Expanso Tls Inspect

What This Skill Does

The Expanso Tls Inspect skill, authored by aronchick, is a specialized diagnostic utility designed for OpenClaw agents to perform deep-dive inspections of TLS/SSL certificates. In an era where secure communication is the backbone of infrastructure, managing certificates effectively is paramount. This skill allows an agent to programmatically verify certificate expiry dates, validate Subject Alternative Names (SANs), analyze the full certificate chain, and identify specific cipher suites being offered. By leveraging the expanso-edge runtime, the tool ensures that agents can perform these security checks in real-time without manual intervention, making it an essential component for automated security monitoring and compliance auditing.

Installation

To integrate this skill into your environment, ensure you have the expanso-edge binary installed in your system PATH. Once the prerequisite is met, you can install the skill via the OpenClaw hub using the following command:

clawhub install openclaw/skills/skills/aronchick/expanso-tls-inspect

This command pulls the necessary pipeline-cli.yaml and pipeline-mcp.yaml files required for both standalone execution and integration with Model Context Protocol (MCP) servers. Always verify your skill.yaml configuration after installation to ensure appropriate permissions for external network reach.

Use Cases

This skill is highly versatile for DevOps engineers, security analysts, and system administrators. Primary use cases include: 1) Automated monitoring of website certificate expirations to prevent downtime. 2) Security auditing of internal service communication to ensure compliance with company cipher standards. 3) Debugging SSL/TLS handshake failures in microservices architectures. 4) Verification of SANs for load balancers and proxy configurations to ensure traffic is correctly routed.

Example Prompts

1. "Inspect the TLS configuration for https://api.production.com and check if the certificate expires within the next 30 days."
2. "Verify the full certificate chain for our internal identity provider at https://auth.internal and list all associated SANs."
3. "Check the current cipher suite support for example.com to confirm it meets our TLS 1.3 encryption requirements."

Tips & Limitations

When using the Expanso Tls Inspect skill, ensure that the host machine running the agent has egress access to the target endpoints. Because this tool performs active probes, it may trigger security logs on highly sensitive targets, so use it judiciously in production environments. Furthermore, note that the skill provides data at the time of execution; it does not replace a permanent monitoring solution, though it is excellent for ad-hoc troubleshooting and quick diagnostics. Always check the provided pipeline files to understand the specific input formats required for successful execution.