fofamap
Use this skill when the user wants FOFA-based asset discovery, host profiling, distribution statistics, icon_hash generation, query refinement after zero-result searches, or cautious follow-up vulnerability triage. It is for security recon tasks that need deterministic FOFA API calls instead of an interactive CLI.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/asaotomo/fofamapfofamap
Overview
This skill turns natural-language recon requests into a stable FOFA workflow:
- pick the right FOFA operation,
- detect the FOFA membership tier and capability profile,
- run deterministic API calls through
scripts/fofa_recon.py, - broaden the search when FOFA returns no useful data,
- verify live web reachability when it matters,
- track inventory drift with snapshot comparisons when the task is recurring,
- export clean handoff files when the user needs deliverables,
- summarize findings with clear caveats and next steps,
- learn from prior runs so the next query, report, and handoff improve.
This skill is distilled from the FofaMap project, but packaged for skill use instead of an interactive application. The host agent should do the reasoning, and the helper script should do the FOFA API work. The workflow keeps the project's key tactics: action routing, permission-aware field selection, zero-result reflection, live reachability verification, export-oriented delivery, and targeted follow-up suggestions. It now also keeps a bounded local memory so the skill can reflect on failed runs, recurring friction, and strong report patterns without turning into an uncontrolled self-modifying black box.
For setup, the user only needs to provide FOFA credentials:
FOFA_EMAILFOFA_API_KEY
When To Use
Use this skill when the user asks for any of the following:
- find exposed assets, subdomains, services, or product fingerprints with FOFA
- profile a single IP or domain with FOFA host aggregation
- analyze distribution data such as country, port, title, ASN, or organization rankings
- run recurring asset monitoring and compare new, removed, or changed exposures
- derive an
icon_hashquery from a target website - retry a failed FOFA search with broader, smarter fallback queries
- decide whether the findings justify a separate validation step such as
nuclei
Do not use this skill for:
- general web scraping unrelated to FOFA
- active exploitation by default
- network scanning without explicit user approval
- tasks that require guaranteed real-time validation beyond FOFA's indexed data
Quick Start
If credentials are not configured yet, read references/setup.md.
Required credentials for this skill:
- FOFA email
- FOFA API key
Core helper:
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-asaotomo-fofamap": {
"enabled": true,
"auto_update": true
}
}
}