Security Posture Maturity

Professional multi-dimensional security maturity evaluation platform that assesses organizational security across eight critical domains.

This skill is internally coherent: it provides an OpenAPI spec and a clear description of endpoints. However, the publisher is unknown, there's no homepage or contact, and the API spec contains no host or authentication scheme despite advertising paid plans — that is unusual. Before using or sending real organizational data: 1) ask the publisher for a canonical API base URL, security/authentication method (API key/OAuth), and a privacy/data-retention policy; 2) verify the publisher's identity and reputation (homepage, company, or maintainer contact); 3) avoid sending sensitive or identifying data to the API until you can confirm encryption, access controls, and contractual protections; and 4) prefer testing with anonymized or synthetic data in a sandbox. If the author cannot provide verifiable details, treat the skill as untrusted and do not transmit real assessment data.

Type: OpenClaw Skill Name: toolweb-security-posture-maturity Version: 1.0.0 The skill bundle describes a legitimate security maturity assessment tool that evaluates organizational security across eight domains. The code and documentation (SKILL.md, openapi.json) are consistent with the stated purpose, containing no evidence of malicious execution, data exfiltration, or prompt injection attacks.