net-vuln-scan

网络安全漏洞检测工具。用于检测本地网络和主机的常见安全漏洞，包括： (1) 开放端口检测与风险评估 (2) 弱密码和默认凭证检测 (3) SSL/TLS 证书问题 (4) 常见服务漏洞检测 (5) 网络配置安全检查 (6) 敏感端口暴露检测。 适用于：安全审计、渗透测试前自查、系统加固、服务器上线检查。 注意：仅...

This package is broadly what it claims (a local/network vuln scanner), but review and caution are recommended before running: 1) Several docs/examples reference scripts that are missing (e.g., network_discovery.py) — expect gaps. 2) platform_check.py contains logic limited to localhost while SKILL.md suggests remote/platform-wide checks — behavior may not match expectations. 3) The skill probes cloud metadata endpoints (169.254.169.254); avoid running it on production cloud instances you don't control or where metadata contains sensitive credentials. 4) Inspect scripts/weakpass_check.py before use to confirm it enforces attempt limits and won't perform uncontrolled brute-force attempts against third-party hosts. 5) The README claims scan-rate limits; the port scanner does not enforce throttling — if you will scan networks, run in a controlled environment and ensure you have authorization. If you need to proceed, run the tools on an isolated host or lab VM and audit the weakpass and platform scripts first.

Type: OpenClaw Skill Name: net-vuln-scan Version: 1.2.0 The net-vuln-scan skill bundle is a legitimate security auditing tool designed for network and host vulnerability assessment. It includes scripts for port scanning (port_scan.py), SSL/TLS configuration analysis (ssl_check.py), and checking for unauthenticated services or weak default configurations (weakpass_check.py). The bundle also features version-based CVE detection for common software like Microsoft Office and SQL Server (cve_check.py) and generates structured reports (report_gen.py). The code is transparent, well-documented, and performs only the actions described in its documentation, with no evidence of data exfiltration, obfuscation, or malicious intent.