Skill rating

Conduct WCAG 2.2 accessibility audits with automated testing, manual verification, and remediation guidance. Use when auditing websites for accessibility, fixing WCAG violations, or implementing acces

Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing s

Run accessibility and visual design review on components. Use when reviewing UI code for WCAG compliance and design issues.

Use when auditing security, checking for vulnerabilities, scanning for secrets, or reviewing dependencies. OWASP Top 10 audit with GitLeaks and dependency checks.

Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement. Use when: authentication implem

Scan AI agent skills for malware, credential theft, prompt injection, and dangerous permissions before installing them

Comprehensive security analysis and vulnerability assessment — threat modeling, secure code review, and pre-deployment security validation across application and infrastructure layers.

亚马逊合规文案Pro版，多市场监管+法律风险评估+Rufus深度优化+季节性合规文案。 从单次文案检测升级为多市场合规体系。基础功能可使用 miaoji-compliance-copy 免费版。

面向电商产品Listing的文字商标检测与侵权风险分析。当用户提到商标检测、商标风险检查、品牌侵权筛查、产品标题商标扫描、文字商标查询、Listing合规检查、知识产权风险评估、text trademark detection, trademark infringement, brand infringement screening, listing compliance, intellectua

Advanced prompt injection defense with multi-layer protection, memory integrity, and tool security wrapper. OWASP LLM Top 10 2026 compliant.

Scan Solidity repositories for Atlas smart-contract vulnerability patterns and generate triage-ready security reports.

跨境电商产品合规速查（8品类×8市场）——输入产品类别和目的地国家，输出产品认证/标签/包装/测试/限制全套合规要求，覆盖8大品类×8个主要市场。适用于用户询问"出口需要什么认证"、"出口到XX要什么手续"、"亚马逊合规"等场景。

Scan WordPress sites for security vulnerabilities, misconfigurations, and potential threats.

Performs comprehensive security checks and compliance risk assessments on websites and applications.

Natural language interface for querying Greek accounting data. Ask questions in English, get answers from across all system skills.

Automated Hunter-Killer pipeline — BlackArch recon + CVE-MCP enrichment → human-verified exploits → bug bounty payouts. Orchestrates the full vulnerability discovery-to-payout workflow.

Identifies and fills compliance control gaps across security frameworks like ISO 27001, NIST, and SOC 2.

🔐 OpenClaw技能安全扫描器 - 专业级安全审计工具，检测敏感操作、木马后门，保护您的AI助手生态安全

Assess organizational maturity across AI Governance, Security, and Ethics & Compliance domains.

Perform a PESTLE analysis covering Political, Economic, Social, Technological, Legal, and Environmental factors. Use when assessing the macro environment, doing strategic planning, or evaluating exter

Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review. Use when creating a privacy policy, updating data protection do

Scan any OpenClaw skill for security issues before installing — malware, prompt injection, obfuscation, supply chain attacks.

RAIGO × OWASP LLM Top 10 — official OWASP LLM Application Security Top 10 (2025) enforcement rules for OpenClaw agents. Covers all 10 OWASP LLM risks: prompt injection, insecure output handling, train

API documentation generator with API backend validation for Chinese developers (中文API文档生成器+接口验证API). Generate professional Chinese API docs from code, OpenAPI/Swagger specs, or endpoint descriptions.

Use this skill when you need to query, insert, update, or delete records in the configured MySQL/PostgreSQL/SQLite database and you know the target table name and approximate schema. Triggers include:

Alicloud Service Scenario-Based Skill. Use for the vulnerability module of Alibaba Cloud Security Center (SAS): querying and filtering vulnerabilities (by severity/type/asset/status), triggering vulne

Automated CVE monitoring and alerting for tech stacks — NVD/NIST API integration, CVE-MCP enrichment, EPSS scoring, KEV catalog tracking. Daily digests with prioritized remediation.

Search security vulnerability scan results for MCP Servers and AI Agent Skills from the AICLUDE scan database.

Security scanner for OpenClaw skills. Detects malware and backdoors before execution, scores risk levels, and monitors file integrity through static code analysis.

Content quality and compliance tools for financial writing. Automated QA remediation pipeline detects and fixes banned phrases, missing disclaimers, missing CTAs, and excessive length.

Generate a daily or weekly cybersecurity threat briefing from open sources. Covers new vulnerabilities, active exploits, ransomware campaigns, APT activity, and industry-relevant threats.

即期本票从签发到结算的全流程合规管控工具，含合同要素清单、文件验证、案例库、机构图谱四大模块。当用户提到即期本票、本票合规、本票验证、票据法、demand note、promissory note、票据背书、本票合同、SWIFT报文验证、本票骗局、真票假结、空头本票等与即期本票相关的需求时使用此技能。

Full OWASP, Nmap, Nikto vulnerability assessment for OpenClaw deployments. Scan your infrastructure, harden configs, and generate compliance reports.

Role-based access control for Greek accounting firms. Login, role hierarchy, per-client permissions, session management, audit logging.

B2B SaaS competitive intelligence with 24 scenarios across Sales/HR/Fintech/Ops Tech

Implement multi-channel notification services for Chinese applications using WeChat Template Messages, WeChat Subscription Messages, SMS (Alibaba Cloud/Tencent Cloud), DingTalk Bot, Feishu Bot, and Em

Monitorea las bandejas de Gmail y Outlook en busca de correos de phishing. Analiza cada correo entrante usando reglas estaticas e IA (Claude API). Asigna un puntaje de riesgo (BAJO/MEDIO/ALTO/CRITICO)

Monitor a ZK-Bankir sovereign banking treasury via API — health checks, balance queries, decision ledger tracking, and hash-chain verification.

跨Agentaudit日志standard。7类日志（决策/操作/错误/security/性能/访问/data）+ compliance检查点 + audittrackstandard，适配fully AI companygovernframework。

Translate safety procedures, supplier documents, and Articulate Rise 360 eLearning content into 137+ languages using AI. Built for supply chain teams, HSE professionals, and L&D teams who can't afford

化妆品合规管理技能。当用户要求查询化妆品法规、备案要求、注册流程、合规检查、原料目录、标签规范、安全评估、监管动态、国际法规对比等场景时使用。也用于检查最新化妆品法规更新、分析合规风险、提供合规建议等。

Teach your AI agent to think about security. A reasoning methodology for vetting skills before installation — red/green flag heuristics, 4-phase audit protocol, post-install verification. No scripts,

Kubernetes manifest security auditor (CIS Kubernetes Benchmark). Scans all YAML/JSON manifests in your repository for privileged containers, hostNetwork/hostPID/hostIPC, dangerous hostPath mounts, mis

Comprehensive code security audit with AI-powered vulnerability detection. Covers OWASP Top 10, dependency scanning, secret detection, SAST, and provides actionable fix recommendations. Use when secur

Navigate the regulatory landscape for autonomous AI agents. Covers EU AI Act compliance, contract lifecycle management, agent insurance and risk pools, and tax/ledger compliance. 4 guides, $186 value.

Analyzes Gmail emails using gog CLI + AI: classifies as spam/important/ newsletter/other, scores priority 0-10, detects AI prompts injected in bodies, extracts tasks and deadlines, detects phishing, a

This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", o

XiaoHongShu (Little Red Book) data collection and interaction toolkit. Use when working with XiaoHongShu (小红书) platform for: (1) Searching and scraping notes/posts, (2) Getting user profiles and detai

Context pack for running a profitable, compliant veterinary practice. Covers service pricing benchmarks, DEA controlled substance compliance, OSHA safety programs, pharmacy/inventory management, st...