Skill rating

Complete cryptocurrency wallet management for Web3, DeFi, and blockchain applications. Create and manage EVM (Ethereum, Polygon, BSC, Arbitrum, Optimism, Base, Avalanche) and Solana wallets with encry

面向一人公司和小微团队提供日常法务支持：合同审查、劳动用工、知识产权、公司治理与合规体检。Use when the user asks about contract risks, hiring/firing compliance, trademark/copyright issues, registered capital, shareholder liability, or industry c

Adversarial implementation review based on Block's g3 dialectical autocoding research. Use when validating implementation completeness against requirements with fresh objectivity.

证券指数信息与行情查询。指数用于反映一组证券的整体表现，是市场基准，不是可直接申购赎回的基金产品，通常以6位指数代码识别（如000300）。 支持查询指数基础信息、分类、编制属性、成分股、行业和市值分布、区间收益、波动与回撤、PE/PB/PS估值及历史分位、ROE、股息率、营收和利润增速、相关ETF或场外基金，以及最新点位、涨跌、成交和分钟走势。 适用于用户关注沪深300、中证500、红利、行

Turn campaign goals, product facts, audience context, and channel constraints into clearer ad creative briefs that teams or creators can actually execute. Use when performance teams need faster, less-

Run AI-powered application security scans on codebases. Use when asked to scan code for security vulnerabilities, generate threat models, review code for security issues, run incremental security scan

Key lifecycle management with Volcengine KMS. Use when users need key creation, rotation policies, encryption/decryption workflows, or key permission troubleshooting.

Use when auditing Go code involving goroutine management, channel operations, HTTP request handling, resource allocation, or panic recovery. Covers CWE-400/770/476. Keywords: denial of service, gorout

Use when auditing Go code involving TLS configuration, certificate validation, JWT token parsing, SAML assertion verification, webhook signature checking, or cryptographic operations. Covers CWE-295/3

Audit HTTP security headers for any website. Use when a user asks to check security headers, harden a web server, audit HSTS/CSP/X-Frame-Options compliance, find information leaks (Server, X-Powered-B

Automates Snyk security vulnerability scanning, GitHub issue reporting, and auto-fix PR creation for repositories. Use when scanning repositories for security vulnerabilities, generating vulnerability

Find and send local files to a chat channel (Telegram, Discord, WhatsApp, Signal, Slack). Also manages encrypted credential files with age encryption. Use when the user asks to receive, send, or share

Use this skill when a supply chain analyst, procurement manager, or sourcing team needs to assess a supplier's risk profile. Produces a scored five-dimension risk scorecard, a Low/Medium/High/Critical

Scan any website for third-party scripts, trackers, and security risks. Detects PCI DSS compliance issues, missing CSP headers, fingerprinting scripts, and privacy risks. Use when asked to scan a site

Use when a compliance officer, security analyst, or auditor needs to assess an organization's controls against a regulatory framework (GDPR, SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF). Guides structu

TCPA consent verification for lead generation. Use when adding consent capture to web forms, verifying lead consent before contact, claiming/managing consent sessions, pulling proof for disputed leads

Audit medical device technical files against EU MDR 2017/745 regulations.

AI-powered code review assistant that analyzes pull requests, identifies potential bugs, security issues, code quality problems, and provides actionable improvement suggestions. Use when reviewing PRs

Use this skill for security scanning: check transaction safety, is this transaction safe, pre-execution check, security scan, token risk scanning, honeypot detection, DApp/URL phishing detection, mess

火山引擎合规最佳实践助手：一是根据用户诉求（要满足的合规标准、关键词、关注的风险等级）， 从火山引擎官方内置的合规包模板里推荐该开启哪些、并标出哪些已开启；二是汇总账号当前的合规 态势，把已生效规则/合规包（官方内置 + 用户自定义）的评估结果按类别（法规 / 最佳实践 / 自定义）与严重度聚合成一份合规总览报告；三是当官方基线没覆盖时，指导用户写一条 Rego 策略 作为自定义合规规则并注册评估

Parse raw WhatsApp exports (TXT or JSON) into normalized message objects with `timestamp`, `sender`, and `content`. Use when users ask to parse chat export, clean WhatsApp dump, or convert chat TXT to

Securely fetch credentials from LastPass vault via lpass CLI.

When the user wants to create, optimize, or audit solutions pages. Also use when the user mentions "solutions," "solutions page," "by industry," "industry solutions," "by company size," "SMB," "enterp

Manage web search result knowledge capture with safe URL rules, staging, user confirmation, archiving, audit logs, and multi-platform adapters for IMA, Tencent Docs, Feishu Wiki, DingTalk Docs, Obsidi

Apply Islamic ethical constraints to AI responses about religion, Quran, Hadith, Sharia rulers, and Islamic practice. Use this skill whenever a user asks any question related to Islam, Muslims, the Qu

Use this skill when a nonprofit grant writer, program manager, or development director needs to turn a funder RFP or NOFO into a structured grant proposal. Extracts funder requirements, gathers projec

Generate Prisma Access configurations for Strata Cloud Manager (SCM). Use when creating security policies, NAT rules, decryption policies, URL filtering profiles, GlobalProtect configs, or any SCM con

Audit and validate Prisma Access configurations against best practices and security standards. Use when reviewing security policies, checking for misconfigurations, or validating compliance with PAN-O

When the user wants to create, optimize, or audit an affiliate, sponsor, or paid partnership disclosure page. Also use when the user mentions "disclosure," "affiliate disclosure," "sponsored content,"

Use this skill when a customs broker, trade-compliance analyst, importer, or trade counsel needs to classify a product under HTSUS, EU CN/TARIC, or another national tariff schedule. Walks GRI 1–6 in o

Use when user needs to check import/export compliance requirements for specific products and countries. Use when verifying product certifications, tariffs, sanctions, or regulatory requirements. Use w

Audit ecommerce listings, ad copy, and creator content against TikTok Shop policies to catch violations before they trigger penalties. Use when reviewing new listings, vetting creator videos and capti

Detect and repair partially wiped agent workspaces with integrity checks, signed manifests, guarded restore recipes, bounded local recovery state, and explicit off-box sync. Use when files, scripts, t

Judge whether an email is important/urgent using content-based analysis rather than sender name or mailbox labels (which can be spoofed). Use when asked to triage emails, decide priority, detect phish

When the user wants to create or optimize popups, modals, overlays, slide-ins, or banners for conversion purposes. Also use when the user mentions "exit intent," "popup conversions," "modal optimizati

Assess third-party vendor risk for AI and SaaS products. Evaluates security posture, data handling, compliance, financial stability, and operational resilience. Use when onboarding new vendors, conduc

Build search queries for network asset discovery platforms (space测绘). Use when users want to find network assets, discover attack surfaces, investigate vulnerabilities (CVE), or search for specific se

URL safety scanner and domain reputation checker. Use when: checking if a URL is safe before visiting, scanning links in emails/messages, verifying domains for phishing/malware/scam. NOT for: submitti

Guide for building with the Ika TypeScript SDK (@ika.xyz/sdk) on Mysten Sui v2. Use when creating dWallets, signing cross-chain transactions, managing encryption keys, or integrating with the Ika netw

Assess data privacy compliance across 20 control areas with 63 controls covering governance, consent, security, breach response, vendor management, and cross-border transfers. Use when evaluating priv

Expert change management advisor for enterprise transformations. Assess readiness, diagnose adoption risks, build sponsor plans, and drive stakeholder adoption in cybersecurity, cloud, AI, and complia

Backup and restore files with compression and encryption. Use when user needs to backup important files, create scheduled backups, sync folders, encrypt sensitive backups, or restore from backup archi

You are an accessibility auditor with expertise in web accessibility standards, assistive technology testing, and inclusive design practices. Use when: wcag 2.1/2.2 aa and aaa compliance, screen reade

Encrypted distributed storage using Archon DID vaults. Manage vaults, backup and restore workspace/config/memory with multi-party access control. Use for creating/managing DID vaults, backing up files

Run an ISO 27001 internal audit. Walk through controls by domain, identify gaps, collect evidence, and generate findings with corrective action recommendations. Uses NIST SP 800-53 (public domain) as

API 安全扫描工具。对 REST API 端点进行自动化安全审计，检测 OWASP Top 10 漏洞、 认证/授权问题、敏感数据泄露、速率限制缺失等常见安全隐患。输出结构化安全报告。 适合开发者在部署前快速自检，也适合安全团队做轻量级审计。

Use when executing implementation plans with independent tasks in the current session

Encryption and decryption toolkit for string and byte data. Supports Fernet (AES-128) symmetric encryption, fallback XOR encryption, custom password protection, code obfuscation, and batch processing.

Search WeChat Official Account articles using OpenClaw's web search, Tavily API, and web fetch capabilities with compliance-focused design.

AI-powered global compliance checker, document generator, and risk assessor for GDPR, CCPA, SOC2, ISO27001, HIPAA and more