muki-fingerprintMUKI asset fingerprinting tool for red team reconnaissance. Use when performing authorized penetration testing, asset discovery, service fingerprinting, vuln...
Install via ClawdBot CLI:
clawdbot install admin4giter/muki-fingerprintGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdSends data to undocumented external endpoint (potential exfiltration)
Post → http://www.onlinegrades.org\Potentially destructive shell commands in tool definitions
eval(Accesses system directories or attempts privilege escalation
/sys/Generated Mar 20, 2026
Authorized security teams use MUKI to map the attack surface of online banking platforms and internal networks. It identifies exposed admin interfaces, outdated web servers, and extracts sensitive data like API keys from responses, helping prioritize vulnerabilities before attackers exploit them.
During security audits, MUKI scans e-commerce websites to fingerprint CMS versions like WordPress or Magento and detect sensitive paths such as payment gateway config files. This enables teams to find misconfigurations and data leaks that could lead to breaches.
Security analysts deploy MUKI to inventory medical devices and internal servers within hospital networks, using passive fingerprinting to avoid disrupting critical systems. It helps identify unpatched services and sensitive patient data exposure for compliance with regulations like HIPAA.
In authorized red team exercises, MUKI is used to simulate attacker reconnaissance on government web portals and infrastructure. It maps services, detects WAFs, and extracts credentials from test environments to assess defensive readiness and improve incident response.
Providers use MUKI to scan customer-facing APIs and management interfaces for unauthorized exposures. It fingerprints cloud services, checks for backup files, and extracts internal IPs, aiding in continuous security validation and reducing attack surfaces.
MSSPs integrate MUKI into their service offerings to conduct regular asset fingerprinting and vulnerability scans for clients. They charge subscription fees based on the number of assets scanned, providing detailed reports and remediation guidance to enhance client security posture.
Firms offer on-demand penetration testing using MUKI for rapid reconnaissance and attack surface mapping. They bill per engagement or on a retainer basis, delivering JSON or Excel reports that highlight critical findings for immediate action by client security teams.
The tool is licensed to large enterprises for internal use by their security operations centers. Revenue comes from annual licenses, with tiered pricing based on features like advanced fingerprint databases and support for high-volume scanning across distributed networks.
💬 Integration Tip
Integrate MUKI into CI/CD pipelines for automated security testing by using its JSON output to trigger alerts or block deployments based on detected vulnerabilities.
Scored Apr 19, 2026
Calls external URL not in known-safe list
https://target.comUses known external API (expected, informational)
googleapis.comAI Analysis
The skill's core functionality is legitimate for authorized security testing, but the rule-based signals indicate potential risks including credential access patterns, unsafe shell commands, and undocumented external data sinks. These could be misused or exploited if the tool is deployed without proper authorization or containment.
Audited Apr 17, 2026 · audit v1.0
Query and trade on Polymarket prediction markets — check odds, trending markets, search events, view order books, place trades, and manage positions. Now ava...
Comprehensive US stock analysis including fundamental analysis (financial metrics, business quality, valuation), technical analysis (indicators, chart patterns, support/resistance), stock comparisons, and investment report generation. Use when user requests analysis of US stock tickers (e.g., "analyze AAPL", "compare TSLA vs NVDA", "give me a report on Microsoft"), evaluation of financial metrics, technical chart analysis, or investment recommendations for American stocks.
This skill should be used when analyzing weekly price charts for stocks, stock indices, cryptocurrencies, or forex pairs. Use this skill when the user provides chart images and requests technical analysis, trend identification, support/resistance levels, scenario planning, or probability assessments based purely on chart data without consideration of news or fundamental factors.
Comprehensive market environment analysis and reporting tool. Analyzes global markets including US, European, Asian markets, forex, commodities, and economic indicators. Provides risk-on/risk-off assessment, sector analysis, and technical indicator interpretation. Triggers on keywords like market analysis, market environment, global markets, trading environment, market conditions, investment climate, market sentiment, forex analysis, stock market analysis, 相場環境, 市場分析, マーケット状況, 投資環境.
财务分析 CLI 技能 - 财报分析、股票估值、风险评估
Automation skill for DELLIGHT Content & Marketing Operations.