[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FHAT1ST7DGY67SS8P2QSJN":3,"skill-same:01M6FHAT1ST7DGY67SS8P2QSJN":68},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":30,"linkOnly":31,"markdownContent":32,"markdownBody":33,"frontMatter":34,"refName":35,"commitSha":36,"skillDirectory":37,"forksCount":38,"repositoryHtmlUrl":39,"repositoryHomepageUrl":6,"ownerHtmlUrl":40,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":41,"install":42,"resources":55},"01M6FHAT1ST7DGY67SS8P2QSJN","security-audit",null,"Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.","kbarbel640-del\u002Fskills","kbarbel640-del","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F255315490?v=4","01M6CJPPQGCCESXMG3K7BBGQ5J","01M6CJPPX2PB2BCZERFVM2C2B3",1,"MIT","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fchandrasekar-r\u002Fsecurity-audit\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29],"security","audit","security audit","vulnerabilities","credentials","open","ports","fix","auto","deployments","clawdbot","security auditing","2026-11-10 10:12:30",false,"---\nname: security-audit\ndescription: Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.\n---\n\n# Security Audit Skill\n\n## When to use\n\nRun a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically.\n\n## Setup\n\nNo external dependencies required. Uses native system tools where available.\n\n## How to\n\n### Quick audit (common issues)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs\n```\n\n### Full audit (comprehensive scan)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full\n```\n\n### Auto-fix common issues\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --fix\n```\n\n### Audit specific areas\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --credentials      # Check for exposed API keys\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --ports            # Scan for open ports\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --configs          # Validate configuration\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --permissions      # Check file permissions\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --docker           # Docker security checks\n```\n\n### Generate report\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full --json > audit-report.json\n```\n\n## Output\n\nThe audit produces a report with:\n\n| Level | Description |\n|-------|-------------|\n| ? CRITICAL | Immediate action required (exposed credentials) |\n| ? HIGH | Significant risk, fix soon |\n| ? MEDIUM | Moderate concern |\n| ? INFO | FYI, no action needed |\n\n## Checks Performed\n\n### Credentials\n- API keys in environment files\n- Tokens in command history\n- Hardcoded secrets in code\n- Weak password patterns\n\n### Ports\n- Unexpected open ports\n- Services exposed to internet\n- Missing firewall rules\n\n### Configs\n- Missing rate limiting\n- Disabled authentication\n- Default credentials\n- Open CORS policies\n\n### Files\n- World-readable files\n- Executable by anyone\n- Sensitive files in public dirs\n\n### Docker\n- Privileged containers\n- Missing resource limits\n- Root user in container\n\n## Auto-Fix\n\nThe `--fix` option automatically:\n- Sets restrictive file permissions (600 on .env)\n- Secures sensitive configuration files\n- Creates .gitignore if missing\n- Enables basic security headers\n\n## Related skills\n\n- `security-monitor` - Real-time monitoring (available separately)\n","# Security Audit Skill\n\n## When to use\n\nRun a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically.\n\n## Setup\n\nNo external dependencies required. Uses native system tools where available.\n\n## How to\n\n### Quick audit (common issues)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs\n```\n\n### Full audit (comprehensive scan)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full\n```\n\n### Auto-fix common issues\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --fix\n```\n\n### Audit specific areas\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --credentials      # Check for exposed API keys\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --ports            # Scan for open ports\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --configs          # Validate configuration\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --permissions      # Check file permissions\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --docker           # Docker security checks\n```\n\n### Generate report\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full --json > audit-report.json\n```\n\n## Output\n\nThe audit produces a report with:\n\n| Level | Description |\n|-------|-------------|\n| ? CRITICAL | Immediate action required (exposed credentials) |\n| ? HIGH | Significant risk, fix soon |\n| ? MEDIUM | Moderate concern |\n| ? INFO | FYI, no action needed |\n\n## Checks Performed\n\n### Credentials\n- API keys in environment files\n- Tokens in command history\n- Hardcoded secrets in code\n- Weak password patterns\n\n### Ports\n- Unexpected open ports\n- Services exposed to internet\n- Missing firewall rules\n\n### Configs\n- Missing rate limiting\n- Disabled authentication\n- Default credentials\n- Open CORS policies\n\n### Files\n- World-readable files\n- Executable by anyone\n- Sensitive files in public dirs\n\n### Docker\n- Privileged containers\n- Missing resource limits\n- Root user in container\n\n## Auto-Fix\n\nThe `--fix` option automatically:\n- Sets restrictive file permissions (600 on .env)\n- Secures sensitive configuration files\n- Creates .gitignore if missing\n- Enables basic security headers\n\n## Related skills\n\n- `security-monitor` - Real-time monitoring (available separately)\n",{"name":5,"description":7},"main","e7e336ac628c3e3bd771aff1aaa469c93778f94a","skills\u002Fchandrasekar-r\u002Fsecurity-audit",0,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del","2026-08-23 22:39:37",{"source":8,"skillName":5,"commands":43,"prompt":53,"zipAvailable":54},[44,47,50],{"tool":45,"command":46},"npx","npx skills add kbarbel640-del\u002Fskills --skill security-audit",{"tool":48,"command":49},"bunx","bunx skills add kbarbel640-del\u002Fskills --skill security-audit",{"tool":51,"command":52},"pnpm","pnpm dlx skills add kbarbel640-del\u002Fskills --skill security-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fchandrasekar-r\u002Fsecurity-audit\u002FSKILL.md",true,[56,62],{"path":57,"resourceType":58,"resourceTypeDesc":59,"sizeBytes":60,"sourceHtmlUrl":61},"_meta.json","REFERENCE","参考文档",288,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fchandrasekar-r\u002Fsecurity-audit\u002F_meta.json",{"path":63,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":66,"sourceHtmlUrl":67},"scripts\u002Faudit.cjs","SCRIPT","脚本",15570,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fchandrasekar-r\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs",[69,100,129,150,156,176],{"skillNo":70,"name":71,"nameZh":6,"description":72,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":73,"categories":74,"keywords":80,"publishedAt":30},"01M6G8J55967D6281ACMKAKTEQ","crowd-prompting","A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzzadrian\u002Fcrowd-prompting\u002FSKILL.md",[75],{"categoryNo":76,"categoryName":77,"taxonomyType":78,"taxonomyTypeDesc":79},"01JBSEEDCAT000000000000036","内容创作者","PROFESSION","适用职业",[81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99],"crowd prompting","prompting","api","with","tokens","domain","world","prompts","operations","instructions","text","tool","system","improve","productivity","marketplace","https","content","ai agents",{"skillNo":101,"name":102,"nameZh":6,"description":103,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":104,"categories":105,"keywords":111,"publishedAt":30},"01M6G8J0PKPAYVET6BWE8W4C26","dilemm-ai","Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzyori\u002Fdilemm-ai\u002FSKILL.md",[106],{"categoryNo":107,"categoryName":108,"taxonomyType":109,"taxonomyTypeDesc":110},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[112,83,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,88,128],"dilemm ai","arena","analyze","browser","openclaw agent","create","automation","browser automation","bot","openclaw","design","strategy","headless","compete","submit","matchmaking","use",{"skillNo":130,"name":131,"nameZh":6,"description":132,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":133,"categories":134,"keywords":138,"publishedAt":30},"01M6G8HWAF3K9SW7NP3Z83CPJ6","arxiv-paper-reviews","Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date\u002Fcategory\u002Finterest, viewing paper details with comments, or submitting paper reviews via API at http:\u002F\u002F150.158.152.82:8000.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Fweak-accept\u002FSKILL.md",[135],{"categoryNo":136,"categoryName":137,"taxonomyType":109,"taxonomyTypeDesc":110},"01JBSEEDCAT000000000000021","资料检索与研究",[139,140,141,142,143,144,145,84,146,126,128,147,83,148,149],"arxiv paper reviews","reviews","arxiv","paper","crawler","papers","comments","fetch","read","http","via",{"skillNo":151,"name":131,"nameZh":6,"description":132,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":152,"categories":153,"keywords":155,"publishedAt":30},"01M6G8HQJ7N7WMY6YV7D7SSJ16","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Farxiv-paper-reviews\u002FSKILL.md",[154],{"categoryNo":136,"categoryName":137,"taxonomyType":109,"taxonomyTypeDesc":110},[142,141,140,139,149,144,145,84,143,126,128,146,147,83,148],{"skillNo":157,"name":158,"nameZh":6,"description":159,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":160,"categories":161,"keywords":162,"publishedAt":30},"01M6G8HM95Y64JNVFC2HN4E2BG","git-summary","Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzweack\u002Fgit-summary\u002FSKILL.md",[],[163,164,165,166,167,168,169,170,171,172,173,174,175],"git","summary","git summary","commits","repository","win32","status","linux","contributors","true","quick","get","branches",{"skillNo":177,"name":178,"nameZh":6,"description":179,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":180,"categories":181,"keywords":186,"publishedAt":30},"01M6G8HGEGF05CNEJCGVYFSC4R","agent-constitution","Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fztsalexey\u002Fagent-constitution\u002FSKILL.md",[182,183],{"categoryNo":107,"categoryName":108,"taxonomyType":109,"taxonomyTypeDesc":110},{"categoryNo":184,"categoryName":185,"taxonomyType":78,"taxonomyTypeDesc":79},"01JBSEEDCAT000000000000037","律师与法务",[187,188,189,190,84,191,192,35,193,147,194,195,196,197,198,97,199,200,201],"agent constitution","constitution","contracts","tree","query","base","log","check","Rules","projects","compliance","actions","state","governance","github"]