← 返回 Skills 市场
Shodan Skill
作者
dmcmurrin4617
· GitHub ↗
· v0.1.0
· MIT-0
264
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install shodan-skill
功能描述
Advanced Shodan API interactions including search, scan, alerts, and DNS.
安全使用建议
This skill appears to implement a legitimate Shodan wrapper, but review these points before installing: 1) The code requires a Shodan API key (SHODAN_API_KEY or ~/.config/shodan/api_key) but the registry metadata did not declare it — be careful where you store/provide that key. 2) The README points to an external GitHub repo (liuweitao/shodan-skill); verify the repository and author before cloning. 3) On-demand scans and streaming consume Shodan credits and may have legal/ethical implications — only run scans you are authorized to perform. 4) Inspect the included scripts yourself (they are provided) and run the skill in a sandbox or low-privilege account if possible. 5) If you want to allow autonomous agent use, consider restricting or auditing agent actions that trigger scans/streams to prevent unexpected network activity or credential exposure.
功能分析
Type: OpenClaw Skill
Name: shodan-skill
Version: 0.1.0
The shodan-skill bundle is a legitimate wrapper for the official Shodan Python library, providing an interface for network reconnaissance, vulnerability scanning, and asset monitoring. The script (scripts/shodan_skill.py) correctly handles API keys via environment variables or the standard Shodan configuration file (~/.config/shodan/api_key) and contains no evidence of malicious intent, data exfiltration, or unauthorized command execution.
能力评估
Purpose & Capability
Name, description, required binaries (python3, pip), and included Python script all align with providing Shodan API features (search, host, scan, alerts, stream, DNS, exploits). The use of the official shodan Python library is expected.
Instruction Scope
SKILL.md and the CLI script keep to Shodan-related operations only (search, scan, stream, alerts, DNS, etc.). The script reads a Shodan API key from SHODAN_API_KEY or ~/.config/shodan/api_key and outputs JSON results; SKILL.md documents shodan init and SHODAN_API_KEY but does not explicitly call out reading the config file.
Install Mechanism
No opaque install step or remote download is embedded in the registry entry; the skill is instruction-only (with an included script). Dependencies are standard (pip install shodan). README suggests cloning a GitHub repo, but the skill bundle already contains the code.
Credentials
Registry metadata lists no required env vars or primary credential, but runtime code requires a Shodan API key (SHODAN_API_KEY env var or ~/.config/shodan/api_key). The metadata omission is an incoherence — the skill will fail without the key and users may not realize they must provide it. Apart from that, no unrelated credentials are requested.
Persistence & Privilege
always:false and default autonomy are set; the skill does not request persistent system-wide changes or modify other skills. It does perform network actions via Shodan (including scans and streams) which have operational and ethical implications but are coherent with its purpose.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install shodan-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/shodan-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release with advanced Shodan API usage and management tools.
- Supports advanced search, scan, host details, and count queries, including facets/statistics.
- Enables creation and management of network alerts and notifiers.
- Provides DNS/domain lookups, exploit search, and access to account/profile tools.
- Offers streaming of real-time Shodan data and directory (saved query) utilities.
- Includes helper commands for search filters and data fields reference.
元数据
常见问题
Shodan Skill 是什么？
Advanced Shodan API interactions including search, scan, alerts, and DNS. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 264 次。
如何安装 Shodan Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install shodan-skill」即可一键安装，无需额外配置。
Shodan Skill 是免费的吗？
是的，Shodan Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Shodan Skill 支持哪些平台？
Shodan Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Shodan Skill？
由 dmcmurrin4617（@dmcmurrin4617）开发并维护，当前版本 v0.1.0。
推荐 Skills