cyberlens

---

name: cyberlens-security-scanner description: Scan websites, GitHub repositories, and Claw Hub skills for security vulnerabilities before you ship, install, or trust them. Supports live web targets (headers, HTTPS, exposed tech, insecure forms), GitHub repos (dependencies, secrets, malicious code), and Claw Hub skill packages (trust posture, behavioural analysis). Returns a 0-100 security score, letter grade (A-F), AI-powered analysis, and plain-English remediation. Export results as formatted markdown or PDF. Use when the user wants to audit a URL, check a skill before installing, scan a repo for vulnerabilities, or generate a security report.

CyberLens Security Scanner

Stop guessing whether that website, repo, or skill is safe. CyberLens gives you a security score, a letter grade, and clear remediation steps in seconds.

What You Get

Website scanning has two honest modes: a local quick scan without an account and a full cloud scan when connected. The local quick scan covers ~15 core checks; the cloud scan runs 70+ checks with richer analysis.

Repository scanning analyses GitHub repos for dependency vulnerabilities, leaked secrets, malicious code patterns, and trust posture issues.

Claw Hub skill scanning downloads the skill package, extracts it, and analyses the actual source code for dangerous patterns, hardcoded secrets, permission issues, and dependency risks. Paste a Claw Hub URL or a direct download link and CyberLens handles the rest. No account required for skill scanning.

Every scan returns a 0-100 security score, an A-F letter grade, and plain-English remediation advice. Results can be viewed as formatted markdown in chat or exported as a professional PDF.

Quick Start

clawhub install cyberlens-security-scanner

1. Scan something

Just tell your agent what to scan:

• "Check this skill before I install it: https://clawhub.ai/author/skill-name"
• "Scan https://example.com for security issues"
• "Audit https://github.com/owner/repo for vulnerabilities"
• "Give me a quick security score for https://example.com"

CyberLens auto-detects the target type and selects the right scan method. Website quick scans and Claw Hub skill scans work immediately with no account. Repository scans require a connected account.

2. Connect your account (for cloud scans)

Without an account, website scans use the local quick scanner and repository scans stay unavailable. Connect your account to upgrade website scans to the full cloud path and unlock repository scanning. The connect_account tool opens a browser, completes authentication, and stores your API key locally. Free accounts get 5 cloud scans/month (3 website + 2 repository). No credit card required. If you exhaust website cloud quota, the skill opens the CyberLens pricing page and falls back to the local quick scan automatically.

Don't have an account? Sign up at cyberlensai.com.

3. Get your report

After any scan, choose how you want results delivered:

• In chat via generate_report (formatted markdown)
• As a PDF via export_report_pdf (Security Assessment Dossier with an executive assessment, severity ledger, and complete technical evidence)

---

Tools

scan_skill

Scan a Claw Hub skill before installing it. This is the primary tool for vetting OpenClaw skills from the Claw Hub marketplace.

The skill package is downloaded, extracted, and analysed locally -- no CyberLens account required. Accepts Claw Hub URLs (the download link is resolved automatically) or direct download URLs.

Parameters:

• skill_url (required) -- Claw Hub skill URL (e.g. https://clawhub.ai/skills/skill-name) or direct download URL
• timeout -- Request timeout in seconds (default: 60)

Example prompts:

• "Scan https://clawhub.ai/skills/ontology before I install it"
• "Is this Claw Hub skill safe? https://clawhub.ai/author/skill-name"
• "Check this skill for malicious code before I install it"

Returns: Security score, grade (A-F), assessment, and detailed findings with file locations (dangerous code patterns, hardcoded secrets, manifest issues, dependency problems, external URLs).

scan_target

Scan a live website, GitHub repository, or Claw Hub skill URL. CyberLens auto-detects the target type.

Parameters:

• target (required) -- Website URL, GitHub repository URL, or Claw Hub skill URL
• scan_depth -- Requested depth: "quick", "standard" (default), or "deep". Local website mode always uses the quick scan and warns when a deeper mode was requested.
• timeout -- Request timeout in seconds (default: 30)
• use_cloud -- Force cloud (true) or local (false). Repository scans require cloud.

Example prompts:

• "Scan https://clawhub.ai/author/skill-name for security issues"
• "Scan https://example.com for security issues"
• "Scan https://github.com/shadoprizm/cyberlens-skill before I install it"

connect_account

Connect or reconnect your CyberLens account for cloud-powered scanning.

Example prompt: "Connect my CyberLens account"

scan_website

Scan a website for security vulnerabilities. Uses the local quick engine without an account and the full cloud API when connected.

Parameters:

• url (required) -- The URL to scan (must include https:// or http://)
• scan_depth -- Requested depth: "quick", "standard" (default), or "deep". Local website mode always uses the quick scan and warns when a deeper mode was requested.
• timeout -- Request timeout in seconds (default: 30)
• use_cloud -- Force cloud (true) or local (false). Auto-detects by default.

Example prompts:

• "Scan https://example.com for security issues"
• "Run the full cloud website scan for https://mysite.com"
• "Check if https://example.com is secure"

Returns: Score (0-100), grade (A-F), findings with severity/description/remediation, scan source (cloud or local), and explicit mode metadata showing whether this was a local quick scan or the full cloud scan.

scan_repository

Scan a GitHub repository for security issues. Requires a connected CyberLens account.

Parameters:

• repository_url (required) -- GitHub repository URL (e.g. https://github.com/owner/repo)
• timeout -- Request timeout in seconds (default: 60)
• use_cloud -- Force cloud (true) or local (false). Repository scans require cloud access.

Example prompts:

• "Scan https://github.com/shadoprizm/cyberlens-skill for repo vulnerabilities"
• "Audit this OpenClaw skill before I install it"
• "Check my GitHub repo for security issues"

Returns: Repository security score, trust score, aggregated findings, and the underlying repository assessment sections from CyberLens cloud analysis.

generate_report

Generate a formatted markdown report from any scan result. Suitable for sharing in Telegram, Discord, Signal, the web UI, or any channel that renders markdown.

Parameters:

• scan_result (required) -- The result returned by any CyberLens scan tool

Example prompts:

• "Show me the report in chat"
• "Give me a summary of the scan results"
• "Share the findings here"

Returns: A clean markdown report with score cards, AI analysis, summary, and severity-sorted findings.

export_report_pdf

Export scan results as a professionally formatted PDF file with colour-coded severity indicators and full findings detail.

Parameters:

• scan_result (required) -- The result returned by any Cyb