ClawKit Logo
ClawKitReliability Toolkit
Back to Registry
Official Verified

security-scanner

Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure. Use when you need to scan targets for vulnerabilities, check SSL certificates, find open ports, detect misconfigurations, or perform security audits. Integrates with nmap, nuclei, and other security tools.

skill-install — Terminal

Install via CLI (Recommended)

clawhub install openclaw/skills/skills/dmx64/security-scanner
Or

Security Scanner

Automated security scanning toolkit for penetration testing and vulnerability assessment.

Quick Start

Port Scan

nmap -sV -sC -oN scan.txt TARGET

Vulnerability Scan

nuclei -u TARGET -o results.txt

SSL Check

sslscan TARGET

Scan Types

1. Quick Recon

Fast initial scan for live hosts and open ports:

nmap -sn -T4 SUBNET  # Host discovery
nmap -F TARGET       # Fast port scan (top 100)

2. Full Port Scan

Comprehensive port and service detection:

nmap -p- -sV -sC -A TARGET -oN full_scan.txt

3. Web Application Scan

nuclei -u https://TARGET -t cves/ -t vulnerabilities/ -o web_vulns.txt
nikto -h TARGET -o nikto_report.txt

4. SSL/TLS Analysis

sslscan TARGET
testssl.sh TARGET

Output

Save reports to reports/security-scan-YYYY-MM-DD.md with:

  • Target information
  • Open ports and services
  • Vulnerabilities found (severity rated)
  • Recommendations

Ethics

  • Only scan authorized targets
  • Get written permission before testing
  • Report vulnerabilities responsibly
  • Never exploit without authorization

Metadata

Author@dmx64
Stars2387
Views1
Updated2026-03-09
View Author Profile
AI Skill Finder

Not sure this is the right skill?

Describe what you want to build — we'll match you to the best skill from 16,000+ options.

Find the right skill
Add to Configuration

Paste this into your clawhub.json to enable this plugin.

{
  "plugins": {
    "official-dmx64-security-scanner": {
      "enabled": true,
      "auto_update": true
    }
  }
}
Safety NoteClawKit audits metadata but not runtime behavior. Use with caution.