Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

CISO Career

v1.0.0

Professional Chief Information Security Officer career development platform that generates personalized roadmaps and specialization guidance.

0· 92·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for krishnakumarmahadevan-cmd/toolweb-ciso-career.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "CISO Career" (krishnakumarmahadevan-cmd/toolweb-ciso-career) from ClawHub.
Skill page: https://clawhub.ai/krishnakumarmahadevan-cmd/toolweb-ciso-career
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install toolweb-ciso-career

ClawHub CLI

Package manager switcher

npx clawhub@latest install toolweb-ciso-career
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The declared purpose (generate personalized CISO career roadmaps) matches the OpenAPI paths and SKILL.md examples; required capabilities are minimal and there are no unrelated env vars or binaries. However the skill provides no server/base URL, no homepage or source link, and no provenance for the claimed expert backing — this makes the deployment/hosting unclear.
Instruction Scope
SKILL.md instructs the agent to call /api/ciso/roadmap and other endpoints with assessment data and shows sample requests/responses. It does not instruct reading local files, environment variables, or performing unrelated actions. Concern: it does not specify the server host or any privacy/retention rules, so callers may be prompted to send potentially sensitive user data to an unspecified destination.
Install Mechanism
No install spec and no code files beyond an OpenAPI document and SKILL.md — instruction-only skill with no downloads or install steps (lowest risk for code delivery).
Credentials
The skill requests no environment variables, credentials, or config paths. The data fields shown (experience, skills, userId) are reasonable for a career roadmap service, but there is no guidance about excluding sensitive PII.
Persistence & Privilege
always is false and there are no indications the skill requests elevated or persistent privileges or modifies other skills' configs.
What to consider before installing
This skill appears to describe a legitimate career-roadmap API but is incomplete: it does not specify the base URL/server, hosting provider, privacy policy, or source homepage. Before installing or using it, ask the publisher for the API base URL, who hosts and stores submitted data, TLS/endpoint security, data retention and deletion policies, and evidence of the claimed expert backing. Do not submit sensitive personal data (SSNs, employer secrets, private contact info) until you confirm where requests are sent and how data is protected. If you cannot verify the host/source, prefer a self-hosted or well-known provider with clear privacy terms.

Like a lobster shell, security has layers — review code before you run it.

latestvk9714bc8zgmm8zannpwyw5drx183rzx0
92downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Overview

The CISO Career Roadmap API is a specialized career development platform designed for security professionals pursuing or advancing into Chief Information Security Officer roles. It leverages industry best practices and structured assessment frameworks to create personalized development pathways tailored to individual experience levels, skill gaps, and career aspirations.

This platform empowers security leaders to identify optimal specialization areas, benchmark their capabilities against industry standards, and access data-driven recommendations for skill development and certification paths. Whether you're transitioning from a security analyst role or stepping into executive leadership, the API provides comprehensive roadmap generation backed by expertise from CISSP and CISM certified professionals.

The ideal users include information security professionals seeking CISO positions, mid-level security managers planning executive transitions, security teams evaluating talent development strategies, and organizations building internal security leadership pipelines.

Usage

Generate a personalized CISO career roadmap based on current skills and goals:

POST /api/ciso/roadmap

{
  "assessmentData": {
    "experience": [
      "Security Operations Center Management",
      "Incident Response Leadership",
      "5 years in security engineering"
    ],
    "skills": [
      "Threat intelligence",
      "Network security",
      "Cloud security",
      "Risk assessment"
    ],
    "grc": [
      "Compliance audits",
      "Policy development",
      "ISO 27001 implementation"
    ],
    "leadership": [
      "Team management",
      "Vendor negotiation",
      "Cross-functional collaboration"
    ],
    "certifications": [
      "CISSP",
      "CEH",
      "CompTIA Security+"
    ],
    "goals": [
      "Achieve CISO role within 2 years",
      "Develop strategic planning expertise",
      "Master enterprise risk management"
    ],
    "sessionId": "sess_12345abcde",
    "timestamp": "2024-01-15T10:30:00Z"
  },
  "sessionId": "sess_12345abcde",
  "userId": 42,
  "timestamp": "2024-01-15T10:30:00Z"
}

Sample Response:

{
  "roadmapId": "roadmap_987654xyz",
  "sessionId": "sess_12345abcde",
  "userId": 42,
  "generatedAt": "2024-01-15T10:30:15Z",
  "currentLevel": "Senior Security Manager",
  "targetRole": "Chief Information Security Officer",
  "timelineMonths": 24,
  "phases": [
    {
      "phase": 1,
      "title": "Strategic Foundation (Months 1-6)",
      "focus": "Enterprise risk management and governance",
      "recommendations": [
        "Complete CISM certification",
        "Lead enterprise risk assessment program",
        "Develop security strategy document"
      ],
      "skillGaps": [
        "Strategic planning",
        "Board-level communication",
        "Enterprise architecture"
      ]
    },
    {
      "phase": 2,
      "title": "Leadership Excellence (Months 7-18)",
      "focus": "Executive presence and organizational impact",
      "recommendations": [
        "Lead security budget planning",
        "Mentor junior security leaders",
        "Present to executive committee quarterly"
      ],
      "skillGaps": [
        "Financial management",
        "Executive decision-making",
        "Organizational change management"
      ]
    }
  ],
  "recommendedSpecializations": [
    "Enterprise Security Architecture",
    "Security Governance & Compliance",
    "Cyber Risk Management"
  ],
  "certificationPath": [
    "CISM (if not yet obtained)",
    "CGEIT (optional)",
    "Advanced Security Leadership programs"
  ],
  "nextActions": [
    "Schedule executive coaching sessions",
    "Identify mentor within organization",
    "Enroll in strategic leadership program"
  ]
}

Endpoints

GET /

Health Check Endpoint

Verifies API availability and service status.

Method: GET

Path: /

Parameters: None

Response: 200 OK - Service is operational (empty JSON object or status confirmation)


POST /api/ciso/roadmap

Generate Personalized CISO Career Roadmap

Creates a customized career development roadmap based on comprehensive assessment data including experience, skills, leadership capabilities, certifications, and professional goals.

Method: POST

Path: /api/ciso/roadmap

Request Parameters:

ParameterTypeRequiredDescription
assessmentDataobjectYesCore assessment information containing skills, experience, and professional details
assessmentData.experiencearray[string]NoList of professional experiences and roles held (default: empty)
assessmentData.skillsarray[string]NoTechnical and professional skills inventory (default: empty)
assessmentData.grcarray[string]NoGovernance, Risk, and Compliance expertise areas (default: empty)
assessmentData.leadershiparray[string]NoLeadership experiences and management capabilities (default: empty)
assessmentData.certificationsarray[string]NoProfessional certifications held (default: empty)
assessmentData.goalsarray[string]NoCareer aspirations and professional objectives (default: empty)
assessmentData.sessionIdstringYesUnique session identifier for tracking
assessmentData.timestampstringYesISO 8601 timestamp of assessment creation
sessionIdstringYesSession identifier matching assessmentData.sessionId
userIdinteger or nullNoOptional user identifier for personalization
timestampstringYesISO 8601 timestamp of request submission

Response: 200 OK - Returns personalized roadmap with phases, recommendations, skill gaps, and certification paths. 422 Unprocessable Entity - Returns validation errors if required fields are missing or malformed.


GET /api/ciso/specializations

Get Available CISO Specialization Areas

Retrieves all available specialization domains that CISO professionals can pursue, including technical, governance, and business-focused tracks.

Method: GET

Path: /api/ciso/specializations

Parameters: None

Response: 200 OK - Returns array of specialization categories with descriptions, required skills, and recommended certifications for each specialization area.


GET /api/ciso/career-paths

Get All CISO Career Development Paths

Provides comprehensive view of multiple career trajectories leading to the CISO role, showing alternative progression routes from different starting positions.

Method: GET

Path: /api/ciso/career-paths

Parameters: None

Response: 200 OK - Returns array of career path objects, each containing starting role, progression stages, estimated timeline, and key transition points.

Pricing

PlanCalls/DayCalls/MonthPrice
Free550Free
Developer20500$39/mo
Professional2005,000$99/mo
Enterprise100,0001,000,000$299/mo

About

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

References

Comments

Loading comments...