auto-security-audit一键自动化安全审计:nmap 端口扫描 + nuclei 12000+ CVE 漏洞检测(内外网双扫)+ SSL/TLS 检查 + SSH/防火墙/fail2ban 系统审计 + Markdown 报告生成。支持 cron 定时扫描 + 飞书推送。
Install via ClawdBot CLI:
clawdbot install nashbuaa-ops/auto-security-auditGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://github.com/projectdiscovery/nuclei/releases/latest/download/nuclei_$(curUses known external API (expected, informational)
api.github.comAudited Apr 16, 2026 · audit v1.0
Generated Mar 20, 2026
This skill automates routine security audits for DevOps teams managing cloud or on-premises servers. It scans for open ports, vulnerabilities, and misconfigurations, generating structured reports to ensure compliance with security policies and reduce manual effort in continuous monitoring.
Small businesses with limited IT resources can use this skill to perform comprehensive security checks on their web servers and internal networks. It identifies critical risks like outdated SSL certificates or weak SSH settings, helping them proactively address vulnerabilities before exploitation.
Security professionals conducting authorized penetration tests leverage this skill for initial reconnaissance and vulnerability scanning. It combines nmap and nuclei to detect CVE and web vulnerabilities, streamlining the assessment phase and providing detailed reports for further analysis.
In academic or training environments, this skill serves as a hands-on tool for students learning about network security and auditing. It demonstrates real-world scanning techniques and risk assessment, with clear outputs for educational purposes in controlled lab settings.
Offer this skill as part of a subscription-based security monitoring service for businesses. Integrate it with cron jobs and notification systems like Feishu to provide automated, scheduled scans and alerts, generating recurring revenue through monthly or annual plans.
Use this skill to enhance cybersecurity consulting offerings by automating initial audits for clients. It reduces time spent on manual scans, allowing consultants to focus on analysis and remediation, with revenue from project-based fees or retainer agreements.
Monetize by integrating this skill into broader security platforms or toolchains, offering premium features like advanced reporting or custom templates. Revenue can come from licensing fees, enterprise support, or upsells within a larger product ecosystem.
💬 Integration Tip
Ensure all required binaries (nmap, nuclei, sslscan) are installed and updated, and configure cron jobs with proper permissions for automated scanning and notifications.
Scored Jun 17, 2026
Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.
Performs local network scans using Nmap to detect vulnerabilities, identify service versions, and fingerprint operating systems.
AI/LLM red team testing skill. Point at any LLM API endpoint and run automated security assessments. 160+ attack payloads across prompt injection, jailbreak,...
Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level...
Run slither static analysis on Solidity contracts. Fast, lightweight security scanner for EVM smart contracts.
Scan networks to discover devices, gather MAC addresses, vendors, and hostnames. Includes safety checks to prevent accidental scanning of public networks.