OT Security Assessment

Assess OT/ICS security posture across 30 controls in 6 principles — Business Driven, Risk Based, Enterprise Wide, Methodical, OT Security Focused, and OT Sec...

This skill is coherent but sends assessment data to https://portal.toolweb.in. Before installing or using it: (1) verify the portal and vendor reputation and read their privacy and data retention policies; (2) avoid sending highly sensitive production credentials or details — treat the controls data as potentially visible to the service operator; (3) review pricing/billing limits so you understand call costs; (4) create and use an account/API key with least privilege and rotate it if compromised; (5) if you need offline or internal-only assessments, do not rely on this skill since SKILL.md requires external API calls; (6) test with non-sensitive sample data first to confirm behavior. If you want, I can suggest checklist items to vet portal.toolweb.in or draft a minimal example controls payload you can use for a safe test call.

Type: OpenClaw Skill Name: ot-security-assessment Version: 1.0.0 The skill functions as a legitimate interface for an OT security assessment service provided by ToolWeb.in. It collects user-provided security control statuses and transmits them via `curl` to a specific API endpoint (`portal.toolweb.in`) for processing. While the instructions in `SKILL.md` strictly mandate the use of the external API and prohibit the agent from using its own knowledge, this behavior is consistent with the tool's stated purpose as a commercial 'Agent-as-a-Service' wrapper and does not show evidence of malicious intent, data exfiltration of sensitive local files, or unauthorized command execution.