TopRank Skills

Home / Claw Skills / 其他 / Security Vuln Scanner
Official OpenClaw rules 15%

Security Vuln Scanner

Security Vulnerability Scanner

Stars

0

Installs

0

Status

ACTIVE

Visibility

PUBLIC

安装方式

直接复制以下提示词,发送给你的 AI 助手即可完成安装。

请先检查是否已安装 SkillHub 商店,若未安装,请根据 https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/skillhub.md 安装 SkillHub 商店,然后安装 Security Vuln Scanner 技能。 若已安装,则直接安装 Security Vuln Scanner 技能。

Overview

Skill Key
honestqiao/security-vuln-scanner
Author
honestqiao
Source Repo
openclaw/skills
Version
-
Source Path
skills/honestqiao/security-vuln-scanner
Latest Commit SHA
b7820c3cad48301a367dc1a92ebddfc2b9aa010b

Extracted Content

SKILL.md excerpt

# Security Vulnerability Scanner

扫描代码中的安全漏洞,提供修复建议。

## 功能

- SQL 注入检测
- XSS 跨站脚本检测
- 硬编码密码/密钥检测
- 不安全随机数检测
- 命令注入检测
- 敏感信息泄露检测
- 安全评分

## 触发词

- "安全扫描"
- "漏洞检测"
- "security scan"
- "vulnerability"

## 检测模式

```javascript
const patterns = {
  sqlInjection: /query\s*\(\s*['"`].*\$\{/,
  xss: /innerHTML\s*=|document\.write/,
  hardcodedSecret: /password\s*=\s*['"][^'"]+['"]/,
  insecureRandom: /Math\.random\(\)/,
  commandInjection: /exec\s*\(\s*\$\{/
};
```

## 输出示例

```json
{
  "vulnerabilities": [
    {
      "type": "sql_injection",
      "line": 42,
      "severity": "high",
      "message": "检测到SQL注入风险"
    }
  ],
  "score": 65
}
```

Related Claw Skills