web-recon

Website vulnerability scanner and security audit toolkit. Scan any website for security issues: open ports (nmap), exposed secrets, subdomain enumeration, di...

This package appears to do what it says (an integrated web reconnaissance tool), but it comes from an unknown owner and will perform intrusive network actions (port scans, directory brute force, secrets discovery) and call public APIs (ip‑api, Shodan if configured). Before installing or running: 1) only scan targets you are explicitly authorized to test (unauthorized scanning may be illegal); 2) review the two scripts yourself (they're included) and run them in a sandbox or isolated environment; 3) be cautious about providing SHODAN_API_KEY; 4) if you don't want password‑spray or brute‑force behavior, avoid installing or supplying wordlists that enable credential attacks. If you want higher assurance, request provenance (homepage or repo) or verify the upstream projects referenced (titus, nuclei, subfinder, etc.) before use.

Type: OpenClaw Skill Name: web-recon Version: 0.1.0 The bundle is a comprehensive web reconnaissance and vulnerability scanning toolkit that orchestrates multiple security tools like nmap, gobuster, and nuclei. It includes scripts for automated technology fingerprinting, subdomain enumeration, and secrets detection (scripts/titus-web.sh). While the functionality is aligned with its stated purpose for security auditing, it is classified as suspicious due to its high-risk capabilities, including active network scanning, directory brute-forcing, and the automated fetching of remote content for analysis. It also communicates with external services like ip-api.com and shodan.io for geolocation and infrastructure intelligence.