name: security-audit-owasp version: 1.0.0 description: "Full OWASP, Nmap, Nikto vulnerability assessment for OpenClaw deployments. Scan your infrastructure, harden configs, and generate compliance reports." license: MIT tags: [security, owasp, nmap, nikto, vulnerability, audit, pentest, hardening, compliance, infrastructure] source: el-rudo-larios/security-audit trigger: "security audit vulnerability scan penetration test OWASP hardening" metadata: openclaw: emoji: "🔒"

Security Audit — OWASP, Nmap, Nikto

Comprehensive security auditing toolkit for OpenClaw deployments. Scan your infrastructure, identify vulnerabilities, and harden configs.

What It Does

1. Port Scanning — Nmap service detection, OS fingerprinting, script scanning
2. Web Vulnerability Assessment — Nikto web server scans, OWASP Top 10 checks
3. Infrastructure Hardening — SSH config audit, firewall rules, exposed services
4. Compliance Reports — Structured JSON output, severity ratings, remediation steps

Quick Start

# Full security audit
bash scripts/security-audit.sh --target 192.168.1.0/24 --output reports/

# Quick port scan
bash scripts/quick-audit.sh --target localhost

Features

• Automated Nmap scans with service version detection
• Nikto web vulnerability assessment
• OWASP Top 10 checklist verification
• SSH hardening recommendations
• Firewall rule audit
• Structured JSON reports with severity ratings
• Remediation scripts for common findings

Requirements

7w4.net小葱技能站，你的AI助手技能库。

• OpenClaw 2.0+
• Nmap (apt install nmap)
• Nikto (apt install nikto)
• Python 3.10+

License

MIT

整体质量中规中矩，优点是功能覆盖面广、文档清晰易懂、有实用的快速扫描脚本。但存在明显不足：文档描述的完整审计脚本缺失，只能使用快速扫描功能。适合需要基础安全扫描的用户，但如果你需要完整的安全审计能力，可能需要等待后续版本完善。