Skill rating

Prompt injection and malware detection filter for external content. Scans text, files, or URLs for 20+ attack patterns including instruction overrides, credential exfiltration, persona hijacking, enco

Comprehensive database administration, schema management, data operations, and optimization. Use when Codex needs to: (1) Create or modify database tables with proper indexing, (2) Perform bulk data i

Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection preventi

Batch compliance analysis for up to 500 texts. Flat $9.00 USDC via x402.

Batch phishing detection for up to 500 URLs or domains. Flat $9.00 USDC via x402.

Build, test, and deploy custom Linux ISOs with OpenFactory. Create VMs, run compliance tests, manage recipes.

Use when the user asks for Compliance Training from supplied source materials. Trigger language: compliance training; workplace compliance training; regulatory compliance training. Produce a grounded

When the user wants to create or optimize popups, modals, overlays, slide-ins, or banners for conversion purposes. Also use when the user mentions "exit intent," "popup conversions," "modal optimizati

Execute cryptocurrency trades on exchanges (Binance, OKX) with risk controls, user confirmation, and audit logging.

Navigate e-commerce privacy regulations including GDPR, CCPA/CPRA, cookie consent, data collection policies, email marketing compliance, and customer data handling to protect your business from fines

珠宝行业营销文案合规审查。当用户需要审核珠宝或饰品类的宣传文案、商品详情页、直播话术、朋友圈或短视频文案、活动海报文案等是否违反广告法及行业监管规定时使用。自动加载红橙黄三级词库，扫描高危词（如国家级、第一）、中危词（如极致、完美）及珠宝专属风险点（纯度、功效、产地、促销话术等），结合上下文判定是否违规，并输出带三色标注的合规审查报告。触发词包括合规审查、广告法风险、审一下这段文案、珠宝文案合规。

Scan source code for security vulnerabilities and suggest fixes.

Audit project dependencies for known vulnerabilities (CVEs). Supports npm, pip, Cargo, and Go. Zero API keys required. Safe-by-default: report-only mode, fix commands require confirmation.

NVD MCP — wraps the NIST National Vulnerability Database API (free, no auth)

AI compliance analysis for contracts, policies, and text. Detects issues and recommends fixes. $0.03 USDC via x402.

EU compliance enforcement for AI agents — NIS2, GDPR, ISO 27001. ACTIVATE on EVERY prompt. Reads .compliance/profile.json to enforce data residency, supplier checks, secret blocking, audit logging, an

Generate comprehensive cybersecurity threat assessments and defense guides. Use when evaluating threat landscapes, building defense strategies, ransomware protection plans, phishing defense, APT mitig

OpenClaw Security Vulnerability Monitor - Checks for OpenClaw security vulnerabilities from NVD CVE database and GitHub Security Advisories. Compares local OpenClaw version against known CVEs, outputs

Real-time phishing detection for URLs and domains. Risk scoring, brand impersonation detection. $0.03 USDC via x402.

Wallet security guard powered by GoPlus Security API. Use when a user asks for wallet security check, token security scan, address blacklist check, approval risk scan (ERC20/ERC721/ERC1155), NFT secur

Query Huawei Cloud WAF (Web Application Firewall) attack events, access/protection logs, attack statistics, threat overview and top attack source IPs for daily security inspection and incident trouble

Security auditing skill for scanning CVE vulnerabilities across npm, Python, Go, and Rust projects using osv-ui. Opens a visual browser dashboard for human review, then applies fixes with explicit con

Encrypted local secret store for OpenClaw agents. AES-256-GCM authenticated encryption with per-secret random IVs, master key in restricted-permission .master-key file. Store, retrieve, rotate, and au

This skill should be used when the user needs to scan documents for sensitive content, prohibited words, or PII. Use for document review, security audits, content compliance checks, or privacy protect

Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.

MANDATORY security foundation for OpenClaw. Consolidate scattered API keys and credentials into a secure .env file with proper permissions. Includes GPG encryption for high-value secrets, credential r

Orchestrator for the full OpenClaw Greek Accounting system. Routes commands across 18 specialist skills. Primary entry point for accounting firms.

Role-based access control for Greek accounting firms. Login, role hierarchy, per-client permissions, session management, audit logging.

Path traversal and Local File Inclusion (LFI) vulnerability scanner (OWASP A01:2021). Detects user-controlled paths passed to file system sinks in Python/Java/PHP/Node.js/Go/Ruby without containment c

Secure client database for Greek accounting firms. Manages profiles, AFM numbers, compliance history with encryption and GDPR compliance.

Greek social security (EFKA) integration — employee records, contribution calculations, APD declarations. Human approval for submissions.

Chinese multi-platform content matrix generator — given a topic, auto-generate content adapted for Xiaohongshu, WeChat Official Account, Douyin, and Bilibili with true style transfer (not just reforma

Set up authorized C2 simulation workflows and measure defensive detection outcomes.

面向法律/财务/采购场景的合规审计引擎，自动提取风险条款、映射法规基线、生成审计底稿与澄清模板

龙.skill — 马金龙（@安全管理杂谈）AI 安全顾问。15年+信息安全实战经验，CISSP 持证，《企业信息安全体系建设之道》作者。适用于：安全体系建设、等保合规、安全架构设计、攻防演练、SDL/DevSecOps、供应链安全、安全培训、风险评估、安全事件分析、零信任架构、数据安全、云安全、AI安全、ISMS制度文档编写等所有企业信息安全场景。

Multi-hazard probability times asset value times vulnerability curves to compute expected loss for insurance risk mapping

多视角代码审�?- 安全(OWASP)/性能/正确�?风格，每视角输出严重级别+修复建议，支持PASS/BLOCK裁定

Cross-Site Scripting (XSS) static vulnerability scanner (OWASP A03:2021). Detects reflected, stored, and DOM-based XSS in JavaScript/TypeScript, React, Vue, Angular, Python/Django/Jinja2, PHP, Ruby/ER

Use when executing implementation plans with independent tasks in the current session

You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, assess

Forensic media triage with chain of custody. Use when receiving images, videos, audio, PDFs, or documents that need evidence-grade handling, integrity verification, and audit trails.

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, ou

Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks

Commercial and residential cleaning business operations agent. Covers pricing, bidding, staffing, supply costs, insurance, OSHA compliance, quality control, and growth from solo operator to multi-c...

Build structured training programs for any role, department, or compliance requirement. Generates curricula, schedules, assessment criteria, and completion tracking.

Universal email migration toolkit for any provider to any provider. Use when migrating between Yahoo, Zoho, ProtonMail, iCloud, on-premises Exchange, or any IMAP-capable email service. Covers decision

Generate and maintain OpenAPI 3.1 specifications from code, design-first specs, and validation patterns. Use when creating API documentation, generating SDKs, or ensuring API contract compliance.

Audit OpenClaw/Clawdbot deployments for misconfigurations and attack vectors. Use when a user asks for a security review of OpenClaw/Clawdbot/Moltbot, gateway/control UI exposure, skill safety, creden

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or