alibabacloud-security-health-check阿里云已签约客户安全产品配置基线体检与整改清单生成。扫描 WAF 3.0 / SAS / CFW / DDoS 四类产品共 60 项配置,按覆盖率/防护强度/响应时效/合规对齐/最佳实践五维度打分(百分制), 输出 HTML 报告 + Excel 整改清单 + Markdown 摘要三件套。 何时使用:客户问"配...
Install via ClawdBot CLI:
clawdbot install sdk-team/alibabacloud-security-health-checkGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdAccesses system directories or attempts privilege escalation
/proc/Calls external URL not in known-safe list
https://clawhub.ai/user/sdk-teamAudited Oct 3, 2026 · audit v1.0
Generated Oct 3, 2026
A Customer Success Manager runs scheduled monthly patrols for contracted Alibaba Cloud security customers. They collect JSON configuration data for WAF, SAS, CFW, and DDoS, run the scorer, and deliver the three-piece report set to demonstrate ongoing value and flag unenabled items.
2-3 months before a customer renewal, the delivery team performs a full baseline health check to quantify the customer's current security posture and produce a remediation checklist. The HTML report and exec summary help justify renewal by showing configuration gaps and improvement opportunities.
A pre-sales engineer evaluates a prospect's existing Alibaba Cloud security configuration against best practices before proposing a solution. The health check output highlights quick wins and gaps, feeding into a tailored proposal.
Before launching a large security governance initiative for an enterprise customer, the team assesses the current configuration baseline across multiple products. The scored dimensions (coverage, strength, responsiveness, compliance, best-practice) establish a measurable starting point and prioritized remediation roadmap.
A customer requests an on-demand configuration health check after deploying new security products or making changes. They provide collected JSON files and receive an HTML report plus Excel remediation list, helping their ops team close gaps without a full audit engagement.
Delivered as part of contracted customer success programs to reduce churn and prove ongoing value through regular health checks and remediation guidance. The report artifacts serve as tangible value evidence before renewals.
Standalone paid audit or baseline assessment projects where a delivery team performs the health check and provides the three-piece deliverable. Often bundled with remediation implementation services or security governance projects.
Used by pre-sales teams to quantify gaps in a prospect's current configuration, leading to proposals for additional security products or higher-tier configurations. The health check acts as a lead-in to security solution sales.
💬 Integration Tip
The skill requires customer configuration JSON files (collected via provided .sh scripts) and runs a Python scorer (scripts/engine/scorer.py) with dependencies; ensure Python environment and pip installs are satisfied before invoking, and configure output directory via task runtime or fallback ./output.
Scored Oct 3, 2026
Firecrawl CLI for web scraping, crawling, and search. Scrape single pages or entire websites, map site URLs, and search the web with full content extraction. Returns clean markdown optimized for LLM context. Use for research, documentation extraction, competitive intelligence, and content monitoring.
Incident Commander Skill
Monitors OpenClaw cron job health, identifies failures, timeouts, and delivery issues.
Observability Designer (POWERFUL)
Use when defining SLIs/SLOs, managing error budgets, or building reliable systems at scale. Invoke for incident management, chaos engineering, toil reduction, capacity planning.
QQ bot integration for OpenClaw with session isolation, logging, and AI auto-reply. Supports private chat and group @messages.