Skill rating

OpenClaw Email Lead Generation — the complete outreach and pipeline system for your agent. Guided setup builds your config, Template Forge creates custom email sequences from a voice interview, and 3-

Assess compliance documents against HIPAA Security Rule and Privacy Rule requirements. Produces structured findings with evidence, gap descriptions, and remediation recommendations.

Activate when: identifying/disclosing conflicts in ADV 2A; compensation that varies by product; affiliated custodian/manager; rollover recommendations; 'is this a conflict we must disclose?'. Do NOT a

Activate when: an application hits the 6-item threshold (LE clock starts); approaching closing (CD clock); any change-of-circumstance / re-disclosure; 'did we send the LE in time?', 'does this trigger

When you need judgment about Korean content (K-pop, drama, webtoon, beauty, games, film) — from trends and cultural context to IP commercialization, market entry, licensing, contracts, and regulation.

Comprehensive audit trail of all Pilot Protocol activity for security and compliance. Use this skill when: 1. You need detailed logs of all trust decisions and connections 2. You require compliance au

Review ads and campaign setup for policy compliance on Meta (Facebook/Instagram), Google Ads, TikTok Ads, YouTube Ads, Amazon Ads, and DSP/programmatic.

Smart contract security analysis skill. Detect vulnerabilities, suggest fixes, generate audit reports. Supports Hardhat/Foundry projects. Uses pattern matching + best practices from Trail of Bits, Ope

IP threat intelligence, CVE & security data for AI agents — scan any IP for open ports, known CVEs/vulnerabilities, and threat tags; look up CVE details; audit GitHub repos for risk. Use for security

Use when user asks to review contracts, detect contract risks, or perform compliance checks. 合同智能审核 - 对合同扫描件、图片合同、双语合同进行完整审核。 覆盖 OCR 识别、条款分析、风险检测、合规校对、翻译摘要全流程。 适用于法务审核、采购合同审查、供应链合规检查等场景。 关键词：合同审核、风险检测

Fortress Sovereign Edition. Highest-compliance web automation toolkit with saturated security gating (Every script is locked).

Chinese sensitive word detection and content compliance checker (中文敏感词/违禁词检测). Scan text for banned, restricted, and risky words across Xiaohongshu (小红书), Douyin (抖音), Kuaishou (快手), and Bilibili (B站)

Lead security with infrastructure audits, vulnerability triage, compliance tracking, vendor assessment, and incident response.

CLI for Google OSV database. Query vulnerabilities for packages, scan local projects for vulnerable dependencies. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill). **Re

Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and ag

技术人会赚钱的三条路：外包接单、翻译任务、漏洞赏金。帮你评估技能栈，匹配国内外10+平台的真实任务，从筛选到交付全流程指导。不是教你做副业，是帮你把已有的技能变成钱。 触发词：赚钱任务、在线赚钱、外包任务、翻译任务、漏洞赏金、赏金任务、兼职赚钱、freelance、接单赚钱、自由职业任务、远程工作、远程兼职、任务平台、威客任务、程序员接单、设计外包、翻译兼职、网络赚钱、任务众包 排除：投资理财、线

X, LinkedIn, Mastodon, Threads, and Bluesky scheduling via Typefully API. Create drafts, schedule posts, and manage content across multiple social platforms.

Framework-directable information security risk assessment. Identifies threats, evaluates likelihood/impact via a 3x3 matrix, maps findings to any compliance framework, and recommends risk treatment op

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

国外企业背景调查技能。当用户提到"背调"、"背景调查"、"调查某公司"、"了解某公司"、"查一下某公司"、"company background check"、"due diligence"等关键词，并涉及国外/海外企业时自动触发。支持通过公司名称或邮箱域名进行多维度背调，涵盖社交媒体、官方网站、新闻动态、工商信息、专利知识产权、政府合同、制裁合规筛查等，并推荐同行业类似企业。背调过程中发现的所有

Check data compliance with construction standards. Validate data against ISO 19650, IFC, COBie, UniFormat standards.

CompanyCam integration. Manage Organizations. Use when the user wants to interact with CompanyCam data.

Core Archon DID toolkit - identity management, verifiable credentials, encrypted messaging (dmail), Nostr integration, file encryption/signing, aliasing, authorization (challenge/response), groups, an

SecOps checks for endpoints: EDR, Sysmon, updates, EVTX on heartbeat, least privilege, network visibility, credential protection (Kerberos/NTLM/pass-the-hash), device inventory and known vulnerabiliti

Infrastructure layer for AI agent swarms — 88 MCP tools for mesh control, A2A protocol, OmniMesh VPN, CyberSync, web scraping, firewall management, browser automation, and more. ~80ms execution.

A fully local password management skill for OpenClaw with AES-256-GCM encryption, password generation, and sensitive info detection.

Use when a task involves current US law — legality, permits, zoning, licensing, compliance, or filing requirements. Prefers live statute search (law.search) over training data. Not for forming an LLC

Autonomous bug bounty hunting with scope safety. Scans targets for subdomains, secrets, vulnerabilities. Uses Certificate Transparency logs, JS analysis, entropy-based secret detection. LLM-powered vu

Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

Audit GDPR compliance, generate privacy policies, and document data flows. Use when auditing practices, drafting policies, or checking consent flows.

Set up a secure zero-knowledge team collaboration web interface for OpenClaw with user registration, login, and encrypted data isolation. Use when setting up multi-user access to OpenClaw over local n

中国广告法合规审查器。审查广告文案、营销素材、商品描述是否符合《广告法》及配套法规。使用场景：(1)审查广告文案是否含违禁词汇（最/第一/国家级等） (2)检查医疗/保健/金融等特殊品类广告是否合规 (3)评估直播带货/短视频营销合规性 (4)审查电商商品详情页描述 (5)检查广告代言/推荐合规性 (6)判定比较广告是否合法。触发词：广告法、违禁词、极限词、广告合规、营销合规、直播合规、商品描述审

When the user wants to create or optimize popups, modals, overlays, slide-ins, or banners for conversion purposes. Also use when the user mentions "exit intent," "popup conversions," "modal optimizati

Integrate Didit Age Estimation standalone API to estimate a person's age from a facial image. Use when the user wants to estimate age, verify age, implement age gating, check if someone is over 18/21,

Analyze stocks and companies using financial market data. Get company profiles, technical insights, price charts, insider holdings, and SEC filings for comprehensive stock research.

Audit and harden OpenClaw configuration for security. Scans openclaw.json for vulnerabilities, exposed credentials, insecure gateway settings, overly permissive exec rules, and missing security best p

Rigorous visual validation expert specializing in UI testing, design system compliance, and accessibility verification. Masters screenshot analysis, visual regression testing, and component validation

Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.

Expert database architect specializing in data layer design from scratch, technology selection, schema modeling, and scalable database architectures. Masters SQL/NoSQL/TimeSeries database selection, n

Review business contracts for risks, missing clauses, unfavorable terms, and compliance gaps. Use when analyzing NDAs, MSAs, SaaS agreements, vendor contracts, SOWs, or employment agreements. Generate

Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting.

Build complete local lead generation websites with SEO optimization, conversion tracking, and RGPD compliance. Use for creating service-based websites targeting local markets (plumbers, electricians,

Develop React Native, Flutter, or native mobile apps with modern architecture patterns. Masters cross-platform development, native integrations, offline sync, and app store optimization. Use PROACTIVE

Expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. Masters multi-cloud connectivity, service mesh, zero-trust networking, SSL/TLS, g

Comprehensive security audit with 100 iterations (~30-60 min). Use when user says 'security audit', 'ralph security', 'weekly security check', 'audit this project', 'new project security review', or '

Store and retrieve website credentials — E2E encrypted password manager for domain/username/password entries. Do NOT use for API keys/secrets (use ravi-vault) or reading messages (use ravi-inbox).

Build applications on the Xian blockchain using the xian-py Python SDK. Use when developing apps that interact with Xian — wallets, transactions, smart contracts, state queries, token transfers. Cover

Skill for using the command-line tool pdftk (PDFtk Server) for working with PDF files. Use when asked to merge PDFs, split PDFs, rotate pages, encrypt or decrypt PDFs, fill PDF forms, apply watermarks

Master modern SQL with cloud-native databases, OLTP/OLAP optimization, and advanced query techniques. Expert in performance tuning, data modeling, and hybrid analytical systems. Use PROACTIVELY for da

ZFS filesystem administration, pool management, dataset configuration, snapshots, replication, encryption, performance tuning, and troubleshooting on OpenZFS (Linux and macOS). Use when the user asks