anduoduo-openclaw-skill

What This Skill Does

The anduoduo-openclaw-skill is a specialized data analysis agent designed for the OpenClaw AI platform to interact with the Anduoduo Cloud Asset Security API. It streamlines the complex process of identifying, aggregating, and reporting on cloud infrastructure risks. Rather than forcing users to manage raw API calls, this skill follows an intelligent progression: starting with diagnostic probing and enumeration, moving to high-level risk aggregation, performing granular rule drill-downs, and finally generating comprehensive HTML summary reports. It effectively turns raw security data into actionable intelligence, ensuring that risks are categorized by compliance standards and severity levels.

Installation

To integrate this skill into your environment, run the following command in your terminal: clawhub install openclaw/skills/skills/anduoduo2025/anduoduo-openclaw-skill

After installation, ensure you have configured your security credentials. The skill prioritizes the ANDUODUO_API_KEY environment variable for authentication, strictly adhering to security protocols that prevent hardcoding or leaking API keys.

Use Cases

• Cloud Risk Audits: Automatically scan for exposed cloud assets and identify misconfigurations across your environment.
• Compliance Reporting: Generate professional HTML compliance summaries for stakeholders, mapping technical findings to regulatory requirements.
• Trend Analysis: Monitor the distribution of high-risk assets over time, providing visibility into the security posture of your cloud infrastructure.
• Automated Drill-down: Rapidly navigate from global risk overviews to specific compliance rules to understand the 'why' behind security alerts.

Example Prompts

1. "帮我看一下当前的云资产整体风险情况，并生成一份分析报告。"
2. "分析一下高风险资产的分布情况，重点关注合规性相关的风险点。"
3. "请对安多多的风险资产进行下钻分析，按照规则汇总一下目前有哪些严重违规。"

Tips & Limitations

• Security First: Never share your API key in plain text within chat conversations unless explicitly requested for memory-only use. The skill never persists your credentials in local files.
• Progressive Disclosure: Always start by asking for an overview before diving into specific rule sets to ensure accurate data context.
• Reporting: The skill is optimized to generate HTML visual reports. Even if not explicitly asked, it is best practice to generate these for comprehensive overviews.
• Authentication: If you encounter 401 errors, ensure your API key has not expired or been revoked via the Anduoduo platform dashboard.