← 返回 Skills 市场
148
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install shodan-skills
功能描述
查询 Shodan 物联网搜索引擎获取设备信息、安全数据和网络资产；当用户需要进行 IP 地址分析、设备搜索、DNS 查询、网络安全评估或获取物联网设备信息时使用
安全使用建议
This skill appears coherent and implements Shodan API calls as described, but consider the following before installing: (1) Protect your SHODAN_API_KEY — store it securely and avoid sharing logs that include it. The script sends the key as a query parameter (Shodan's documented method), which can appear in logs or proxies. (2) Be mindful of legal/ethical constraints: querying or enumerating devices you do not own or have permission to test can be unlawful. (3) Observe Shodan rate limits and use count/facets to reduce quota usage. (4) Ensure Python and the requests dependency are installed from trusted sources. (5) If you need stronger assurance, review the included scripts yourself (they are small and readable) or use a read-only / limited Shodan key if available.
功能分析
Type: OpenClaw Skill
Name: shodan-skills
Version: 1.0.0
The 'shodan-skills' bundle is a legitimate tool for interacting with the Shodan API. The Python script (scripts/shodan_api.py) correctly implements standard Shodan endpoints (host, search, DNS) using the requests library and securely retrieves the API key from environment variables. The documentation (SKILL.md and references/api-reference.md) provides clear, helpful instructions for the AI agent without any evidence of prompt injection, data exfiltration, or malicious intent.
能力评估
Purpose & Capability
Name/description, declared primaryEnv (SHODAN_API_KEY), SKILL.md usage, and the included scripts all align: the skill queries Shodan endpoints for host/search/count/dns/etc. The single required credential is exactly what Shodan API access needs.
Instruction Scope
SKILL.md instructs the agent to run the bundled scripts which only read SHODAN_API_KEY from the environment and call api.shodan.io endpoints. There are no instructions to read unrelated files, other env vars, or to exfiltrate data to third‑party endpoints.
Install Mechanism
This is instruction-plus-source (no install spec). The only dependency is requests==2.28.0 as declared in SKILL.md; no external downloads, URL shorteners, or archive extraction are used. Risk from install is low but the runtime needs the Python requests package available.
Credentials
Only SHODAN_API_KEY is required and is justified by the skill's purpose. The code reads that env var and sends it to api.shodan.io as a query parameter (expected for Shodan). No other credentials or config paths are requested.
Persistence & Privilege
always is false and the skill does not request system-wide configuration changes or persistent elevated privileges. Autonomous invocation is allowed by default but combined with limited scope and single API key this is expected.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install shodan-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/shodan-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of Shodan API integration skill.
- Provides device information, security data, and network asset queries via Shodan.
- Supports host lookup, device search, DNS/domain queries, port/service info, and result statistics.
- Requires configuration of the SHODAN_API_KEY environment variable.
- Returns structured data for analysis, security assessment, and reporting.
- Includes sample usage and best practice guidance.
元数据
常见问题
shodan-skills 是什么？
查询 Shodan 物联网搜索引擎获取设备信息、安全数据和网络资产；当用户需要进行 IP 地址分析、设备搜索、DNS 查询、网络安全评估或获取物联网设备信息时使用. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 148 次。
如何安装 shodan-skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install shodan-skills」即可一键安装，无需额外配置。
shodan-skills 是免费的吗？
是的，shodan-skills 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
shodan-skills 支持哪些平台？
shodan-skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 shodan-skills？
由 末心（@moxin1044）开发并维护，当前版本 v1.0.0。
推荐 Skills