← 返回 Skills 市场
161
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install security-auditor-tk
功能描述
Run security audits on Linux servers, web applications, and cloud infrastructure. Checks SSH hardening, firewall rules, open ports, SSL/TLS config, file perm...
安全使用建议
This skill appears coherent and is a typical instruction-only security auditor, but be careful before allowing any suggested commands to execute: 1) Review all recommended fix commands before running them — many are destructive or change authentication (sed edits, systemctl, mount remount). 2) Run audits in a safe environment or snapshot/back up configs first. 3) For cloud reviews, provide credentials only through secure channels and scope them (read-only where possible). 4) Prefer running the audit as a non-root user or in a test/staging instance; escalate privileges manually only after verifying the recommendations. 5) If you plan to let the agent invoke commands autonomously, restrict its execution rights and monitor actions closely.
功能分析
Type: OpenClaw Skill
Name: security-auditor-tk
Version: 1.0.0
The security-auditor-tk skill is a legitimate tool designed for Linux server hardening and security auditing. The instructions in SKILL.md and the reference files (common-fixes.md, hardening-checklist.md) contain standard industry-best-practice commands for securing SSH, configuring firewalls, and auditing system permissions. No evidence of data exfiltration, malicious prompt injection, or unauthorized persistence was found; the tool's behavior is entirely consistent with its stated purpose.
能力评估
Purpose & Capability
The name/description, SKILL.md, README, and reference docs all describe the same set of audits (SSH, firewall, file perms, TLS, web headers, updates, etc.). There are no declared env vars, required binaries, or config paths that are unrelated to running those checks. The cloud-review section expects provider and connection details from the user, which is consistent with auditing cloud resources.
Instruction Scope
The instructions explicitly direct scanning of system state and producing exact remediation commands (e.g., find /, sed edits to /etc/ssh/sshd_config, mount remount, systemctl operations). This is coherent for an auditor but means the agent will examine many system files and produce commands that, if executed, change system configuration. The SKILL.md does not instruct exfiltration or posting data to external endpoints, but it does rely on the user providing access details for cloud reviews.
Install Mechanism
This is an instruction-only skill with no install spec and no code files executed at install time — lowest risk from installation perspective.
Credentials
The skill declares no required environment variables or credentials. The cloud review instructions implicitly require cloud credentials or a connection method (user-provided), which is expected for that feature but not declared as required env vars. There are no unrelated credential requests in the package.
Persistence & Privilege
always is false and the skill does not request persistent system modifications or alter other skills. Model invocation is allowed (normal). Note: autonomous invocation plus the ability to produce and run system-altering commands means you should limit execution privileges (do not run as root) unless you explicitly trust the audit results.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install security-auditor-tk - 安装完成后，直接呼叫该 Skill 的名称或使用
/security-auditor-tk触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release — comprehensive security auditing for servers, web apps, and cloud infrastructure.
- Audits SSH, firewall, ports, updates, file permissions, and web app security.
- Checks for SSL/TLS misconfigurations, vulnerabilities, and insecure file access.
- Produces prioritized reports with exact commands for fixes and verification.
- Supports quick audits (e.g., SSH, web app headers) and full server scans.
- Includes references for hardening and fix commands.
元数据
常见问题
Security Auditor Tk 是什么？
Run security audits on Linux servers, web applications, and cloud infrastructure. Checks SSH hardening, firewall rules, open ports, SSL/TLS config, file perm... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 161 次。
如何安装 Security Auditor Tk？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install security-auditor-tk」即可一键安装，无需额外配置。
Security Auditor Tk 是免费的吗？
是的，Security Auditor Tk 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Security Auditor Tk 支持哪些平台？
Security Auditor Tk 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Security Auditor Tk？
由 tktk-ai（@tktk-ai）开发并维护，当前版本 v1.0.0。
推荐 Skills