security-audit

Automates Clawdbot deployment security audits for credentials, ports, weaknesses and vulnerabilities with optional auto-fix.

38|8|Updated Mar 28, 2026
One-click install
npx skills add https://github.com/yun520-1/mark-heartflow-skill --skill security-audit-yun520-1
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/yun520-1/mark-heartflow-skill/tree/main/skills/security-audit
Command: npx skills add https://github.com/yun520-1/mark-heartflow-skill --skill security-audit-yun520-1

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of identifying security vulnerabilities in Clawdbot deployments, ensuring a secure environment before deployment or on a schedule.

Core Features & Use Cases

  • Comprehensive Security Scanning: Identifies exposed credentials, open ports, weak configurations, and potential vulnerabilities.
  • Auto-Fix Mode: Remedies common issues automatically to enhance security.
  • Custom Scans: Allows users to run specific checks for credentials, ports, configurations, file permissions, and Docker security.

Quick Start

Run a security audit for your Clawdbot deployment using the command: node skills/security-audit/scripts/audit.cjs

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security auditing for Clawdbot deployments?

Automate security auditing for Clawdbot deployments by running `node skills/security-audit/scripts/audit.cjs` to identify vulnerabilities and weak configurations.

What does a security audit scan for in a node.js deployment?

A security audit scans node.js deployments for exposed credentials, open ports, weak configurations, and potential vulnerabilities to ensure a secure environment before deployment.

Can I automatically fix exposed credentials and weak configurations found during an audit?

Yes, you can automatically fix exposed credentials and weak configurations using the auto-fix mode, which remedies common security issues found during the scan.

Do I need node.js and system tools to run a vulnerability scan?

Yes, you need node.js and system tools installed to execute the vulnerability scan and run the audit script for checking credentials, ports, and Docker security.

Can I run custom security checks for specific issues like open ports or Docker security?

Yes, you can run custom security checks to specifically scan for exposed credentials, open ports, file permissions, weak configurations, and Docker security issues.