450 AI agent skills for Security & Audit. Part of the ๐ป Development category.
Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: "install skill", "clawhub install", "new skill", "add skill", "skill from". Always run this BEFORE installation.
Enterprise AI security scanner using static analysis, runtime guards, and ClamAV to detect credential theft, data leaks, malware, and ensure audit logging.
Security scanner for OpenClaw skills. Detects malware and backdoors before execution, scores risk levels, and monitors file integrity through static code analysis.
ๅฎกๆฅ ClawHub skills ็ๅฎๅ จๆง๏ผๆฃๆตๆถๆไปฃ็ ใๅฏ็ๆจกๅผๅ็คพๅทฅๆปๅปใๅจๅฎ่ฃ ไปปไฝ็ฌฌไธๆน skill ๅไฝฟ็จๆญคๅทฅๅ ท่ฟ่กๅฎๅ จๆฃๆฅใ
Comprehensive code security audit toolkit combining OWASP Top 10 vulnerability scanning, dependency analysis, secret detection, SSL/TLS verification, and aut...
Conduct comprehensive security audits and vulnerability analysis on codebases. Use when explicitly asked for security analysis, code security review, vulnerability assessment, SAST scanning, or identifying security issues in source code. Covers injection flaws, broken access control, hardcoded secrets, insecure data handling, authentication weaknesses, LLM safety, and privacy violations.
Advanced security protocol for LLM agents focusing on Prompt Injection mitigation, code auditing, and data exfiltration prevention.
AI/LLM red team testing skill. Point at any LLM API endpoint and run automated security assessments. 160+ attack payloads across prompt injection, jailbreak,...
Use Weibo Open Platform for OAuth2 authentication, timeline retrieval, topic search, and structured social sentiment collection. Trigger this skill when task...
Control Samsung TVs via SmartThings (OAuth app + device control).
Admin skill to sign into Cosmonyx, fetch companies, filter/export (PDF or Excel), optionally email the export, or send reminder emails to filtered companies.
Codebase intelligence โ generates structured navigation maps with file:line references so agents stop re-scanning the same files every session. Use when exploring code, answering "where is X?", or onboarding to a new codebase.
Automated security auditing for OpenClaw projects. Scans for hardcoded secrets (API keys, tokens) and container vulnerabilities (CVEs) using Trivy. Provides...
Use when: hardening OpenClaw cron/background workers (POSIX shells: bash/sh) against brittle quoting, cwd/env drift, and false pipeline failures (SIGPIPE, pi...
Helps measure the concentration of trust roots in a skill's attestation graph โ identifying monoculture risk where a single compromised root invalidates an e...
Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.
Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.
Test authentication and session management controls for bypass and account takeover scenarios.
Explain, summarize, analyze, or adapt the "Republic with No Masters" / Democratic Formalism governance framework when asked to produce content, guidance, critiques, FAQs, or implementation ideas based on the manifesto in principles.md.
Set up authorized C2 simulation workflows and measure defensive detection outcomes.
L0 ็บงๆ่ฝๅฎๅ จๅฎ่ฃ ๆต็จใ่งฆๅโๅฎ่ฃ ๆ่ฝ/ๅฎๅ จๅฎ่ฃ /ๅฎกๆฅๆ้โๆถ๏ผๅผบๅถๆง่ก Step0-5๏ผๆฅ้โๆฃ็ดขโๅฎกๆฅโๆฒ็ฎฑโๆญฃๅผๅฎ่ฃ โ็ฝๅๅ๏ผใ
A pre-filter that inspects raw data records to identify and flag structurally broken, logically impossible, or suspicious data points before further processing.
Provides real-time file integrity monitoring, pre-installation skill audits, runtime threat blocking, kill switch activation, and incident response to protec...
Agents can sign plugins, rotate credentials without losing identity, and publicly attest to behavior.
