SSL证书查询

查询域名 SSL 证书过期时间。用法：说「查 xxx.cn 证书」或「SSL 证书 xxx.com」即可。

This skill appears to do exactly what it claims: it uses openssl to connect to the domains you ask about and reports certificate expiry. Before installing, note that: (1) it will open outbound TCP connections to whatever domains you query (port 443) — avoid querying sensitive internal hosts if you don't want probes recorded in logs; (2) it creates/uses a domain list at ~/.openclaw/workspace/ssl-domains.txt (inspect or change that path if desired); (3) review the included check-ssl.sh yourself (it is small and readable) if you have strict security controls; and (4) ensure openssl is available on your system. There are no requested credentials or hidden network endpoints.

Type: OpenClaw Skill Name: ssl-monitor Version: 1.2.5 The skill provides legitimate SSL certificate monitoring functionality using openssl but contains a shell injection vulnerability. Both the core command in SKILL.md and the check-ssl.sh script use the domain variable directly in shell execution without input sanitization, which could be exploited to run arbitrary commands. No evidence of intentional malice, data exfiltration, or persistence was found.