References

SX-security-audit v1.0.0 introduces a comprehensive skill for security audits on files, code, dependencies, and systems. - Performs checks on file permissions, world-writable files, dependencies, environment variables, git ignore/security, network ports, shell and macOS security, and secret/key leaks. - Supports CLI usage with selectable modules, severity filtering, JSON output, and custom configuration files. - Integrates precise key/secret detection with regex and entropy checks; covers AWS, GitHub, Slack, OpenAI, JWT, and private keys. - Generates rich, filterable reports with summaries, actionable findings, and can send results in multiple formats to Feishu. - Configuration supports path exclusions, severity thresholds, report formatting, and flexible report delivery via Feishu plugin or webhook.

OpenClaw 分析

The main security-audit tool is plausible, but the package also contains undisclosed unrelated scripts that can send chat messages and process payment files.

置信度: high