Pattern Matching

Provides patterns for detecting sensitive data like API keys, credit cards, emails, SSNs, phone numbers, and IPs for authorized security testing and validation.

This skill is a static collection of detection patterns (from SecLists) and appears coherent for authorized security testing. Before installing: (1) Confirm you have permission to scan any target systems — the SKILL.md correctly warns about authorized use; (2) Verify provenance if provenance matters (source/homepage is marked 'unknown' though the SKILL.md points to the SecLists GitHub and MIT license); (3) Review the pattern files to ensure they match your use case and to avoid running them against sensitive production data unintentionally; (4) If you need the latest or full SecLists, consider pulling directly from the official GitHub repo rather than an unknown registry package.

Type: OpenClaw Skill Name: pattern-matching Version: 1.0.0 This skill bundle is a curated subset of the well-known SecLists security research project, specifically focusing on pattern-matching strings for security auditing. It contains various wordlists (e.g., 'php-magic-hashes.txt', 'repo-scan.txt', and 'malicious.txt') used to identify sensitive data, dangerous functions, or potential backdoors in source code and logs. The Python code in 'SKILL.md' is a standard utility for reading these reference files, and the documentation explicitly restricts usage to authorized security testing and educational purposes.