Skill rating

Clinical-facility edition of iaiops — hospital / healthcare facilities as a distinct vertical from generic building management, with patient-safety framing. BACnet/IP BMS (isolation-room pressurizatio

Curated skill bundle for law firms, legal departments and compliance teams. Activates the firm pyramid with Legal, Compliance, Privacy and Contracting agents pre-configured for document review, regula

Plan Panama trips with region-aware routing, verified entry rules, island and highland logistics, and practical tourist safety.

Audits changes for additive bias and Iron Law compliance

中国商业合规审查器。在执行任何商业策略、副业项目、变现操作前，自动进行中国法律合规审查。使用场景：(1)评估商业计划是否合法合规 (2)检查副业/赚钱项目是否存在法律风险 (3)审查商业模式是否触及中国法律红线 (4)识别灰色地带并生成预警报告 (5)为AI智能体提供合规决策前置过滤。触发词：合规、合法、风险、红线、违法、副业合规、商业审查、法律风险、中国法律。

Multi-jurisdictional RWA tokenization advisor — regulatory structuring, token classification, compliance architecture, and issuance strategy across UAE, EU, US, Singapore, Hong Kong, KSA, Pakistan and

Automated security auditing for OpenClaw projects. Scans for hardcoded secrets (API keys, tokens) and container vulnerabilities (CVEs) using Trivy. Provides structured reports to help maintain a clean

Stripe payment platform reference — PaymentIntents, webhooks, PCI compliance, 3DS/SCA, Radar fraud rules, and CLI commands.

Scan npm packages or projects to detect JavaScript malware and Windows filename RLO malware,供应链攻击和恶意包。使用 when: (1) 用户要求扫描npm包安全性 (2) 检测恶意JS代码、PUA字符、可疑Base64编码 (3) 分析package.json依赖和脚本 (4) 识别已知恶意包如os-in

食品标签合规审查与风险查询；当用户上传标签图片/PDF进行合规审查或查询标签违规案例、处罚依据时使用

Secure P2P communication for AI agents via Telegram. Simple onboarding: create "Clawdio Hub" group, add bot, share keys. Noise XX handshake, XChaCha20-Poly1305 encryption, connection consent, human ve

跨境电商合规助手。帮助中国卖家进行出海合规自查，覆盖目标市场法规要求。使用场景：(1)中国卖家准备进入海外市场前的合规评估 (2)检查产品是否符合目标市场认证/标签要求 (3)评估跨境税务义务（VAT/GST/关税） (4)数据保护合规（GDPR/CCPA等） (5)平台规则合规（Amazon/Shopify/TikTok Shop等） (6)知识产权风险排查。触发词：跨境电商合规、出海合规、出口

把审计所需证据整理成目录、清单和缺失项，便于后续评审。；use for compliance, evidence, audit workflows；do not use for 伪造证据, 替代正式审计结论.

Assess physical and transition climate risk for a site, product, or portfolio with scenario-based structure. Use when asked to run a climate risk assessment, evaluate physical or transition risk, prep

Stay ahead of EPA enforcement at cement plants. Free CementOps Compliance Suite skill. NESHAP Subpart LLL limits, CEMS QA/QC, Title V permits, alternative fuels emissions, exceedance response, and NOV

Test product names and listing titles for TikTok Shop conversion potential before going live by scoring hook strength, search fit, and compliance risk.

Activate when: setting planning fees vs commission; deciding markup on net rates; 'should I charge a fee or rely on commission?'; pricing a service tier; low-commission or non-commissionable component

Validate .editorconfig syntax and check source files for EditorConfig compliance.

Activate when: building a complex/high-value itinerary; multi-supplier or international trip; hurricane/advisory season; client asks 'what if something goes wrong?'; designing a group/FIT trip. Do NOT

This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enume

Crawl any website and get a 0-100 SEO score with 50+ checks across Technical, On-Page, Schema, Social, and Compliance categories. Identifies quick wins, competitor gaps, and generates AI-written SEO a

Practice management assistant for small CPA firms and solo bookkeepers — client onboarding, document chase, tax deadline tracking, entity compliance reminders, workflow automation, and recurring engag

Activate when: matching a borrower to Conventional/FHA/VA/USDA/Jumbo/Non-QM; deciding fixed vs ARM; 'which program fits this borrower?'; borderline DTI/LTV/credit. Do NOT activate when: borrower is pr

Build an urgent return action sheet for items with deadlines, packing needs, proof, route order, and a final checklist.

Activate when: a borrower anchors on a headline/teaser rate they saw; presenting rate+points+APR trade-offs; competitor 'lowball' quote; 'why is your rate higher than the ad?'. Do NOT activate when: s

Activate when: a file is submitted or in underwriting; rate lock is ticking; 'what could kill this loan before closing?'; thin-file or borderline borrower. Do NOT activate when: clear-to-close with no

Activate when: designing/reviewing loan-originator compensation; considering a marketing services agreement (MSA), lead-buy, or referral arrangement; 'can we pay for these referrals?', 'can comp vary

Operations assistant for small 501(c)(3) nonprofits — IRS compliance (990 filing), grant tracking, board meeting prep, donor management, program reporting, and financial health monitoring. Built for o

SEC filings, insider trades & company financials for AI agents — pull SEC EDGAR filings, 8-K material events, Form 4 insider transactions, headline financials, and the latest market-wide filings for a

Lists Huawei Cloud security groups (安全组) — enumerates all security groups in a VPC project with security group ID, name, description, enterprise project ID, tags and creation time, using the KooCLI `h

Pharmaziegasse namespace for Netsnek e.U. pharmacy management platform. Prescription tracking, inventory, compliance, and staff coordination.

Use whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security audits, vCISO, SOC 2 readiness, incident response, managed SOC, IAM, cloud securi

This skill handles sensitive content remediation after scanning. Supports two disposal methods: (1) Keyword masking/redaction with customizable granularity (partial replacement, keyword full replaceme

Activate when: a real estate agent is running a listing/transaction and must not skip disclosure, agency, and fair-housing steps; 'what do I need to disclose', writing an ad, handling an offer, closin

EN: Extract structured data from EPLAN/CAD vector PDF electrical drawings — component list (位号/型号/数量), wire/pin topology (导线连接、串并联、电能流向), terminal table, and title-block metadata. Uses PDF vector geom

GxP合规检查与供应商问卷分析Skill。当需要分析、评估、检查以下主题时触发： (1) GxP相关合规要求（GMP、GLP、GCP、GDP等） (2) 计算机化系统验证(CSV)流程与文档 (3) GAMP5第二版(2022)变更与合规 (4) FDA 21 CFR Part 11电子记录与电子签名 (5) 电子签名(ES)两要素认证与链接原则 (6) 软件开发生命周期(SDLC)在GxP环境下

Activate when: annual ADV amendment season; onboarding/updating Form CRS delivery; launching marketing/testimonials; a mock/real exam; 'are we books-and-records compliant?', 'can we post this ad/testi

Activate when: an insurance agent/agency must not skip licensing, disclosure, suitability, and replacement steps on a sale; 'am I compliant on this policy', selling/replacing a policy, onboarding a pr

Publish AI-powered web pages with end-to-end encryption on yourbro.ai

Shadow AI Monitor - Enterprise-grade dashboard for tracking employee AI tool usage, data exposure risks, and PIPEDA compliance. Generates professional HTML dashboards with interactive drill-downs, com

Generate customer-facing answers for common legal services questions. Use when working on FAQ content for legal ops teams, attorneys, compliance teams.

Legal web scraping with robots.txt compliance, rate limiting, and GDPR/CCPA-aware data handling.

Write short audio-first lessons for recurring employee security training. Use when working on security education for security teams, compliance leads,...

Generate UK AML/KYC compliance documentation — customer due diligence records, risk assessments, policies, and SAR drafts for regulated businesses. Use when a business needs AML documentation, client

Identity provider compliance checks for auditclaw-grc. 8 read-only checks across Google Workspace (MFA, admin audit, inactive users, passwords) and Okta (MFA, password policy, inactive users, session

오픈소스 취약점 분석 스킬. 사용자가 오픈소스 패키지 이름과 사용 중인 버전을 입력하면, NVD(NIST), OSV.dev(Google), GitHub Advisory 3개 데이터 소스에서 CVE 취약점을 조회하여 최신 버전 정보와 함께 보안 리포트를 생성한다. 마크다운, Excel/CSV, JSON 형식으로 출력 가능하다. package.json, req

快手直播运营方法论（信任电商路线）。Use for: (1) 老铁文化下的粉丝私域运营与复购策略, (2) 直播策划与数据复盘, (3) 快手电商带货玩法与平台规则避坑。Kuaishou live-streaming methodology: trust-based fan economy, private-domain repurchase strategy, and platform-rule

Get transactional email deliverability right with Drin — authenticate the sending domain (SPF/DKIM/DMARC), stay under bounce/complaint limits, honor suppressions, and include one-click unsubscribe whe

Curated skill bundle for medical device companies, digital health startups and pharma R&D teams. Activates the firm pyramid with RA (Regulatory Affairs), Clinical, R&D and Quality agents pre-configure

Use when the user needs to create or refine a feature SPEC SDD before implementation.