credential-auditor自动化凭证安全审计工具,支持设备默认密码匹配、密码字典生成和多协议暴力破解测试
Install via ClawdBot CLI:
clawdbot install jeanphorn/credential-auditorGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
rm -rf ~Calls external URL not in known-safe list
https://github.com/jeanphorn/wordlistAI Analysis
The skill integrates external brute-force tools and downloads wordlists from an unverified GitHub repository, which could be used to perform unauthorized access attempts. While the stated purpose is security auditing, the capability to execute destructive commands and fetch external resources without explicit user consent introduces risk.
Audited Apr 16, 2026 · audit v1.0
Usage Guide
Loading usage data… refresh in a few seconds.
Scored May 25, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...