Menü
用于 Clawdbot 部署的综合安全审计，检查暴露凭据、开放端口、弱配置和漏洞，并支持自动修复模式。
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
用于任务涉及 ECC、Everything Claude Code、Claude Code 工作流、Codex 适配、Codex 插件、ECC Skill、ECC 规则，或需要把 Claude Code 资产转换为宿析OS Codex 可控使用的场景。
Coordinate project code reviews across PR intake, critical review, coding standards, security, clean-code analysis, and report synthesis.
Use when working on hotel-auto-x Ctrip collection, including Ctrip review collection, bad reviews across ctrip/qunar/tongcheng/zhixing, review score, full daily collection, realtime Ctrip metrics, Ctrip session/profile problems, and Ctrip data mapping into daily_report.
Use when working on hotel-auto-x platform login/session/Profile handling for PMS, Meituan, or Ctrip, including manual login, session checks, expired cookies, browser profile safety, and login-related alerts.
Use when working on hotel-auto-x Meituan collection, including Meituan review collection, bad reviews, review score, full daily collection, realtime traffic/order metrics, ad collection, Meituan session/profile problems, and Meituan data mapping into daily_report.
Use when working on hotel-auto-x PMS collection, including JY01/JY03/hybrid daily report collection, PMS realtime collection, PMS quality gates, PMS session issues, and PMS data entering daily_report or realtime_snapshot.
| name | security-audit |
| description | 用于 Clawdbot 部署的综合安全审计，检查暴露凭据、开放端口、弱配置和漏洞，并支持自动修复模式。 |
Run a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically.
No external dependencies required. Uses native system tools where available.
node skills/security-audit/scripts/audit.cjs
node skills/security-audit/scripts/audit.cjs --full
node skills/security-audit/scripts/audit.cjs --fix
node skills/security-audit/scripts/audit.cjs --credentials # Check for exposed API keys
node skills/security-audit/scripts/audit.cjs --ports # Scan for open ports
node skills/security-audit/scripts/audit.cjs --configs # Validate configuration
node skills/security-audit/scripts/audit.cjs --permissions # Check file permissions
node skills/security-audit/scripts/audit.cjs --docker # Docker security checks
node skills/security-audit/scripts/audit.cjs --full --json > audit-report.json
The audit produces a report with:
| Level | Description |
|---|---|
| 🔴 CRITICAL | Immediate action required (exposed credentials) |
| 🟠 HIGH | Significant risk, fix soon |
| 🟡 MEDIUM | Moderate concern |
| 🟢 INFO | FYI, no action needed |
The --fix option automatically:
security-monitor - Real-time monitoring (available separately)