search-viewer整合Fofa、Hunter、Shodan等空间测绘平台API,辅助渗透测试信息收集和资产发现的工具。
Install via ClawdBot CLI:
clawdbot install adminlove520/search-viewerGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
post → https://quake.360.net/api/v3/search/quake_servicePotentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://github.com/adminlove520/Search_Viewer.gitAudited Apr 17, 2026 · audit v1.0
Generated Mar 22, 2026
Penetration testers use this skill to identify and enumerate target assets during reconnaissance phases. It aggregates data from multiple platforms like Fofa and Zoomeye to find subdomains, open ports, and exposed services, helping to map the attack surface efficiently.
Security researchers leverage the skill to discover vulnerable assets exposed online, such as misconfigured databases or weak services. By querying platforms like Shodan and 360 Quake, they can analyze trends and assess global distributions of specific technologies for proactive defense.
During security incidents, teams use this tool to quickly locate affected assets across networks. It enables rapid scanning of platforms like Hunter and Zoomeye to identify compromised systems or unauthorized exposures, aiding in containment and remediation efforts.
Organizations employ the skill to audit their external digital footprint and ensure compliance with security policies. It helps identify unintentionally exposed assets, such as open FTP servers or outdated services, allowing for risk mitigation and regulatory adherence.
The skill relies on platforms like Fofa and Shodan that offer free tiers with limited queries, encouraging users to upgrade to paid subscriptions for higher limits and advanced features. Revenue is generated through API key sales and premium account upgrades.
Companies can integrate this skill into larger security suites or platforms, offering it as a value-added feature for reconnaissance. Revenue comes from licensing fees, custom development, and support services tailored to enterprise clients.
Educational providers use the skill in cybersecurity training courses to teach reconnaissance techniques. Revenue is generated through course fees, certification exams, and workshops focused on practical skills like asset discovery and penetration testing.
💬 Integration Tip
Ensure API keys are securely stored and rotated regularly to comply with platform terms and avoid service disruptions. Integrate with existing security workflows for automated asset monitoring.
Scored Jun 19, 2026
Summarize URLs or files with the summarize CLI (web, PDFs, images, audio, YouTube).
AI-optimized web search via Tavily API. Returns concise, relevant results for AI agents.
When user asks to summarize text, articles, documents, meetings, emails, YouTube transcripts, books, PDFs, reports, conversations, or any long content. Also...
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
Automatically fetch YouTube video transcripts, generate structured summaries, and send full transcripts to messaging platforms. Detects YouTube URLs and provides metadata, key insights, and downloadable transcripts.
Run a full McKinsey-level market research and strategy analysis using 12 specialized prompts. USE WHEN: - market research, competitive analysis, business str...