Comprehensive system security auditing: multi-source CVE scanning, CIS compliance checks, network exposure analysis, performance benchmarks.
---
name: system-auditor
description: "Comprehensive system security auditing: multi-source CVE scanning, CIS compliance checks, network exposure analysis, performance benchmarks."
metadata:
openclaw:
requires:
bins: ["systemctl", "uname", "ufw"]
---
# System Auditor — Enterprise Edition
Complete system security audit in one command. Scans CVEs from NVD, Ubuntu, and CIRCL databases. Checks firewall rules, SSH configuration, kernel parameters, and running services. Generates compliance-ready reports.
## Capabilities
- **CVE Scanning**: Multi-source (NVD + Ubuntu + CIRCL), kernel-specific filtering
- **Security Posture**: UFW rules, SSH config, fail2ban status, open ports
- **Compliance**: CIS benchmark alignment with automated fix suggestions
- **Performance**: CPU/memory/disk benchmarks with historical comparison
- **Reporting**: JSON, HTML, and PDF audit reports
## Example
```bash
# Full security audit
clawhub run system-auditor --audit
# CVE scan only
clawhub run system-auditor --cve-only
# Generate compliance report
clawhub run system-auditor --compliance --format pdf
```
## Edition Comparison
| Feature | Free | Pro ($7.99) | Enterprise ($14.99) |
|---------|:----:|:---------:|:-----------------:|
| Basic system info | ✅ | ✅ | ✅ |
| Kernel version check | ✅ | ✅ | ✅ |
| Open port scan | ✅ | ✅ | ✅ |
| CVE vulnerability scan | — | ✅ | ✅ |
| Security posture check | — | ✅ | ✅ |
| Compliance report (CIS) | — | ✅ | ✅ |
| CVE fix suggestions | — | ✅ | ✅ |
| Continuous monitoring | — | — | ✅ |
| Custom compliance policies | — | — | ✅ |
| SLA support | — | — | ✅ |
---
## 💼 Enterprise & Custom Development
Need a custom version with priority support, SLA, or specific features?
📧 **Contact us:** `vip@kingai.work`
*This skill is 100% free. Custom enterprise versions available on request.*
don't have the plugin yet? install it then click "run inline in claude" again.