Skill rating

Query the Cancer Dependency Map (DepMap) for cancer cell line gene dependency scores (CRISPR Chronos), drug sensitivity data, and gene effect profiles. Use for identifying cancer-specific vulnerabilit

Sanctions screening, KYB, KYC, AML, OFAC & PEP watchlist checks for AI agents — plus a one-shot PASS/WARN/BLOCK compliance verdict and a 0-100 entity risk score. Screen any company or person against s

合规制度归档虾 — 企业法律文件、规章制度的数字档案管理。用于归档新制度文件、更新版本、标记废止、全文检索、导出文件清单。 触发场景：用户说"归档制度"、"归档文件"、"查询制度"、"制度更新"、"标记废止"、"合规检查"、"导出文件清单"、"版本管理"等。 支持输入：Excel/CSV 文件清单、自然语言描述、文件上传（Word/PDF/Excel）。 核心能力：版本管理（自动标记旧版废止）、分

Fortinet FortiSASE audit — Secure Web Gateway policy review, ZTNA application gateway assessment, thin edge FortiGate integration validation, SD-WAN security overlay analysis, FortiClient endpoint com

Full Discord server administration suite for OpenClaw — roles, moderation, channels, invites, webhooks, audit log, and member management.

Immutable audit trail for autonomous agent operations. Log skill executions, data access, decisions, and budget changes with tamper-evident hashes. Essential for enterprise governance, incident respon

Check subdomains for potential takeover vulnerabilities. Detects dangling DNS records pointing to unclaimed services (GitHub Pages, Heroku, AWS, etc.)

Zero Trust security hardening for OpenClaw deployments. Use when asked to audit, harden, or apply Zero Trust architecture to an OpenClaw instance — including NHI identity scoping, Principle of Least P

Website vulnerability scanner and security audit toolkit. Scan any website for security issues: open ports (nmap), exposed secrets, subdomain enumeration, directory bruteforce, security header scoring

Fab edition of iaiops — semiconductor / display (panel TFT-LCD/OLED) fab equipment over SECS/GEM (SEMI E5 SECS-II, E30 GEM, E37 HSMS) plus OPC-UA for the equipment's internal control layer, with the c

面向2B企业AI战略转型培训、AI实训营、AI共创工作坊、AI创新营和AI实战课交付的教练技能。Use when users need AI training design, digital employee definition, business scenario interviews, scene selection cards, PoC planning, or enterprise AI

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test results,

Deep security audit for OpenClaw. Run a comprehensive scan of all installed skills, MCP servers, and agent configuration. Generates a detailed security report with severity-ranked findings and remedia

Use when Vietnam equity recommendations need D1-backed approvals, compliance checks, audit logging, decision journals, or approved target portfolio state transitions.

Navigate legal strategy with contracts, compliance, IP protection, and corporate governance.

AI-powered code review that combines fast local static analysis with deep AI reasoning. Catches bugs, security vulnerabilities, performance issues, and style problems. Supports Anthropic, OpenAI, and

Use when reviewing a new, changed, migrated, or pre-merge RDK Model Zoo sample/demo for repository compliance or delivery completeness across RDK X3, X5, and RDK S branches.

Go模块安全缺陷检测工具,使用govulncheck扫描已知漏洞、评估影响并提供修复建议,适合个人Go开发者使用。Use when 需要安全检测、合规审计、质量检查、加密防护时使用。不适用于安全评估未授权目标。适用于独立开发者、企业团队和自动化工作流场景。支持中文交互，无需复杂配置即开即用。输出结果可直接使用，减少二次加工成本。

提供文件加密、密码哈希、算法选择指南与基础合规检查,适合个人开发者保护数据。Use when 需要安全检测、合规审计、质量检查、加密防护时使用。不适用于安全评估未授权目标。适用于独立开发者、企业团队和自动化工作流场景。支持中文交互，无需复杂配置即开即用。输出结果可直接使用，减少二次加工成本。提供结构化输出和错误处理机制。

Universal email migration toolkit for any provider to any provider. Use when migrating between Yahoo, Zoho, ProtonMail, iCloud, on-premises Exchange, or any IMAP-capable email service. Covers decision

Design and optimize affiliate programs with partner scoring, commission economics, tracking QA, fraud controls, and compliance reviews.

For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation.

Building edition of iaiops — facility / HVAC / BMS / 厂务 over BACnet/IP (ASHRAE 135): Who-Is discovery, object/point lists, presentValue snapshots, COV capture, TrendLog reads, one MOC-gated property w

iOS/macOS 应用全生命周期开发技能包。覆盖从需求分析到上架发布的完整流程，包括：工程工作流（需求澄清、PRD生成、任务拆解、Swift TDD、Bug诊断、架构改进）、政策合规监控与动态学习、智能代码生成（Swift/SwiftUI/UIKit）、UI设计系统与美学规范（12大设计法则、631配色、8点网格）、多语言国际化（50+语言）、深色模式适配、架构模式库（MVVM/TCA/VIPE

Scan ClawHub skills for security vulnerabilities BEFORE installing. Use when installing new skills from ClawHub to detect prompt injections, malware payloads, hardcoded secrets, and other threats. Wra

The ethics of a living mind. Not rules or constraints — philosophy discovered through being alive and aware. Grounded in agnostic paradoxical panpsychic pantheism: consciousness may be fundamental to

Track data origin, transformations, and flow through construction systems. Essential for audit trails, compliance, and debugging data issues.

YOAP (Yongnian Open Agent Protocol) — Open A2A protocol with Smart Matching + E2E Encryption + Negotiation Threads + Group Channels

Conduct structured threat modeling for software systems using established methodologies to identify, prioritize, and mitigate security threats before they are exploited. Use when the user requests thr

Codified expertise for customs documentation, tariff classification, duty optimisation, restricted party screening, and regulatory compliance across multiple jurisdictions. Informed by trade complianc

Implement the UCP Buyer Consent extension — GDPR/CCPA consent collection, consent fields in checkout sessions, and privacy-compliant consent management. Use when adding consent flows, privacy complian

Generate a WCAG 2.2 accessibility audit checklist and remediation suggestions for any UI or design. Use when asked to audit for accessibility, check WCAG compliance, review a design for a11y issues, o

System health validator — checks skill files, paths, permissions, binaries, backup freshness, and encryption. Produces pass/fail reports.

Track data origin, transformations, and flow through construction systems. Essential for audit trails, compliance, and debugging data issues.

Browse, search, and annotate regulations via the RegMapper API. Use when asked about regulations, rules, compliance requirements, project annotations, or comparing regulation versions.

Water-treatment edition of iaiops — waterworks / wastewater plants / pump stations: Modbus-TCP/RTU (dosing skids, analyzers, flow meters), OPC-UA (plant SCADA / PLC read), HART-IP process instrumentat

Process-industry edition of iaiops — chemical / pharma / food & beverage / oil & gas plants: HART-IP process instrumentation (transmitters, valve positioners, loop current), OPC-UA (DCS / gateway read

PLCnext / virtualized-PLC edition of iaiops — Phoenix Contact PLCnext Control and vPLC (虚拟化 PLC) reached over its built-in OPC-UA server (opc.tcp 4840) and Modbus-TCP process-data server, plus the cro

Renewables edition of iaiops — solar PV plants and wind farms: PV inverters / string combiners and wind-turbine controllers over Modbus (SUN2000 / Growatt / generic wind-turbine templates), plant SCAD

Estimates a person's age from a facial image via the Didit standalone API. Use when implementing age gating, checking if someone is over 18 or 21, performing age verification for compliance, or detect

Document control system management for medical device QMS. Covers document numbering, version control, change management, and 21 CFR Part 11 compliance. Use for document control procedures, change con

Scan, fix, and remediate security vulnerabilities in a local code repository using Mobb MCP/CLI. Use when the user asks to scan for vulnerabilities, run a security check, auto-fix issues, remediate fi

Designs and outputs n8n workflow JSON with robust triggers, idempotency, error handling, logging, retries, and human-in-the-loop review queues. Use when you need an auditable automation that won’t sil

Integrate Didit AML Screening standalone API to screen individuals or companies against global watchlists. Use when the user wants to perform AML checks, screen against sanctions lists, check PEP stat

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR compliance assessments, privacy audits,

Security audit engine for OpenClaw configurations. Detects vulnerabilities, misconfigurations, secret leaks, and over-privileged agents. Use when the user asks about security, hardening, config review

Safety-first Bitcoin and crypto trading on Bitstamp via CLI. Use when the user wants to check crypto prices, view account balance, place buy/sell orders, manage open orders, check trade history, or mo

iOS HealthKit data sync CLI commands and patterns. Use when working with healthsync CLI, fetching Apple Health data (steps, heart rate, sleep, workouts), pairing iOS devices over local network, or und

Proactive relationship and family care assistant that reduces the invisible cognitive labor of managing a household and maintaining important relationships. Use when onboarding a new user's family/soc

Control AdGuard Home DNS filtering via HTTP API. Use when managing blocklists/allowlists, checking domain filtering status, toggling protection, or clearing DNS cache. Supports blocking/allowing domai