Nessus

Nessus integration. Manage data, records, and automate workflows. Use when the user wants to interact with Nessus data.

Before installing or running this skill: - Verify the third-party service (Membrane) and the CLI package: inspect @membranehq/cli on npm and the linked GitHub repo for recent activity, maintainers, and suspicious postinstall scripts. - Note that SKILL.md requires node/npm and uses npx; the registry metadata did not declare these as required binaries. If you lack Node/npm, the commands will fail — if you install them, be aware global npm installs can run arbitrary scripts. - Prefer using npx or a local install instead of npm -g to avoid changing system-wide binaries, or review the package contents before installing. - Understand the auth flow: membrane login may open a browser or produce a code to paste; this delegates Nessus auth to Membrane — only proceed if you trust Membrane to store/handle your credentials. - Confirm you’re comfortable with the Membrane privacy/security posture (how it stores credentials, who can access connections/actions) because the skill routes Nessus access through that service. - If you need higher assurance, ask the skill author/registry owner for an explicit install spec and a declaration of required runtimes (node/npm), and verify the package checksum or source before installation.

Type: OpenClaw Skill Name: nessus Version: 1.0.1 The skill facilitates Nessus integration by instructing the agent to install a global npm package (@membranehq/cli) and execute shell commands for authentication and API interaction via the Membrane platform. While these actions are aligned with the stated purpose, the requirement for global software installation and shell-based command execution constitutes a high-risk capability according to the analysis criteria. No evidence of intentional malice, data exfiltration, or prompt injection was found in SKILL.md or _meta.json.