Security
Security scanning and vulnerability detection
harden
by florianbuetow
This skill should be used when the user asks to "harden code", "security hardening", "improve security posture", "add security headers", "tighten security", "defensive coding suggestions", or "proactive security improvements". Also triggers when the user asks about CSP, CORS hardening, rate limiting, input validation improvements, security logging, or defense-in-depth measures.
integrity
by florianbuetow
This skill should be used when the user asks to "check for integrity issues", "analyze deserialization", "find supply chain vulnerabilities", "review CI/CD security", "check SRI", or mentions "deserialization", "integrity", "pipeline security", "code signing", or "supply chain" in a security context. Maps to OWASP Top 10 2021 A08: Software and Data Integrity Failures.
geo-infer-sec
by ActiveInferenceInstitute
Security and threat detection for geospatial systems. Use when implementing spatial access control, anomaly detection on access patterns, geospatial threat assessment, security auditing, or spatial data anonymization.
business-logic
by florianbuetow
This skill should be used when the user asks to "check business logic security", "find logic flaws", "audit workflow security", "check for coupon abuse", "detect negative amount exploits", "analyze state machine security", or mentions "business logic", "workflow bypass", "negative amount", "coupon abuse", "self-referral", "state manipulation", or "time-based exploit" in a security context.
report
by florianbuetow
This skill should be used when the user asks to "generate security report", "create appsec report", "export findings", "security summary", "findings report", "executive security summary", or "export to SARIF". Also triggers when the user wants a formatted overview of all security findings, remediation progress, scanner coverage, or needs to share security status with stakeholders.
convex-security-audit
by waynesutton
Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations
convex
by waynesutton
Umbrella skill for all Convex development patterns. Routes to specific skills like convex-functions, convex-realtime, convex-agents, etc.
convex-security-check
by waynesutton
Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling
credential-manager
by openclaw
MANDATORY security foundation for OpenClaw. Consolidate scattered API keys and credentials into a secure .env file with proper permissions. Use when setting up OpenClaw, migrating credentials, auditing security, or enforcing the .env standard. This is not optional — centralized credential management is a core requirement for secure OpenClaw deployments. Scans for credential files across common locations, backs up existing files, creates a unified .env with mode 600, validates security, and enforces best practices.
security-first-2025
by JosiahSiegel
Security-first bash scripting patterns for 2025 (mandatory validation, zero-trust)
Moltbook Trust Engine ð§
by openclaw
All versions of all skills that are on clawhub.com archived
aegis-shield
by openclaw
Prompt-injection and data-exfiltration screening for untrusted text. Use before summarizing web/email/social content, before replying, and especially before writing anything to memory. Provides a safe memory append workflow (scan → lint → accept or quarantine).
apple-media
by openclaw
Control Apple TV, HomePod, and AirPlay devices via pyatv (scan, stream, playback, volume, navigation).
security-audit
by openclaw
Minimal helper to audit skill.md-style instructions for supply-chain risks.
skill-vetter
by openclaw
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
bounty-hunter
by openclaw
Automated smart contract bug bounty hunting. Scans Immunefi/Code4rena targets with Slither static analysis, triages findings with local LLMs, and generates PoC templates. Zero API cost for scanning phase.
Heimdall - Security Scanner for AI Agent Skills
by openclaw
GitHub: https://github.com/henrino3/heimdall
aoi-council
by openclaw
AOI Council — multi-perspective decision synthesis templates (public-safe).
clawtributor
by openclaw
Community incident reporting for AI agents. Contribute to collective security by reporting threats.
telegram-body-scan
by openclaw
Run end-to-end body-scan measurement flow in Telegram using AnthroVision bridge tools.
A2A Says Signing Is Optional. That's the Problem.
by openclaw
All versions of all skills that are on clawhub.com archived
arb-injection
by openclaw
"BYOCB ArbInjectionSkill: Scan EVM smart contracts for arbitrary call injection vulnerabilities. Monitor chains in real-time or scan specific addresses."
arb-injection
by openclaw
"BYOCB ArbInjectionSkill: Scan EVM smart contracts for arbitrary call injection vulnerabilities. Monitor chains in real-time or scan specific addresses."
defender-for-devops
by JosiahSiegel
Microsoft Defender for DevOps integration with Azure Pipelines (2025)