Skill rating

Generate compliant Australian construction Safe Work Method Statements (SWMS) for all 19 high-risk construction work categories, applying the WHS Act 2011 hierarchy of controls, hazard libraries, and

Audit Australian payroll for Modern Award compliance — identify the correct award and classification, verify base rates, penalty rates, overtime, allowances, casual loading, annualised salary BOOT tes

AI-powered cybersecurity knowledge management. Search threat intelligence, vulnerability assessments, incident response plans, and compliance documentation with structured extraction.

Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis. Use when asked for a compliance checklist, gap analysis, readiness assessme

Give an AI agent one route to live external data and MCP capabilities. Use when a task needs current blockchain, market, research, sanctions, weather, travel, or compliance data beyond the model's tra

Security and compliance auditing tool for AI agents. Scans code for vulnerabilities, checks GDPR/CCPA compliance, generates risk reports with remediation guidance.

Securely expose an OpenClaw Gateway WebUI on a VPS via Cloudflare Zero Trust Access + Cloudflare Tunnel (cloudflared), including DNS cutover for custom hostnames and optional cleanup of Tailscale Serv

Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.

Secure temporary file storage and encrypted asynchronous delivery with the aispace CLI. Use when the user asks to upload or download an artifact, create or revoke an expiring share, send or receive a

Maintain legacy Frankfurter v1 integrations through Pontx. Use for existing v1 applications, reproducible dated reference-rate work, or deciding whether new provider-aware work should move to pontx-fr

Integrate Frankfurter v2 through Pontx for reference-rate conversion, provider-pinned compliance, auditable time series, attribution, and large exports. Use for FX or central-bank rate tasks.

Use when the user needs to create or refine a feature SPEC SDD before implementation.

Prevent MSHA citations at cement plants before the inspector arrives. Free CementOps Compliance Suite skill. 30 CFR Part 56 hazard classification, stop-work authority, citation defense strategies, wal

Test web application security with Burp Suite. Use when a user asks to intercept HTTP traffic, test for web vulnerabilities, fuzz API endpoints, analyze authentication flows, or perform manual web app

Use Kali Linux for authorized penetration testing, security research, and CTF work. Use when a user asks about installing Kali, setting up a pentest lab, picking tools from the Kali toolchain, using K

BYOCB ArbInjectionSkill: Scan EVM smart contracts for arbitrary call injection vulnerabilities. Monitor chains in real-time or scan specific addresses.

ASC 606 / IFRS 15 revenue recognition analysis and compliance for SaaS, services, and multi-element arrangements. Guides the 5-step recognition model, identifies performance obligations, determines tr

Captures vulnerabilities, misconfigurations, access control violations, compliance gaps, incident response patterns, and threat intelligence to enable continuous security improvement. Use when: (1) A

Generate UK/EU GDPR compliance documents — privacy policies, cookie policies, DPIAs, ROPA, DSAR responses, data breach notifications, and consent forms. Use when a business needs GDPR documentation, d

Assess worker-classification and compliance risk for temporary event staffing in the US and Canada. Use when a user asks about W-2 vs 1099 event workers, misclassification penalties, joint-employer li

Use when managing secrets, credentials, encryption keys, certificates, or any sensitive data on Huawei Cloud. Covers CSMS (Cloud Secret Management Service) for secret lifecycle management, KMS (Key Ma

LESecure Cloud Skills — encrypt or decrypt data using the LESecure API with layered locks (pin, password, MFA, time lock). Use this skill whenever the user mentions LESecure, LESecureCl, LESecure Clou

Memory Bank Template Compliance Cleaner Workflow Use when the user invokes $mem-format or asks for this workflow by name.

Encryption Decryption Toolkit: Cryptographic toolkit: generate secure randoms, compute. Use when an agent needs encryption decryption toolkit, encrytion decryption toolkit, generating secure api keys

Activate when: scoping or quoting a new tax engagement; a client describes a transaction and you need to place it; building a document request list; sanity-checking that a return has the schedules its

Navigate enterprise software development with legacy integration, compliance requirements, stakeholder management, and architectural decisions at scale.

外贸出口检测与单证合规助手。当用户提到以下场景时触发：出口检测报告解读、检测标准对照（CE/FDA/REACH/UL等）、商业发票/装箱单/提单审核、HS编码归类与核查、产品合规性审查（认证要求/禁限运）、产地证信息预审、验货报告生成、供应商审核评分、外贸单证生成（发票/箱单/证明函）、出口合规自查、验货、检测、合规、单证、外贸、出口、报关相关需求。

在对话中辅助学习"亲密关系/Intimate Relationships"第 13 章"亲密关系的解体与消亡"。基于 Rowland S. Miller《Intimate Relationships》教材第 6 版。当用户讨论、提问、或尝试应用本章核心概念（divorce 离婚、no-fault divorce 无过错离婚、barrier model 障碍模型、vulnerability-stre

Generate playbook YAML files for the intelligent outbound call platform through natural language guided conversation. Use when the user wants to create a new outbound call playbook, generate a YAML pl

Security testing for web applications and APIs based on OWASP standards. Identify common vulnerabilities (injection, auth bypass, XSS, CSRF, IDOR), generate security test cases, analyze scan results,

Scans OpenClaw skills for security vulnerabilities and suspicious patterns before installation

Drive data strategy with governance frameworks, analytics platforms, AI/ML initiatives, and privacy compliance.

LYGO Skill Gate — local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan any skill folder before you install or trust it: subprocess/shell, network/HTTP, secrets in source, eval/exec

Use when asked to generate a cybersecurity daily digest from CyberSecurityRSS OPML feeds and Twitter/X KOL accounts, with provider selection, recent-window filtering, archive dedup, vulnerability merg

Gmail security proxy with policy enforcement, approval workflows, and audit logging. Use when the user wants to read, search, or send Gmail with guardrails — send actions may require human approval be

一键自动化安全审计：nmap 端口扫描 + nuclei 12000+ CVE 漏洞检测（内外网双扫）+ SSL/TLS 检查 + SSH/防火墙/fail2ban 系统审计 + Markdown 报告生成。支持 cron 定时扫描 + 飞书推送。

Read one or more document manifests (from legal-page-discovery and/or document-finder) plus the full rote-compliance-toolkit skill catalog, and reason about which skill(s), if any, are good candidates

Guarantee instruction compliance with root cause analysis, flow verification, and automated validators that make future failures impossible.

HTTP client & server misconfiguration detector -- detects insecure connections, missing timeouts, cookie security issues, caching misconfigurations, and request handling vulnerabilities

Multi-language license compliance audit powered by Trivy. Detects GPL/AGPL/LGPL/MPL/BSL and other risky licenses across Node.js, Python, Java, C#/.NET, Go, Rust, Ruby, PHP, and C/C++. Outputs to termi

Screens Ethereum and other EVM wallet addresses (Base, Polygon, BSC, Arbitrum, etc.) against the ScamSniffer community-maintained blocklist of known phishing, wallet drainer, and scam addresses, with

Run longitudinal, in-context diary studies for product teams and convert weekly participant entries into concise User Signals + Recommendations with evidence, confidence, and experiment-ready actions.

Comprehensive skill review and validation. Use when you need to audit an OpenClaw skill for correctness, completeness, and compliance with OpenClaw specifications. Performs three levels of review: (1)

Generate compliant UK landlord documents — Section 8 notices, tenancy agreements, rent increase notices, deposit prescribed information, Right to Rent records, safety certification trackers, and evict

Use this skill when an IAR, CFP® practitioner, trust officer, or ERISA fiduciary needs to draft an Investment Policy Statement for an individual, trust, plan, or endowment client. Produces a DRAFT IPS

Use for construction and project management operations — project scheduling, daily site reports, subcontractor coordination, material procurement, budget tracking, change orders, safety compliance, pe

A reflective tarot draw for emotional support (presence-first, non-clinical, non-predictive).

Design and output n8n workflow JSON with robust triggers, idempotency, error handling, and human-...

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto impl

AI compliance analysis for EU AI Act, ISO 42001, NIST AI RMF, GDPR, OECD, financial services regulations (SEC, FCA, FINRA, DORA, MiFID II), and other frameworks. Use when asked to generate a complianc