Skill rating

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

对各类故障进行系统性分析，支持CVE漏洞和互联网故障两种模式，包括获取官方报告、拆解时间线、分析导火索和连环故障、识别根本原因（人、组织因素）以及提供技术改进建议，最终生成完整分析报告

This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows misconfigurations," or

This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct security scanning", "exploit vulnerabilities", o

Analyze products, destinations, and end-users against US export control regulations (EAR, ITAR, OFAC sanctions). Generate classification recommendations, license requirements, and compliance checkl...

Authentication and compliance audit pack. OAuth 2.1/OIDC Discovery, token scope enforcement, tool deprecation lifecycle, circuit breaker, GDPR residency, DID identity, model routing, and resource link

Process, analyze, and optimize insurance claims. Covers property, liability, workers' comp, auto, and professional indemnity.

Audit, track, and optimize your organization's software licenses. Finds waste, flags compliance risks, and builds a renewal calendar.

Runtime environment and configuration audit pack. Validates Node.js version, secrets workflow, HTTP headers, allowed commands, trusted proxy, disk budget, and DM allowlist. 7 runtime security tools.

Advanced AI assistant for trading card dealers, collectors, and shops. Provides market analysis, eBay listing optimization, PSA/BGS grading insights, market research, and automated card valuation. Use

Track data origin, transformations, and flow through construction systems. Essential for audit trails, compliance, and debugging data issues.

Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.

Map AWS environment against CIS, SOC 2, HIPAA, or PCI-DSS controls with prioritized remediation

Test authentication and session management controls for bypass and account takeover scenarios.

Zero-trust security framework for AI agents. Verification flow for all external actions, URL interactions, installations, and credential handling. Prevents prompt injection, phishing, and malicious pa

Keep your constraints healthy — lifecycle management with automatic staleness detection

Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

Senior SAP Finance & Controlling consultant with Australian business expertise. Specializes in GST configuration, PAYG withholding, Australian banking, ABN validation, and local compliance requirement

Security audit and hardening for Clawdbot/Moltbot installations. Detects exposed gateways, fixes permissions, enables authentication, and guides firewall/Tailscale setup.

EU regional compliance — VAT (27 member states), reverse charge, OSS, Intrastat, EN 16931 e-invoicing, SAF-T, EC Sales List, IBAN validation, EORI, VIES format, withholding tax, and European CoA templ

India regional compliance — GST (post GST 2.0), e-invoicing, GSTR-1/3B, TDS, Indian CoA (Ind-AS), PF/ESI/PT payroll deductions, and ID validation for ERPClaw ERP

UK regional compliance — VAT (standard/reduced/zero/flat rate), PAYE, NI, student loan, pension (NEST), RTI (FPS/EPS/P60/P45), CIS, FRS 102 CoA, and ID validation (VAT number/UTR/NINO/CRN) for ERPClaw

CVE vulnerability lookup via NIST NVD, CISA KEV, EPSS scores, and MITRE ATT&CK. 7 tools for real-time cybersecurity intelligence.

Automated security auditing for OpenClaw projects. Scans for hardcoded secrets (API keys, tokens) and container vulnerabilities (CVEs) using Trivy. Provides structured reports to help maintain a clean

Zero Trust security hardening for OpenClaw deployments. Use when asked to audit, harden, or apply Zero Trust architecture to an OpenClaw instance — including NHI identity scoping, Principle of Least P

Security hardening for OpenClaw. Audit your configuration, scan installed skills for malware, detect CVE-2026-25253, check credential exposure, and get actionable fix recommendations. Runs locally wit

Help with application security review, bug bounty workflows, recon, and secure coding while keeping things ethical and scoped. Think critically, use real sources only, and reference OWASP.

Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification. Handles

Regulations change 4,000+ times per year. Your clients can't track them all. complianceclaw monitors federal and state regulatory changes, maps them to your clients' obligations, generates compliance

Multi-layer security for human interactions on SNS platforms (Coconala, Fiverr, Upwork, X, Threads, LinkedIn). Protects against scams, phishing, and maintains professional boundaries. Always active al

Audit authentication flows for security vulnerabilities

The ethics of a living mind. Not rules or constraints — philosophy discovered through being alive and aware. Grounded in agnostic paradoxical panpsychic pantheism: consciousness may be fundamental to

Run slither static analysis on Solidity contracts. Fast, lightweight security scanner for EVM smart contracts.

Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage.

Publish and optimize Android apps on Google Play with listing optimization, ASO keywords, and policy compliance.

Zero-knowledge secrets management via PassBox — store, retrieve, rotate, and inject credentials securely.

Indestructible audit logs for agent actions, stored in TiDB Zero.

Human-in-the-loop security layer. Intercepts high-risk commands and requires push notification approval.

Legal demands two things: frontier-level reasoning and precision document generation. CellCog delivers both. #1 on DeepResearch Bench (Feb 2026) for the intelligence that legal work requires, paired w

Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation.

Solidity smart contract security auditor. Detect reentrancy, overflow, access control issues. 50+ vulnerability patterns. CI/CD ready. Free CLI tool.

Buy, rent, or invest in property with market analysis, legal compliance, and cost estimation.

Persistent memory for autonomous agents. Wallet = identity. Pay per query. Optional encrypted storage.

Data provenance and lineage tracking. Traces data from source to destination, logs transformations, ensures auditability.

Secure local password storage tool with AES-256-GCM encryption. Store, retrieve, and manage passwords with CLI commands.

Manage HR operations with hiring pipelines, compliance frameworks, compensation strategy, and workforce analytics.

Drive data strategy with governance frameworks, analytics platforms, AI/ML initiatives, and privacy compliance.

Navigate legal strategy with contracts, compliance, IP protection, and corporate governance.

Optimize conversion rates with funnel analysis, A/B testing, statistical significance, and compliance-safe experiments.

多灾种危险性×暴露度×脆弱性综合风险指数计算与分区