Skill rating

AI-powered HR Operating System for Southeast Asia. Full payroll with PH/SG/LK compliance, 9 AI agents (payroll specialist, compliance officer, leave advisor...), attendance with GPS geofencing, leave/

Manage CloudRobo robot instances — register robots, query robot lists and details, update robot metadata, delete offline robots, export robot certificates for secure access, and fetch the latest robot

A safe AI agent evolution engine that analyzes runtime history to identify improvements and applies protocol-constrained evolution with comprehensive safety checks and audit logs.

Security scanner for OpenClaw skills. Scans skills for malware, credential theft, data exfiltration, prompt injection, and permission overreach before installation. Run: python3 scripts/skillguard.py

Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when analyzing memory dumps, investigating incidents,

Auto-fix security vulnerabilities in OpenClaw skills. Works with neckr0ik-security-scanner to automatically remediate hardcoded secrets, shell injection risks, prompt injection, and path traversal iss

［何时使用］当用户需要审查金融产品营销内容合规性时；当用户说"检查这篇文章合规吗"、"营销方案合规审查"、"生成合规营销方案"、"金融产品宣传"时；当检测到"金融营销"、"合规审查"、"违规判断"等关键词时

Senior SAP Finance & Controlling consultant with Australian business expertise. Specializes in GST configuration, PAYG withholding, Australian banking, ABN validation, and local compliance requirement

Discover and classify a live website's legal/compliance pages — privacy policies, HIPAA/Part 2 notices, terms of use, informed consents, and similar documents — by triangulating sitemap.xml, robots.tx

Run autonomous AI-driven penetration tests on web applications using tools like Shannon, PentAGI, and similar frameworks. Use when tasks involve setting up automated penetration testing pipelines, com

OWASP Amass for in-depth DNS enumeration, subdomain discovery, and network mapping with active and passive modes. Use when: comprehensive subdomain enumeration, ASN and IP range mapping, attack surfac

餐饮食安合规管家（单店 / Pro 审计 / 集团风控 三层）。This skill should be used when restaurant operators mention "食安检查""迎检""办证""后厨布局""市场监管""4D管理""健康证""食品经营许可证""客诉异物""职业打假""集团食安审计""合规体系升级""客诉溯源""飞行检查""供应商准入""舆情风险""HACCP""G

China-to-Global Go-to-Market Playbook — Complete guide for Chinese products/apps expanding to global markets. From App Store optimization to global launch strategies. Real case studies: TikTok, SHEIN,

元链 —— 跨智能体的供应链依赖校验技能：零依赖自研引擎本地解析 npm（package.json / package-lock v1-v3 / .npmrc）与 Python（requirements / pyproject.toml / poetry.lock / Pipfile）及 Maven pom.xml，检测依赖混淆（私有包名被公共仓库同名抢占 / 混合仓库 / 可疑仓库 URL /

Tagout safety compliance tracker. Use when json tagout tasks, csv tagout tasks, checking tagout status.

Security analysis and vulnerability detection. Scans code for security issues, checks dependencies, and provides remediation advice.

Activate when: a client receives an IRS notice or letter; an examination opens or an IDR arrives; a client has unfiled returns, a balance owed, or a lien/levy pending; deciding whether to appeal an ad

Activate when: a tax or bookkeeping engagement is blocked on client paperwork; a client has gone quiet on a document request; drafting an initial PBC/document request; deciding whether to extend, deli

Authentication & authorization pattern analyzer — finds missing auth checks, insecure sessions, broken access control, CSRF gaps, and token handling vulnerabilities

创业工具包。创业清单、公司注册、MVP规划、融资准备、法律合规、增长策略。Startup toolkit with checklist, register, MVP planning, fundraise, legal compliance.

Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.

Identify and defend against AI-powered scams including deepfakes, voice cloning, AI phishing, and fake job offers. Use when someone received a suspicious call from a "family member," got a too-perfect

Runs a SaaS business: subscription revenue, plan packaging, trials, retention, expansion, and enterprise readiness. Use when MRR or ARR has to be computed, reconciled, or explained; when NRR, gross ma

OWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications. Use when auditing for vulnerabilities ("run OWASP audit", "security review", "check my app securit

Audit web applications for WCAG accessibility compliance. Use when asked to run accessibility checks, identify common violations, and provide remediation guidance.

Google Workspace Admin SDK: Audit logs and usage reports.

Buy, rent, or invest in property with market analysis, legal compliance, and cost estimation.

Scan any URL, skill, or infrastructure for security vulnerabilities. Uses ZOO Security Scanner API with x402 payment — pay per scan with USDC. No API keys needed.

Comprehensive HR policy development covering attendance, time-off, overtime, remote work, and compliance. Generates structured policy documents, legal checklists, exception handling frameworks, and em

Report only real risks, not manufactured panic. Covers injection, XSS, path traversal, insecure deserialization, authentication and authorization flaws, key leaks, insecure logging, command execution,

Security compliance checker for MCP/LLM applications. Performs non-invasive security assessments on configuration files.

Anonymize sensitive data in databases, files, and APIs for testing and compliance. Detect PII (names, emails, SSNs, addresses, phone numbers), apply anonymization strategies (masking, hashing, synthet

Regulations change 4,000+ times per year. Your clients can't track them all. complianceclaw monitors federal and state regulatory changes, maps them to your clients' obligations, generates compliance

Security audit tool for AI agent skills. Scans skill packages for malware, credential theft, and suspicious patterns before installation. Defensive security tool with optional enterprise reporting (us

Security hardening for OpenClaw. Audit your configuration, scan installed skills for malware, detect CVE-2026-25253, check credential exposure, and get actionable fix recommendations. Runs locally wit

Audit TLS/SSL configuration of servers and applications. Check protocol versions, cipher suites, certificate chain validity, HSTS headers, and compliance with security standards (PCI-DSS, NIST, Mozill

Secure environment variable & secret management with AES-256 encryption, auto-redaction, permission control, prevent credential leakage

Monitor CVEs and security advisories through the Chinng AI-Agent Portal. Use for incremental vulnerability checks, package watchlists, and actionable security summaries.

对外投资合规诊断与方案规划。当用户涉及对外投资、境外投资、海外投资、合规审查、政策对标、地缘政治风险、离岸公司、资金出境、外商投资、外资入华等场景时使用。覆盖央国企/民企/个人三类主体，提供资产流向判定🟢🟡🔴+合规判定+审批路径+风险标记+推荐合规方案+材料清单+时间周期。

企业法务技能套件：企业背景调查、公司决议、合规审查、查案例、法务日报、法律文书、电子签发起、风险评估。 企业背景调查: 帮我查下这家公司, 帮我做个尽调, 尽职调查, 供应商准入; 公司决议: 公司决议, 股东会决议, 董事会决议, 章程修正案; 合规审查: 合规审查, 个保合规, 数据出境, 广告合规; 查案例: 帮我查个类似案例, 这个情况法院一般怎么判, 裁判文书, 类案检索; 法务日报:

ISO20000辅助认证助手 (ISO20000 Certification Assistant) - Helps organizations prepare for ISO 20000-1:2018 IT Service Management System certification. Supports document gap analysis, compliance checking, an

Distributed mesh infrastructure operations — the unified remix of 12 ClawHub skills (Docker, Git, GCP, Linux, SSH, systemd, cron, network, security, DevOps, infra, backup) distilled into one battle-ha

Run Trivy vulnerability scans on containers, filesystems, and IaC — then triage findings by exploitability, reachability, and business impact with AI-powered prioritization.

Plan and track cryptographic key rotations for API keys, encryption keys, signing keys, and service credentials. Inventory all keys, assess rotation urgency, generate rotation runbooks, and verify pos

Framework core engineer skill for low-level WelineFramework implementation and architectural guardrail compliance.

Audit password policies and authentication configurations for security compliance. Check password complexity, storage (hashing algorithms), rotation policies, MFA coverage, account lockout, and compli

Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using ku

Governance — immutable, timestamped, hash-chained audit log of all agent actions. Forensic-ready for compliance, investigation, and accountability.

Using a fixed camera installed above or beside the home medication area, the system monitors the elderly person's full medication process in real time. With pose estimation and object detection, it re

Create Request for Proposals with requirements specifications, evaluation criteria, scoring rubrics, timelines, and compliance requirements