安全
安全扫描与漏洞检测
vuln-check
ccch1mneyyy
Check resolved dependencies and relevant code paths for security vulnerabilities. Use for security checks or /vuln-check; use audit for a broader correctness and maintainability assessment.
openclaw-audit-watchdog
prompt-security
Automated daily security audits for OpenClaw agents with email reporting. Runs deep audits and sends formatted reports.
n8n-security-testing
proffesor-for-testing
"Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security."
secure-code-guardian
Jeffallan
Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention.
fullstack-guardian
Jeffallan
Use when implementing features across frontend and backend, building APIs with UI, or creating end-to-end data flows. Invoke for feature implementation, API development, UI building, cross-stack work.
code-review
NousResearch
Guidelines for performing thorough code reviews with security and quality focus
blogwatcher
NousResearch
Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI. Add blogs, scan for new articles, and track what you've read.
octocode-roast
bgauryy
This skill should be used when the user asks to "roast my code", "review code brutally", "find code sins", "what's wrong with my code", "shame my code", "critique this code", "find antipatterns", "code quality roast", or wants entertaining but actionable code criticism with severity-ranked fixes. Delivers brutally honest roasts with file:line citations and redemption paths.
Security Standards
HoangNguyen0403
Universal security protocols for building safe and resilient software.
skill-security-framing
nyldn
URL validation and content wrapping for untrusted sources. Use when: This skill provides SECURITY UTILITIES - it should be referenced by other skills,. not invoked directly by users. Auto-integrate when:. Fetching content from URLs
skill-claw
nyldn
OpenClaw instance administration — manage hosts across macOS, Ubuntu/Debian, Docker, OCI, and Proxmox. Use when: AUTOMATICALLY ACTIVATE when user asks about:. "manage openclaw" or "openclaw status" or "openclaw health". "update openclaw" or "upgrade openclaw" or "openclaw doctor"
octopus-quick-review
nyldn
Fast pre-commit code review using multi-AI consensus. Use when: Use this skill when the user says "review this code", "check this PR",. "quality check the implementation", "review my changes", or "what's wrong with this code".
skill-validate
nyldn
Multi-AI validation combining debate, quality scoring, and issue extraction
octopus-security-audit
nyldn
OWASP compliance, vulnerability scanning, and penetration testing
skill-audit
nyldn
Systematic codebase auditing with comprehensive checklists. Use when: AUTOMATICALLY ACTIVATE when user requests auditing:. "audit and check the entire app". "audit X for Y" or "check for broken features"
skill-iterative-loop
nyldn
Execute tasks in loops with conditions until goals are met. Use when: AUTOMATICALLY ACTIVATE when user requests iterative execution:. "loop X times" or "loop around N times". "loop around 5 times auditing, enhancing, testing"
clawsec-clawhub-checker
prompt-security
ClawHub reputation checker for ClawSec suite. Enhances guarded skill installer with VirusTotal Code Insight reputation scores and additional safety checks.
deploy
awslabs
"Deploy applications to AWS. Triggers on phrases like: deploy to AWS, host on AWS, run this on AWS, AWS architecture, estimate AWS cost, generate infrastructure. Analyzes any codebase and deploys to optimal AWS services."
compliance-testing
proffesor-for-testing
"Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data."
browser-5e5f1396
FuRongJun-1999
扫码 / 浏览器-扫码 / scan 检。用户提到这些词时使用本技能。 场景：对照：BarcodeDetector——条码/二维码检测与缓存。 【不适用】Not for 以下场景：op 非 {cache, last, scan} 时
code-review-specialist
luongnv89
Comprehensive code review with security, performance, and quality analysis. Use when users ask to review code, analyze code quality, evaluate pull requests, or mention code review, security analysis, or performance optimization.
spring-boot-security-jwt
giuseppe-trisciuoglio
Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
Domain Monitoring
nexscope-ai
E-commerce skills for AI agents — product research, marketing automation, supply chain optimization, and business analytics for online sellers across Amazon, Shopify, Etsy, TikTok Shop, and all platforms.
vuln-analysis-expert
tanweai
WooYun漏洞分析专家系统。基于88,636个真实漏洞案例提炼的元思考方法论、测试流程、利用技巧、绕过方法。覆盖SQL注入、XSS、命令执行、逻辑漏洞、文件上传、未授权访问等主要漏洞类型。当用户进行漏洞挖掘、渗透测试、安全审计、代码审计时触发。