injection.
Capability Assessment
Purpose & Capability
Name/description (website security audit) match the instructions: extracting a URL, visiting it with the built-in browser, checking SSL/ICP/WHOIS, and producing a structured report. No unrelated env vars, binaries, or installs are requested.
Instruction Scope
Instructions explicitly direct the agent to navigate to user-provided URLs and snapshot page content (maxChars=10000). This is expected for site analysis but means the agent will fetch arbitrary external pages and capture their content (which may include sensitive data or trigger hostile site behaviour). The SKILL.md also references an optional local ProSearch node script path (Windows-specific) — optional, not required, but may not exist on all hosts.
Install Mechanism
No install spec and no code files beyond static references; instruction-only skill performs runtime browser actions. No downloads, archives, or external installers are invoked by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths. All checks are based on network queries and page parsing; requested data is proportionate to a website audit.
Persistence & Privilege
always is false and the skill does not request elevated or persistent system privileges, nor does it modify other skills' configurations. Autonomous invocation is allowed (platform default) but not combined with other privilege escalations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install website-security-audit - After installation, invoke the skill by name or use
/website-security-audit - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: 对任意URL进行系统性安全鉴定,综合HTTPS、ICP备案、公安网备案、域名年龄等10+维度分析,输出结构化风险报告。
Metadata
Frequently Asked Questions
What is Website Security Audit?
网站安全鉴定技能。对任意 URL 进行安全风险评估,综合域名信息、SSL证书、网站内容、技术特征、备案信息等多维度分析,判断网站是否可信、安全、有风险。当用户询问"查看某个网站是否有风险"、"帮我鉴定这个网站"、"检查这个链接安全吗"、"网站安全评估"时使用此技能。 It is an AI Agent Skill for Claude Code / OpenClaw, with 98 downloads so far.
How do I install Website Security Audit?
Run "/install website-security-audit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Website Security Audit free?
Yes, Website Security Audit is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Website Security Audit support?
Website Security Audit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Website Security Audit?
It is built and maintained by 666-Moonlight (@666-moonlight); the current version is v1.0.0.
More Skills