← 返回 Skills 市场
122
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install toolweb-database-security-audit
功能描述
Comprehensive API for processing database security audits and generating detailed compliance reports across access control, encryption, network security, and...
安全使用建议
This skill appears to implement what it claims, but the source/homepage are unclear and the docs reference external domains. Before installing or using it: (1) verify the vendor and confirm the API server URL and privacy/data-retention policy; (2) never submit raw audit data that might include DB credentials, connection strings, or secrets — scrub or redact sensitive fields first; (3) test with synthetic or anonymized data; (4) prefer self-hosted/internal tooling for sensitive audit payloads; (5) if you must use the external API, confirm TLS, an official endpoint in the OpenAPI, and contract/SLAs for data handling.
功能分析
Type: OpenClaw Skill
Name: toolweb-database-security-audit
Version: 1.0.0
The skill bundle describes a legitimate Database Security Audit API designed to process compliance data and generate reports. The SKILL.md and openapi.json files define standard API interactions without any evidence of malicious intent, data exfiltration, or prompt injection attacks. All external references point to a consistent set of domains (toolweb.in, mkkpro.com) associated with the service provider.
能力评估
Purpose & Capability
Name, description, sample request/response, and OpenAPI schema all describe a database security audit API; there are no unrelated required binaries, env vars, or install steps that contradict the stated purpose.
Instruction Scope
SKILL.md contains endpoint descriptions and example payloads for submitting audit data (expected). However it provides no clear server base URL in the included OpenAPI, references external domains in the prose (toolweb.in, api.mkkpro.com), and does not warn about redacting sensitive fields (credentials, connection strings, secrets) prior to submission — meaning an agent could inadvertently send highly sensitive data to an external service.
Install Mechanism
Instruction-only skill with no install spec or code files; nothing will be written to disk or auto-installed by the skill itself.
Credentials
The skill requests no environment variables or credentials (proportionate). Nevertheless, its primary operation is to transmit audit payloads which may contain PII/credentials; lack of explicit guidance about handling/redacting secrets is a privacy/data-exfiltration concern rather than an environment-credential mismatch.
Persistence & Privilege
always is false and there is no install or self-modifying behavior. The skill does not request elevated persistence or cross-skill configuration changes.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install toolweb-database-security-audit - 安装完成后，直接呼叫该 Skill 的名称或使用
/toolweb-database-security-audit触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the Database Security Audit API.
- Provides endpoints for processing and reporting on database security audits across domains such as access control, encryption, network security, auditing, and backup.
- Generates comprehensive compliance reports with audit summaries, compliance percentages, and domain-specific control breakdowns.
- Includes basic and detailed health check endpoints.
- Supports session tracking, audit trails, and multiple pricing tiers for different usage needs.
元数据
常见问题
Database Security Audit 是什么？
Comprehensive API for processing database security audits and generating detailed compliance reports across access control, encryption, network security, and... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 122 次。
如何安装 Database Security Audit？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toolweb-database-security-audit」即可一键安装，无需额外配置。
Database Security Audit 是免费的吗？
是的，Database Security Audit 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Database Security Audit 支持哪些平台？
Database Security Audit 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Database Security Audit？
由 ToolWeb（@krishnakumarmahadevan-cmd）开发并维护，当前版本 v1.0.0。
推荐 Skills