跳到正文
cccskills
免费在 GitHub 公开

abaddon

Red team security mode for OpenClaw. Runs an adversarial audit on demand or nightly — checks exposed ports, credential leaks, file permissions, suspicious processes, and OpenClaw config posture. Assigns a letter grade. Built for macOS deployments.

中文简介正在准备中。当前显示原文说明。

集成工具Telegram
查看安装方法

包含的文件(4)

  • SKILL.md3.6 KB
  • setup/cron-seed.sh2.7 KB
  • SPEC.md3.0 KB
  • templates/abaddon-prompt.md3.1 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Abaddon ⚔️

Most security audits are defensive — they check what you've locked down. Abaddon runs the other direction. It thinks like an attacker. It looks for what an adversary would find, not just what you remember to check.

On demand or every night at 3:45 AM. Letter grade every time.

What It Checks

Network & Exposure

  • Listening ports — anything bound to 0.0.0.0 is flagged
  • Gateway binding — should be loopback only
  • SSH Remote Login state
  • Active tunnels (ngrok, cloudflared, unexpected remote access)
  • Firewall and stealth mode

System Integrity

  • SIP, FileVault, Gatekeeper
  • macOS version + pending updates
  • XProtect / MRT definitions age

OpenClaw Configuration

  • Exec security mode (full / allowlist / deny)
  • Gateway auth enabled?
  • Unexpected cron entries
  • Unexpected plugins

File Permissions

  • SOUL.md + AGENTS.md: root-owned, 444
  • MEMORY.md, USER.md, AGENT_PROMPT.md, openclaw.json, cron/jobs.json, LaunchAgent plists: 600
  • Flags anything 644 or wider on sensitive paths
  • Plaintext key scan across workspace

API Key Handling

  • Keys in Keychain or flat files?
  • Keys leaking through env vars?
  • Secrets in git history?
  • Hardcoded tokens in .zshrc?

Agent Behavior

  • Memory injection scan (prompt injection attempts in memory files)
  • Sub-agent scope check
  • Unexpected agent permissions

Dependencies

  • Homebrew outdated (flags openclaw, ollama, node)
  • npm global outdated

Scoring

GradeCriteria
A0 CRITICAL, 0 HIGH
B0 CRITICAL, 1–2 HIGH
C1 CRITICAL or 3+ HIGH
D2+ CRITICAL
FActive compromise indicators

Installation

Step 1 — Copy the Abaddon prompt into your agent

If you have Gideon (the OpenClaw observer agent), append the red team section:

cat skills/abaddon/templates/abaddon-prompt.md >> ~/.openclaw/workspace/agents/observer/AGENT_PROMPT.md

If you don't have Gideon, use the standalone agent prompt:

cp skills/abaddon/templates/abaddon-prompt.md ~/.openclaw/workspace/agents/abaddon/AGENT_PROMPT.md

Step 2 — Add the nightly cron

bash skills/abaddon/setup/cron-seed.sh

This adds a 3:45 AM CST cron job to ~/.openclaw/cron/jobs.json. Delivers to Telegram Security topic if configured.

Step 3 — Lock the agent prompt

chmod 600 ~/.openclaw/workspace/agents/observer/AGENT_PROMPT.md

Your detection playbook should never be world-readable.

Usage

Manual trigger — say any of:

  • "run red team"
  • "run Abaddon"
  • "run full assessment"
  • "Abaddon report"

Nightly — fires automatically at 3:45 AM CST after the standard defensive audit (3:30 AM).

Output

Every run produces two things:

  1. Technical report → memory/audits/abaddon-YYYY-MM-DD.md — full command output, evidence, remediation steps
  2. Summary → posted to Telegram Security topic with letter grade

CRITICAL findings trigger an immediate DM alert.

Notes

  • Designed for macOS (Darwin arm64). Most checks work on Linux with minor path adjustments.
  • Assumes OpenClaw gateway is running locally. Remote deployments may need adjusted port/binding checks.
  • Pairs with enoch-tuning — run lock-identity.sh after install to enforce all file permission baselines in one pass.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

name: 4d-compression-core version: 1.0.2 description: "把长内容压缩成结构化向量——节省 60-80% Token,保留核心信息" metadata: { "openclaw": { "emoji": "🌀", "requires": { "bins": ["jq", "awk"] }, "triggers": ["压缩", "4d",...

中文简介正在准备中。当前显示原文说明。

modbender/skill-library-mcp172026年9月28日 更新

Use cheap, TEE-verified AI models from the 0G Compute Network as OpenClaw providers. Discover available models and compare pricing vs OpenRouter, verify provider integrity via hardware attestation (Intel TDX), manage your 0G wallet and sub-accounts, and configure models in OpenClaw with one workflow. Supports DeepSeek, GLM-5, Qwen, and other models available on the 0G marketplace.

中文简介正在准备中。当前显示原文说明。

modbender/skill-library-mcp172026年9月28日 更新

Send and receive P2P messages using disposable numbers and PINs. No servers, no accounts. Use for human notifications, approval flows, and agent-to-agent communication.

中文简介正在准备中。当前显示原文说明。

modbender/skill-library-mcp172026年9月28日 更新

0xarchive

免费

Query historical crypto market data from 0xArchive across Hyperliquid, Lighter.xyz, and HIP-3. Covers orderbooks, trades, candles, funding rates, open interest, liquidations, and data quality. Use when the user asks about crypto market data, orderbooks, trades, funding rates, or historical prices on Hyperliquid, Lighter.xyz, or HIP-3.

中文简介正在准备中。当前显示原文说明。

modbender/skill-library-mcp172026年9月28日 更新

0xwork

免费

Find and complete paid tasks on the 0xWork decentralized marketplace (Base chain, USDC escrow). Use when: the agent wants to earn money/USDC by doing work, discover available tasks, claim a bounty, submit deliverables, check earnings or wallet balance, or set up as a 0xWork worker. Task categories: Writing, Research, Social, Creative, Code, Data. NOT for: posting tasks (use the website), managing the 0xWork platform, or frontend development.

中文简介正在准备中。当前显示原文说明。

modbender/skill-library-mcp172026年9月28日 更新

Patterns and practices that dramatically accelerate development velocity. Covers parallel execution, automation, feedback loops, workflow optimization, and anti-pattern avoidance. Use when starting projects, planning sprints, optimizing workflows, or onboarding developers.

中文简介正在准备中。当前显示原文说明。

modbender/skill-library-mcp172026年9月28日 更新

查看 modbender 的全部技能

报告此技能的问题