Security Scanner OpenClaw Plugin & Skill | ClawHub
Looking to integrate Security Scanner into your AI workflows? This free OpenClaw plugin from ClawHub helps you automate web & frontend development tasks instantly, without having to write custom tools from scratch.
What this skill does
Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure. Use when you need to scan targets for vulnerabilities, check SSL certificates, find open ports, detect misconfigurations, or perform security audits. Integrates with nmap, nuclei, and other security tools.
Install
openclaw skills install @dmx64/security-scannernpx clawhub@latest install security-scannerFull SKILL.md
Open original| name | description |
|---|---|
| security-scanner | Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure. Use when you need to scan targets for vulnerabilities, check SSL certificates, find open ports, detect misconfigurations, or perform security audits. Integrates with nmap, nuclei, and other security tools. |
SKILL.md content below is scrollable.
Security Scanner
Automated security scanning toolkit for penetration testing and vulnerability assessment.
Quick Start
Port Scan
nmap -sV -sC -oN scan.txt TARGET
Vulnerability Scan
nuclei -u TARGET -o results.txt
SSL Check
sslscan TARGET
Scan Types
1. Quick Recon
Fast initial scan for live hosts and open ports:
nmap -sn -T4 SUBNET # Host discovery
nmap -F TARGET # Fast port scan (top 100)
2. Full Port Scan
Comprehensive port and service detection:
nmap -p- -sV -sC -A TARGET -oN full_scan.txt
3. Web Application Scan
nuclei -u https://TARGET -t cves/ -t vulnerabilities/ -o web_vulns.txt
nikto -h TARGET -o nikto_report.txt
4. SSL/TLS Analysis
sslscan TARGET
testssl.sh TARGET
Output
Save reports to reports/security-scan-YYYY-MM-DD.md with:
- Target information
- Open ports and services
- Vulnerabilities found (severity rated)
- Recommendations
Ethics
- Only scan authorized targets
- Get written permission before testing
- Report vulnerabilities responsibly
- Never exploit without authorization