gomboc-securityAutomatically scan and deterministically fix security issues in Terraform, CloudFormation, and IaC with merge-ready pull requests and CI/CD integration.
Install via ClawdBot CLI:
clawdbot install gomboc-ai/gomboc-securityGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → http://localhost:3100/scanCalls external URL not in known-safe list
https://app.gomboc.aiAI Analysis
The skill sends code to the vendor's documented API (gomboc.ai) for analysis, which is consistent with its stated purpose of code remediation. While this involves external data transmission, it appears to be a legitimate service integration with user-provided authentication, not hidden credential harvesting or unauthorized exfiltration.
Audited Apr 16, 2026 · audit v1.0
Usage Guide
Loading usage data… refresh in a few seconds.
Scored Apr 19, 2026
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
Essential Git commands and workflows for version control, branching, and collaboration.
通过网页抓取获取 GitHub 按日/周/月增长的热门仓库。当用户询问 GitHub 趋势、热门项目、本周热点或「什么在 GitHub 上 trending」时使用。可输出列表或 JSON，无需 API Key。
GitHub 操作技能 - 创建仓库、推送代码、管理 Release。全自动，无需用户干预。
Semantic git history search and code archaeology. Use when asked why code exists, who owns a file, what introduced a regression, what changed in a commit ran...
Deep-dive analysis of GitHub projects. Use when the user mentions a GitHub repo/project name and wants to understand it — triggered by phrases like "帮我看看这个项目...