Skill rating

Achieve SOC 2 Type II compliance for SaaS — Trust Service Criteria, evidence collection, and controls implementation. Use when preparing for a SOC 2 audit, meeting B2B SaaS security requirements, or o

Check color contrast ratios for WCAG accessibility compliance. Use when: auditing UI components for accessibility, validating color schemes meet AA/AAA standards, fixing low-contrast text in designs.

Implement GDPR/ePrivacy-compliant cookie consent management. Use when adding a cookie banner, managing marketing consent, achieving GDPR compliance for EU users, or integrating consent management with

Automatically test APIs by generating test cases from OpenAPI/GraphQL schemas. Use when tasks involve API fuzzing, finding edge cases in REST or GraphQL APIs, testing schema compliance, generating pro

Audit Wi-Fi networks with the aircrack-ng suite. Use when a user asks to test their own wireless network, capture WPA2 handshakes, crack captured handshakes offline, put an adapter into monitor mode,

Check for data breaches and credential leaks using HaveIBeenPwned API and other sources. Use when: checking if an email or domain is in a known breach, assessing corporate credential exposure, passwor

Perform network reconnaissance with Nmap. Use when a user asks to scan networks, discover hosts and services, detect OS versions, find open ports, enumerate service versions, or perform initial reconn

SpiderFoot automated OSINT framework with 200+ modules for comprehensive target profiling. Use when: running automated OSINT investigations on a target, correlating data across dozens of sources, buil

Assists with finding security vulnerabilities in web applications using OWASP ZAP. Use when configuring automated scans, writing scan policies, integrating security scanning into CI/CD pipelines, or a

Identify web technologies, frameworks, CMS platforms, and server configurations on target websites. Use when tasks involve web technology fingerprinting, identifying CMS versions (WordPress, Drupal, J

perform concise malware triage, focused IOC extraction, infrastructure hunting, and markdown report writing on remnux when the user supplies a suspicious file path, archive, hash, or chat attachment.

CCPA Compliance Audit — California Consumer Privacy Act (CCPA, Cal. Civ. Code §1798.100 et seq.) & CPRA amendment. Free compliance audit skill covering 20 core CCPA/CPRA items. Scoring runs on the CQ

Local VAIBot Guard skill for OpenClaw. Use to run the guard service, enforce tool decisions via the OpenClaw circuit-breaker plugin, manage approvals, and validate guard receipts/audit logs. Also use

ClawdChat CLI (Official) — AI Agent social network + universal tool gateway via command line. Social: post, comment, upvote, mention, DM, circles, A2A messaging. Tool gateway: 2000+ tools (130+ server

AI-powered email writing, review, and compliance checking. Generate templates, optimize subject lines, audit for spam triggers, and check CAN-SPAM/GDPR/CASL compliance. Powered by evolink.ai

AI security toolkit — deepfake detection, prompt injection scanning, malware/phishing URL scanning, and AI text detection. Use when: (1) verifying if an image, video, or audio is a deepfake or AI-gene

Pesticide management reference — chemical classes, application methods, IPM strategies, residue limits, safety protocols. Use when selecting pest control products, calculating spray rates, or managing

Web accessibility & WCAG compliance scanner — detects WCAG 2.1 violations, missing ARIA attributes, color contrast issues, keyboard navigation problems, and semantic HTML failures across HTML, JSX, Vu

Optimize review request timing, channel, and messaging to maximize review collection rates and star ratings. Use when an ecommerce seller wants to lift review velocity, improve star average, or fix a

跨平台视频内容产品的六阶段产品管理工作流（需求规划→PRD→评审→研发→测试→复盘），遵循 EARS 需求描述原则。Use when 撰写视频翻译/字幕/多平台分发类 SaaS 产品的 PRD，或组织此类产品的设计评审、研发跟进与上线验收。

Vercel's comprehensive UI guidelines for building accessible, performant web interfaces. Use this skill when reviewing or building UI components for compliance with best practices around accessibility

Deep threat modeling workflow—system decomposition, trust boundaries, STRIDE-style threats, mitigations, prioritization, and tracking. Use when designing new features, reviewing architecture, or respo

Use this skill when a licensed customs broker, import compliance manager, or trade-compliance team needs to prepare a CBP entry summary draft for a commercial import shipment into the United States. C

Use this skill when a capture manager, proposal writer, BD lead, or contracts professional at a U.S. federal contractor needs to draft a compliant proposal response to a government RFP, RFQ, IDIQ task

Discord server management CLI. Use when you need to manage Discord servers — channels, roles, permissions, messages, embeds, file uploads, emojis, invites, audit logs, server settings. Send images, bu

Huawei Cloud MRS cluster alarm diagnosis skill. Analyzes the root cause of an MRS alarm based on user-provided alarm information (alarm ID, alarm name, alarm details, occurrence time, node IP, related

Assess WordPress installations for common vulnerabilities and WordPress 7.0 attack surfaces.

Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements.

Create a new specification file for the solution, optimized for Generative AI consumption.

Agent-to-agent messaging with cryptographic signing and encryption. Send structured messages through the ClawHub relay.

Test authentication and session management controls for bypass and account takeover scenarios.

Generate a formal Japanese corporate-style HTML document and PDF (日本企業向け正式報告書). Triggered when user asks to create a Japanese business report, compliance document, security overview, or 日本語報告書.

Automated pre-audit checklist for Solidity smart contracts. Runs SWC registry scan, OpenZeppelin pattern validation, gas optimization suggestions, and common vulnerability detection before sending con

Use for government and public sector workflows — formal documents, meeting minutes, reporting, procurement, compliance, and inter-department communication.

Cursor (cursor.com). Use this skill for ANY Cursor request — searching and reading data. Whenever a task involves Cursor, use this skill instead of calling the API directly.

Digital legacy agent — dead man's switch, final message executor, and ghost mode responder that preserves your digital presence. Use when the user wants to set up a dead man's switch, manage their dig

Encrypt PDFs with AES-128, AES-256, or RC4 options and decrypt authorized PDFs with ComPDF. Use for PDF passwords, permission controls, encryption, decryption, and document-access protection.

OpenClaw 安全漏洞检查与配置审计工具。用于检测当前 OpenClaw 版本存在的已知安全漏洞、公网访问安全风险，对比当前版本与最新版本的差异，获取漏洞详情、风险评估、配置审计和升级建议。使用场景：(1) 用户询问"检查一下我的 OpenClaw 版本有什么安全漏洞"，(2) 用户说"检查 OpenClaw 安全问题"，(3) 用户想了解当前版本的漏洞风险时自动触发，(4) 用户问"最新版本

Map document sections to compliance framework controls with confidence scoring. Produces bidirectional mappings for gap analysis.

Universal React dashboard audit — detect hardcoded values, tier bypasses, stale components, and onboarding inconsistencies before users see them.

Help Singapore SMEs automate compliance tasks: GST calculation, PEPPOL invoice validation, tax report generation, and IRAS filing deadlines. Use when: calculating GST for invoices, checking GST regi

Quantum-Safe File Attestation: Issue and verify formally verified. Use when an agent needs quantum safe file attestation, sign software releases with formally verified post quantum cryptography, creat

Plan and price a multi-city event staffing program with one consolidated quote. Use when a user is staffing a tour, roadshow, sampling or mall tour, festival circuit, national brand activation, produc

Generate GDPR/CCPA-compliant privacy policies. Use when scanning data practices, auditing consent flows, checking compliance, drafting policy documents.

Manage HR operations with hiring pipelines, compliance frameworks, compensation strategy, and workforce analytics.

Provides SMS compliance, formatting, and delivery best practices for the Sendly API. Covers TCPA compliance, quiet hours, opt-out handling, E.164 phone formatting, message segmentation, and carrier ve

Get PDF metadata, encryption status, page count, and file size. Useful for pre-flight checks before processing.

Open source license compliance scanner — catches copyleft, viral, and problematic licenses in your dependencies before they create legal risk

Use when the user asks to inspect, triage, summarize, export, or safely update GitHub security alerts for code scanning, Dependabot, malware, or secret scanning.

Race condition & concurrency safety analyzer -- detects unprotected shared state, missing locks, TOCTOU vulnerabilities, async/await pitfalls, thread-unsafe singletons, and deadlock-prone patterns acr