Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Automated security scanning toolkit for web applications, APIs, and infrastructure. Runs port scans, vulnerability detection, and SSL/TLS analysis against authorized targets. Wraps nmap, nuclei, nikto, and sslscan into structured workflows with report output.
Combines multiple scanning tools into one workflow with consistent report output, avoiding the need to manually chain nmap, nuclei, and sslscan commands separately.
When to use it
- Scanning a staging server for open ports before production deploy
- Auditing SSL certificate configuration on a client's domain
- Running CVE checks against a web app during a pentest engagement
- Discovering live hosts across a subnet during network recon
- Generating a vulnerability report with severity ratings for a security audit
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: scan https://example.com for web vulnerabilities and SSL issues
- 1Run fast port scan with nmap -F to identify open services
- 2Run nuclei against the target using CVE and vulnerability templates
- 3Run sslscan to check certificate validity and cipher strength
- 4Collect all output into a structured report file
- 5Rate findings by severity and list remediation recommendations
reports/security-scan-2026-03-13.md with open ports, detected CVEs, SSL findings, and prioritized recommendations
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.