📦 IONSEC Threat Intel — 威胁情报查询
v1.0.1一键调用多家威胁情报服务，对IP、域名、URL、文件哈希等IOC进行声誉分析与恶意检测，快速完成安全事件 enrichment。
0· 96·0 当前·0 累计
by @nirhalfon下载技能包
最后更新
2026/4/11
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it claims: aggregate threat-intel from many public and API-key services. Before installing, consider: (1) API keys you provide may be saved to the skill's config.json in the skill directory (you can prefer environment variables instead to avoid writing keys to disk); (2) the skill will create a .cache directory and a rate_limits.json state file next to the skill to store cached responses and rate-limit state; (3) the code contains some bugs/typos (e.g., variable nam...详细分析 ▾
✓ 用途与能力
Name/description (IOC enrichment) match the implemented code. All required API keys and services (VirusTotal, GreyNoise, Shodan, etc.) are relevant to threat-intel functionality. No unrelated credentials or binaries are requested.
ℹ 指令范围
SKILL.md instructs the agent and user to query external TI services and to run an interactive setup that writes keys to a skill-local config.json. The runtime instructions and scripts only reference service endpoints and skill-local files; they do not attempt to read system-wide credentials or unexpected host files. Note: the skill will create and use a .cache directory and a config.json next to the skill to store rate-limit state, cached responses, and optionally saved API keys.
✓ 安装机制
No install spec or external downloads; code is bundled with the skill. Nothing is fetched from arbitrary URLs during install. No installer creates system-wide binaries or writes outside the skill directory.
✓ 凭证需求
The environment variables and API keys mentioned (VT_API_KEY, GREYNOISE_API_KEY, SHODAN_API_KEY, etc.) correspond directly to the external services the skill integrates with. Keys are optional for free-service fallback; using env vars is supported and takes precedence over the local config file.
✓ 持久化与权限
always:false (not forced into every agent run). The skill writes only to its own skill-local files (config.json and a .cache directory) and does not modify other skills or global agent configuration. It may exec the included setup script when explicitly invoked.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/11
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install ionsec-threat-intel
镜像加速npx clawhub@latest install ionsec-threat-intel --registry https://cn.longxiaskill.com