القائمة
用于 Clawdbot 部署的综合安全审计，检查暴露凭据、开放端口、弱配置和漏洞，并支持自动修复模式。
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
用于任务涉及 ECC、Everything Claude Code、Claude Code 工作流、Codex 适配、Codex 插件、ECC Skill、ECC 规则，或需要把 Claude Code 资产转换为宿析OS Codex 可控使用的场景。
Coordinate project code reviews across PR intake, critical review, coding standards, security, clean-code analysis, and report synthesis.
Use when working on hotel-auto-x Ctrip collection, including Ctrip review collection, bad reviews across ctrip/qunar/tongcheng/zhixing, review score, full daily collection, realtime Ctrip metrics, Ctrip session/profile problems, and Ctrip data mapping into daily_report.
Use when working on hotel-auto-x platform login/session/Profile handling for PMS, Meituan, or Ctrip, including manual login, session checks, expired cookies, browser profile safety, and login-related alerts.
Use when working on hotel-auto-x Meituan collection, including Meituan review collection, bad reviews, review score, full daily collection, realtime traffic/order metrics, ad collection, Meituan session/profile problems, and Meituan data mapping into daily_report.
Use when working on hotel-auto-x PMS collection, including JY01/JY03/hybrid daily report collection, PMS realtime collection, PMS quality gates, PMS session issues, and PMS data entering daily_report or realtime_snapshot.
| name | security-audit |
| description | 用于 Clawdbot 部署的综合安全审计，检查暴露凭据、开放端口、弱配置和漏洞，并支持自动修复模式。 |
Run a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically.
No external dependencies required. Uses native system tools where available.
node skills/security-audit/scripts/audit.cjs
node skills/security-audit/scripts/audit.cjs --full
node skills/security-audit/scripts/audit.cjs --fix
node skills/security-audit/scripts/audit.cjs --credentials # Check for exposed API keys
node skills/security-audit/scripts/audit.cjs --ports # Scan for open ports
node skills/security-audit/scripts/audit.cjs --configs # Validate configuration
node skills/security-audit/scripts/audit.cjs --permissions # Check file permissions
node skills/security-audit/scripts/audit.cjs --docker # Docker security checks
node skills/security-audit/scripts/audit.cjs --full --json > audit-report.json
The audit produces a report with:
| Level | Description |
|---|---|
| 🔴 CRITICAL | Immediate action required (exposed credentials) |
| 🟠 HIGH | Significant risk, fix soon |
| 🟡 MEDIUM | Moderate concern |
| 🟢 INFO | FYI, no action needed |
The --fix option automatically:
security-monitor - Real-time monitoring (available separately)