Agent skill · security · sundial-org
security-audit
Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.
Why this skill is useful
Adds executable scripts for comprehensive security auditing and auto-fixing vulnerabilities that aren't covered in standard practices.
What it needs
About 1k tokens when loaded. Last updated 2026-03-07. 639 stars on the source repository.
What this skill does
Security Audit Skill When to use Run a security audit to identify vulnerabilities in your Clawdbot setup before deployment or on a schedule. Use auto-fix to remediate common issues automatically. Setup No external dependencies required. Uses native system tools where available. How to Quick audit (common issues) Full audit (comprehensive scan) Auto-fix common issues Audit specific areas Generate report Output The audit produces a report with: Level Description ------- ------------- 🔴 CRITICAL Immediate action required (exposed credentials) 🟠 HIGH Significant risk, fix soon 🟡 MEDIUM Moderate concern 🟢 INFO FYI, no action needed Checks Performed Credentials API keys in environment files Tokens in command history Hardcoded secrets in code Weak password patterns Ports Unexpected open ports Services exposed to internet Missing firewall rules Configs Missing rate limiting Disabled authentication Default credentials Open CORS policies Files World-readable files Executable by anyone Sensitive files in public dirs Docker Privileged containers Missing resource limits Root user in container Auto-Fix The --fix option automatically: Sets restrictive file permissions (600 on .env) Secures sensitive configuration files Creates .gitignore if missing Enables basic security headers Related skills security-monitor - Real-time monitoring (available separately)
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sundial-org/security-audit