[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6KPSDA8RF6V5Z4R4M0P1SDH":3,"skill-same:01M6KPSDA8RF6V5Z4R4M0P1SDH":75},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":33,"linkOnly":34,"markdownContent":35,"markdownBody":36,"frontMatter":37,"refName":38,"commitSha":39,"skillDirectory":40,"forksCount":41,"repositoryHtmlUrl":42,"repositoryHomepageUrl":6,"ownerHtmlUrl":43,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":44,"install":45,"resources":58},"01M6KPSDA8RF6V5Z4R4M0P1SDH","security-audit",null,"Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.","bobvarkey\u002Fopenclaw-workspace","bobvarkey","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F72114170?v=4","01M6KP64KQA4GNH11CSV7FXKNB","Bob Varkey","01M6KP64R8P9B1QS9RRRX3N7EN",1,"MIT","https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fsecurity-audit\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32],"security","audit","security audit","vulnerabilities","credentials","open","ports","fix","auto","deployments","clawdbot","security auditing","mode","for","2026-11-10 10:12:30",false,"---\nname: security-audit\ndescription: Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.\n---\n\n# Security Audit Skill\n\n## When to use\n\nRun a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically.\n\n## Setup\n\nNo external dependencies required. Uses native system tools where available.\n\n## How to\n\n### Quick audit (common issues)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs\n```\n\n### Full audit (comprehensive scan)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full\n```\n\n### Auto-fix common issues\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --fix\n```\n\n### Audit specific areas\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --credentials      # Check for exposed API keys\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --ports            # Scan for open ports\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --configs          # Validate configuration\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --permissions      # Check file permissions\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --docker           # Docker security checks\n```\n\n### Generate report\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full --json > audit-report.json\n```\n\n## Output\n\nThe audit produces a report with:\n\n| Level | Description |\n|-------|-------------|\n| ? CRITICAL | Immediate action required (exposed credentials) |\n| ? HIGH | Significant risk, fix soon |\n| ? MEDIUM | Moderate concern |\n| ? INFO | FYI, no action needed |\n\n## Checks Performed\n\n### Credentials\n- API keys in environment files\n- Tokens in command history\n- Hardcoded secrets in code\n- Weak password patterns\n\n### Ports\n- Unexpected open ports\n- Services exposed to internet\n- Missing firewall rules\n\n### Configs\n- Missing rate limiting\n- Disabled authentication\n- Default credentials\n- Open CORS policies\n\n### Files\n- World-readable files\n- Executable by anyone\n- Sensitive files in public dirs\n\n### Docker\n- Privileged containers\n- Missing resource limits\n- Root user in container\n\n## Auto-Fix\n\nThe `--fix` option automatically:\n- Sets restrictive file permissions (600 on .env)\n- Secures sensitive configuration files\n- Creates .gitignore if missing\n- Enables basic security headers\n\n## Related skills\n\n- `security-monitor` - Real-time monitoring (available separately)\n","# Security Audit Skill\n\n## When to use\n\nRun a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically.\n\n## Setup\n\nNo external dependencies required. Uses native system tools where available.\n\n## How to\n\n### Quick audit (common issues)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs\n```\n\n### Full audit (comprehensive scan)\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full\n```\n\n### Auto-fix common issues\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --fix\n```\n\n### Audit specific areas\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --credentials      # Check for exposed API keys\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --ports            # Scan for open ports\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --configs          # Validate configuration\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --permissions      # Check file permissions\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --docker           # Docker security checks\n```\n\n### Generate report\n\n```bash\nnode skills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs --full --json > audit-report.json\n```\n\n## Output\n\nThe audit produces a report with:\n\n| Level | Description |\n|-------|-------------|\n| ? CRITICAL | Immediate action required (exposed credentials) |\n| ? HIGH | Significant risk, fix soon |\n| ? MEDIUM | Moderate concern |\n| ? INFO | FYI, no action needed |\n\n## Checks Performed\n\n### Credentials\n- API keys in environment files\n- Tokens in command history\n- Hardcoded secrets in code\n- Weak password patterns\n\n### Ports\n- Unexpected open ports\n- Services exposed to internet\n- Missing firewall rules\n\n### Configs\n- Missing rate limiting\n- Disabled authentication\n- Default credentials\n- Open CORS policies\n\n### Files\n- World-readable files\n- Executable by anyone\n- Sensitive files in public dirs\n\n### Docker\n- Privileged containers\n- Missing resource limits\n- Root user in container\n\n## Auto-Fix\n\nThe `--fix` option automatically:\n- Sets restrictive file permissions (600 on .env)\n- Secures sensitive configuration files\n- Creates .gitignore if missing\n- Enables basic security headers\n\n## Related skills\n\n- `security-monitor` - Real-time monitoring (available separately)\n",{"name":5,"description":7},"main","d8f4d173ae7b04884241c26e6bea57eb3f1888da","skills\u002Fsecurity-audit",0,"https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace","https:\u002F\u002Fgithub.com\u002Fbobvarkey","2026-06-16 18:18:27",{"source":8,"skillName":5,"commands":46,"prompt":56,"zipAvailable":57},[47,50,53],{"tool":48,"command":49},"npx","npx skills add bobvarkey\u002Fopenclaw-workspace --skill security-audit",{"tool":51,"command":52},"bunx","bunx skills add bobvarkey\u002Fopenclaw-workspace --skill security-audit",{"tool":54,"command":55},"pnpm","pnpm dlx skills add bobvarkey\u002Fopenclaw-workspace --skill security-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fsecurity-audit\u002FSKILL.md",true,[59,65,69],{"path":60,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":63,"sourceHtmlUrl":64},"_meta.json","REFERENCE","参考文档",133,"https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fsecurity-audit\u002F_meta.json",{"path":66,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":67,"sourceHtmlUrl":68},".clawhub\u002Forigin.json",146,"https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fsecurity-audit\u002F.clawhub\u002Forigin.json",{"path":70,"resourceType":71,"resourceTypeDesc":72,"sizeBytes":73,"sourceHtmlUrl":74},"scripts\u002Faudit.cjs","SCRIPT","脚本",15570,"https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fsecurity-audit\u002Fscripts\u002Faudit.cjs",[76,111,141,166,177,203],{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":92,"publishedAt":33},"01M6KPWMVDQ1BSMVR82HXAX8AC","youtube","YouTube Data API integration with managed OAuth. Search videos, manage playlists, access channel data, and interact with comments. Use this skill when users want to interact with YouTube. For other third party apps, use the api-gateway skill (https:\u002F\u002Fclawhub.ai\u002Fbyungkyu\u002Fapi-gateway).","https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fyoutube-api-skill\u002FSKILL.md",[82,87],{"categoryNo":83,"categoryName":84,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":88,"categoryName":89,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[78,93,94,32,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110],"managed","api-gateway","comments","apps","gateway skill","maton","api integration","manage","use","access","api","OAuth","data","network","gateway","search","valid","clawhub",{"skillNo":112,"name":113,"nameZh":6,"description":114,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":115,"categories":116,"keywords":123,"publishedAt":33},"01M6KPVYGSVBMFX5JP52JW8V97","xcellent","Free, open-source X (Twitter) growth tool. Analytics dashboard, niche discovery, AI tweet writer, best posting times, and credit usage monitoring — all running locally on your machine. BYOK (Bring Your Own Key) model means users only pay X directly for API usage (~$5-15\u002Fmo). A free alternative to SuperX ($39\u002Fmo), Typefully, and Tweet Hunter.","https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fxcellent\u002FSKILL.md",[117,120],{"categoryNo":118,"categoryName":119,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000013","分析与可视化",{"categoryNo":121,"categoryName":122,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000033","数据分析师",[113,124,125,126,127,128,129,130,131,132,133,134,135,24,136,137,138,32,139,140],"hunter","machine","free","posting","writer","typefully","tweet writer","only","growth","twitter","model","tool","discovery","analytics dashboard","pay","bring","usage",{"skillNo":142,"name":143,"nameZh":6,"description":144,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":145,"categories":146,"keywords":147,"publishedAt":33},"01M6KPV9Y54JZP1CMFCG0MAFHS","work-application","CV generation, job scraping, offer analysis, and application tracking. Use when: (1) generating or adapting a CV\u002Fresume for a job offer, (2) scraping job offers from French platforms, (3) analyzing and ranking job offers, (4) generating a full analysis report for a single offer (skills, company, location, salary), (5) tracking candidatures and their status, (6) validating CV content against formatting guardrails. NOT for: cover letter generation (planned), LinkedIn direct messaging, job application submission, salary negotiation coaching.","https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fwork-application\u002FSKILL.md",[],[148,149,150,151,152,153,154,155,156,157,158,159,160,161,105,106,162,163,164,165],"work application","work","application","french","cover","ranking","status","files","master","reports","scraping","direct","analysis","Guardrails","analyzing","messaging","market-data","config",{"skillNo":167,"name":168,"nameZh":6,"description":169,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":170,"categories":171,"keywords":172,"publishedAt":33},"01M6KPTNDAC8V0AHK2ZF3ANY3B","weather","Get current weather and forecasts (no API key required).","https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fweather\u002FSKILL.md",[],[168,173,174,103,175,176],"get","curl","https","help",{"skillNo":178,"name":179,"nameZh":6,"description":180,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":181,"categories":182,"keywords":183,"publishedAt":33},"01M6KPT3JVWXD5T5P99D7S9KPE","to-do","Give your AI the power to act in the future. Schedule delayed prompts and one-off reminders that automatically wake the agent up at an exact moment to execute workflows, check systems, or send notifications.","https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fto-do\u002FSKILL.md",[],[184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202],"do","to do","openclaw","act","prompts","up","power","execute","check","node","schedule","notifications","reminders","workflows","systems","send","tz","wake","at",{"skillNo":204,"name":205,"nameZh":6,"description":206,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":207,"categories":208,"keywords":212,"publishedAt":33},"01M6KPSRT9BCV73F9EAAP66QAF","summarize","Summarize URLs or files with the summarize CLI (web, PDFs, images, audio, YouTube).","https:\u002F\u002Fgithub.com\u002Fbobvarkey\u002Fopenclaw-workspace\u002Fblob\u002Fmain\u002Fskills\u002Fsummarize\u002FSKILL.md",[209],{"categoryNo":210,"categoryName":211,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000021","资料检索与研究",[205,213,214,215,78,155,216,217,218,219,175,220],"cli","with","tap","images","install","brew","Audio","web"]