安全
安全扫描与漏洞检测
report
florianbuetow
This skill should be used when the user asks to "generate security report", "create appsec report", "export findings", "security summary", "findings report", "executive security summary", or "export to SARIF". Also triggers when the user wants a formatted overview of all security findings, remediation progress, scanner coverage, or needs to share security status with stakeholders.
convex-security-audit
waynesutton
Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations
convex
waynesutton
Umbrella skill for all Convex development patterns. Routes to specific skills like convex-functions, convex-realtime, convex-agents, etc.
convex-security-check
waynesutton
Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling
credential-manager
openclaw
MANDATORY security foundation for OpenClaw. Consolidate scattered API keys and credentials into a secure .env file with proper permissions. Use when setting up OpenClaw, migrating credentials, auditing security, or enforcing the .env standard. This is not optional — centralized credential management is a core requirement for secure OpenClaw deployments. Scans for credential files across common locations, backs up existing files, creates a unified .env with mode 600, validates security, and enforces best practices.
security-first-2025
JosiahSiegel
Security-first bash scripting patterns for 2025 (mandatory validation, zero-trust)
Moltbook Trust Engine ð§
openclaw
All versions of all skills that are on clawhub.com archived
aegis-shield
openclaw
Prompt-injection and data-exfiltration screening for untrusted text. Use before summarizing web/email/social content, before replying, and especially before writing anything to memory. Provides a safe memory append workflow (scan → lint → accept or quarantine).
apple-media
openclaw
Control Apple TV, HomePod, and AirPlay devices via pyatv (scan, stream, playback, volume, navigation).
security-audit
openclaw
Minimal helper to audit skill.md-style instructions for supply-chain risks.
skill-vetter
openclaw
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
bounty-hunter
openclaw
Automated smart contract bug bounty hunting. Scans Immunefi/Code4rena targets with Slither static analysis, triages findings with local LLMs, and generates PoC templates. Zero API cost for scanning phase.
Heimdall - Security Scanner for AI Agent Skills
openclaw
GitHub: https://github.com/henrino3/heimdall
aoi-council
openclaw
AOI Council — multi-perspective decision synthesis templates (public-safe).
clawtributor
openclaw
Community incident reporting for AI agents. Contribute to collective security by reporting threats.
telegram-body-scan
openclaw
Run end-to-end body-scan measurement flow in Telegram using AnthroVision bridge tools.
A2A Says Signing Is Optional. That's the Problem.
openclaw
All versions of all skills that are on clawhub.com archived
arb-injection
openclaw
"BYOCB ArbInjectionSkill: Scan EVM smart contracts for arbitrary call injection vulnerabilities. Monitor chains in real-time or scan specific addresses."
arb-injection
openclaw
"BYOCB ArbInjectionSkill: Scan EVM smart contracts for arbitrary call injection vulnerabilities. Monitor chains in real-time or scan specific addresses."
defender-for-devops
JosiahSiegel
Microsoft Defender for DevOps integration with Azure Pipelines (2025)
docker-security-guide
JosiahSiegel
Comprehensive Docker security guidelines and threat mitigation strategies
1-SEC Security Platform — Agent Skill
openclaw
All versions of all skills that are on clawhub.com archived
doc-maintenance
NickCrew
"Systematic documentation audit and maintenance. This skill should be used when documentation may be stale, missing, or misorganized — after feature work, refactors, dependency upgrades, or as a periodic health check. It prescribes folder structure for docs/ and manual/, dispatches haiku subagents for codebase/doc scanning, and routes doc creation to specialized agents (reference-builder, technical-writer, learning-guide) with docs-architect as quality gate."
code-quality-workflow
NickCrew
Use when assessing or improving code quality, maintainability, performance, or security hygiene - provides workflows for analysis, code review, and systematic improvements with validation steps.