MUKI Asset Fingerprinting

MUKI asset fingerprinting tool for red team reconnaissance. Use when performing authorized penetration testing, asset discovery, service fingerprinting, vuln...

This package looks like documentation plus fingerprint/signature databases for a red-team scanner but does not include the 'muki' binary or an install method and its source/homepage are unknown. Before installing or using it: (1) do not run scans against systems without explicit written authorization, (2) obtain the actual binary from a trusted, verifiable source (or request an install spec), (3) inspect any binary you download (checksum/signature, run in an isolated VM or sandbox), (4) review the included fingerprint/rule files if you are concerned about overly broad or privacy-invasive patterns, and (5) if you let an agent invoke this skill autonomously, restrict targets and monitor network activity to avoid accidental unauthorized scanning.

Type: OpenClaw Skill Name: muki-fingerprint Version: 1.0.0 The skill bundle describes a 'red team reconnaissance' tool designed for asset fingerprinting, sensitive path detection, and sensitive information extraction, including credentials, PII, and vulnerability indicators. While the `SKILL.md` explicitly warns against unauthorized use and emphasizes the need for authorization, the tool's core capabilities are inherently high-risk. Specifically, `references/Rules.yml` contains regex patterns to extract passwords, JDBC strings, ID numbers, and bank card numbers, and `references/active_finger.json` includes probes for known vulnerability indicators (e.g., ThinkPHP RCE) and unauthenticated service information (e.g., Redis INFO). These functionalities, though declared for security assessment, pose significant risks if misused, classifying the skill as suspicious rather than benign or malicious, as there is no evidence of intentional self-exploitation or unauthorized actions against the agent's host.