security-audit

Automates Clawdbot deployment security audits for credentials, ports, weaknesses and vulnerabilities with optional auto-fix.

38|8|Updated Mar 28, 2026
One-click install
npx skills add https://github.com/yun520-1/mark-heartflow-skill --skill security-audit-yun520-1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/yun520-1/mark-heartflow-skill/tree/main/skills/security-audit
Command: npx skills add https://github.com/yun520-1/mark-heartflow-skill --skill security-audit-yun520-1

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of identifying security vulnerabilities in Clawdbot deployments, ensuring a secure environment before deployment or on a schedule.

Core Features & Use Cases

  • Comprehensive Security Scanning: Identifies exposed credentials, open ports, weak configurations, and potential vulnerabilities.
  • Auto-Fix Mode: Remedies common issues automatically to enhance security.
  • Custom Scans: Allows users to run specific checks for credentials, ports, configurations, file permissions, and Docker security.

Quick Start

Run a security audit for your Clawdbot deployment using the command: node skills/security-audit/scripts/audit.cjs

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security auditing for Clawdbot deployments?▼

Automate security auditing for Clawdbot deployments by running `node skills/security-audit/scripts/audit.cjs` to identify vulnerabilities and weak configurations.

What does a security audit scan for in a node.js deployment?▼

A security audit scans node.js deployments for exposed credentials, open ports, weak configurations, and potential vulnerabilities to ensure a secure environment before deployment.

Can I automatically fix exposed credentials and weak configurations found during an audit?▼

Yes, you can automatically fix exposed credentials and weak configurations using the auto-fix mode, which remedies common security issues found during the scan.

Do I need node.js and system tools to run a vulnerability scan?▼

Yes, you need node.js and system tools installed to execute the vulnerability scan and run the audit script for checking credentials, ports, and Docker security.

Can I run custom security checks for specific issues like open ports or Docker security?▼

Yes, you can run custom security checks to specifically scan for exposed credentials, open ports, file permissions, weak configurations, and Docker security issues.