Security
Security scanning and vulnerability detection
brand-analyzer
by auldsyababua
This skill should be used when the user requests brand analysis, brand guidelines creation, brand audits, or establishing brand identity and consistency standards. It provides comprehensive frameworks for analyzing brand elements and creating actionable brand guidelines based on requirements.
soc2-compliance
by peixotorms
Use when building SaaS platforms, cloud services, customer-facing APIs, multi-tenant systems, or any service handling customer data that requires SOC 2 certification — Trust Services Criteria, TSC, CC1 through CC9, Type I, Type II, AICPA, security, availability, processing integrity, confidentiality, privacy, evidence collection, vendor management, penetration testing, risk assessment, access review, change management, incident response
Security Check Skill
by hitoshura25
Consider additional security reviews for sensitive changes
security-hardening
by 1Mangesh1
Security hardening and secure coding practices. Use when user asks to "harden security", "secure coding", "OWASP vulnerabilities", "input validation", "sanitization", "SQL injection prevention", "XSS protection", "CORS security", "secure headers", "vulnerability scanning", or mentions security best practices and threat mitigation.
secret-scanner
by 1Mangesh1
This skill should be used when the user asks to "scan for secrets", "find API keys", "detect credentials", "check for hardcoded passwords", "find leaked tokens", "scan for sensitive keys", "check git history for secrets", "audit repository for credentials", or mentions secret detection, credential scanning, API key exposure, token leakage, password detection, or security key auditing.
rust-fintech
by peixotorms
Use when building financial, trading, or payment systems in Rust. Covers money handling, financial calculations, rounding, decimal precision with rust_decimal and BigDecimal, currency newtypes, ledger, journal entry, reconciliation, idempotency, ACID transactions, regulatory compliance, immutable transaction records, audit trails, checked arithmetic, and double-entry patterns.
suggesting-improvements
by C0ntr0lledCha0s
Expert at suggesting specific, actionable improvements to Claude's responses and work. Use when Claude's output needs enhancement, when quality issues are identified, or when iterating on solutions.
backend-development
by vibery-studio
Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.
Feature Development Skill
by hitoshura25
This skill references all of them in the proper order.
creative-writer
by dgriffin831
Help agents write creative content
product-management
by ProjAnvil
Expertise in product management lifecycle, from ideation to launch. Covers requirements gathering, user story creation, prioritization, and product strategy. Use this skill for product planning, writing PRDs, defining MVPs, or competitive analysis.
context-audit
by HJewkes
Audit context window composition and identify optimization targets.
agentic-structure
by BackGwa
Collaborative programming framework for production-ready development. Use when starting features, writing code, handling security/errors, adding comments, discussing requirements, or encountering knowledge gaps. Applies to all development tasks for clear, safe, maintainable code.
skill-scan
by dgriffin831
Security scanner for OpenClaw skill packages. Scans skills for malicious code, evasion techniques, prompt injection, and misaligned behavior BEFORE installation. Use to audit any skill from ClawHub or local directories.
openclaw-doctor
by AnthemFlynn
"Comprehensive OpenClaw diagnostic audit — an agent-on-agent health check. Use when asked to check system health, diagnose issues, or audit OpenClaw subsystems. Covers gateway, security, channels, models, memory, context, heartbeat, hooks, skills, workspace integrity, and network."
sox-compliance
by peixotorms
Use when building financial reporting systems, accounting software, ERP integrations, payment reconciliation, ledger systems, audit trails, or any code handling financial data at publicly traded companies — SOX Section 302, Section 404, ITGC, IT General Controls, segregation of duties, SoD, change management, access review, audit trail, hash chain, WORM storage, 7-year retention, COSO framework, material weakness, internal controls, audit logging
system-architect
by liauw-media
"Use when performing security audits or system hardening. Teaches security assessment principles and prioritization."
compounder
by vxcozy
Weekly review partner that compounds productivity gains over time. Tracks velocity, logs friction, sets next-week targets, recognizes patterns across weeks, and feeds insights back to the audit for the next loop. Use when you want a weekly review, need to identify friction, want to see patterns, or want to update your system map. Part of the architect-system loop. Outputs to system/compounder/week-{date}.md.
code-review
by liauw-media
"Self-review before declaring work complete"
quality-gate
by terraphim
Right-side-of-V verification/validation orchestration for a change or PR. Produces a single Quality Gate Report with evidence covering: code review, security audit, performance regression risk, requirements traceability, acceptance/UAT scenarios, and (when UI changes) visual regression testing. Use when preparing a PR for merge/release, doing a “ready?” check, or enforcing an engineering quality gate.
api-helper
by dgriffin831
Helps configure API connections
solana-security-auditor
by x4484
Audit Anchor programs for common vulnerabilities. Reentrancy, PDA collisions, missing signer checks, and pre-deploy security checklists.
Security Setup Skill
by hitoshura25
Create runbook for handling vulnerabilities
openclaw-admin
by AnthemFlynn
"Fix, configure, tune, or troubleshoot OpenClaw. Use for config changes, security fixes, performance tuning, doctor --fix, or when openclaw-doctor flags issues that need remediation."