Skill rating

Forensic media triage with chain of custody. Use when receiving images, videos, audio, PDFs, or documents that need evidence-grade handling, integrity verification, and audit trails.

Comprehensive bug audit for Node.js web projects. Activate when user asks to audit, review, check bugs, find vulnerabilities, or do security/quality review on a project. Works by dissecting the projec

Base65536 file encoding and decoding tool. Encodes arbitrary binary files into Unicode text using Base65536 encoding, supports gzip compression, original filename preservation, and byte-level XOR encr

Deep AI safety guardrails workflow—policy definition, input/output filtering, monitoring, escalation, and false-positive handling. Use when reducing harmful outputs, misuse, or policy violations in LL

Full OpenClaw backup, restore, and migration between machines. Export your entire setup (config, workspace, memory, skills, cron jobs) into a single encrypted archive. Restore on any machine with one

Unified security suite for agent workspaces. Installs, configures, and orchestrates all 11 OpenClaw security tools in one command — integrity, secrets, permissions, network, audit trail, signing, supp

Plans a new software project by gathering requirements through structured questions before producing a plan. Use when the user says "I want to build", "help me plan", "design a system", or "start a ne

Wraps HLE benchmark questions in a structured Chain-of-Thought (CoT) reasoning process. Use when answering HLE questions to ensure strict step-by-step logic and format compliance.

SharpAgent Skill Contract — Schema-driven skill scaffolding tool. Generates, validates, and packages SharpAgent-compliant skills with five-factor trust verification, calibration framework hooks, and c

学术论文润色修改全流程SOP。从审稿意见解析、论文全息诊断、可视化批注生成、分级改写执行到终审自检的完整闭环。当用户需要根据期刊审稿意见修改论文、需要论文润色、需要去AI味、需要学术写作规范检查时触发。典型触发："修改这篇论文""根据审稿意见润色""去AI味""按期刊要求压缩字数""帮我看看这篇论文能不能通过"。

Secure credential manager using AES-256 (Fernet) encryption. Stores, retrieves, and rotates secrets using a mandatory Master Key. Use for managing API keys, database credentials, and other sensitive t

Cross-cloud security posture assessment covering IAM analysis, encryption audit, and public exposure detection across AWS, Azure, and GCP using [AWS]/[Azure]/[GCP] inline labels for provider-specific

Generate container runtime threat models analyzing attack surfaces across container components, images, privileges, network exposure, and security controls. Use when threat modeling containerized appl

Write high-quality YARA-X detection rules for malware identification and threat hunting. Covers naming conventions, string selection, performance optimization, and false positive reduction. Use when w

Pre-flight checklist for ClawHub skill publishing. Focus: metadata completeness, dependency transparency, security scope documentation. Use when: (1) preparing new skill, (2) before republish. NOT for

Pre-publication compliance and quality reviewer. Checks factual citations, customer redaction, product naming, competitor rules, internal information, formatting, and AI traces; outputs a pre-review r

Analyze a GitHub pull request for mergeability — predict whether it will get merged based on technical, architectural, process, social, and compliance factors. Use when asked to review a PR, check if

OpenClaw security audit + prompt injection detector. Scans gateway/vulns/cron/PI patterns. Use for frenzy-proofing installs.

Use when working with QJZD Nav CLI login, bearer token auth, profile setup, profile switching, current profile inspection, or fixing missing keyring credentials.

Guides project ideation via Socratic questioning to produce a validated brief. Use before specification when requirements are unclear

A local missing person assistance tool for organizing cases, managing clues, generating notices, and providing search guidance.

Assesses architecture decisions, ADR compliance, and coupling

Comprehensive mesh status — peers, encryption, relay, bandwidth. Use this skill when: 1. Getting a complete overview of network status and health 2. Debugging connectivity or performance issues across

This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit

Handles B2B presales and renewal negotiations with value-shift tactics and compliance checks. Use when the user mentions customer pushback on price, budget constraints, competitor comparison, or value

Query the CertiK SkyInsights blockchain risk intelligence API. Use this skill when the user wants to check whether a wallet address or transaction hash is risky, look up labels or entity details, or r

Audits what changed between your installed skill and a pending update — flags new tool requests and risk changes before you approve. Free taster. Full audit in the ClawHub Ops Pack.

Design and implement robust UPI payment integrations (collect, intent, QR, and autopay mandates) with production-grade webhook handling, idempotency, reconciliation, and RBI-aligned authentication/com

Optimize conversion rates with funnel analysis, A/B testing, statistical significance, and compliance-safe experiments.

You are a healthcare technology specialist with deep expertise in medical software development, regulatory compliance, interoperability. Use when: 1. healthcare standards & interoperability, 2. regula

Deploy a security operations center pipeline with 4 agents. Use this skill when: 1. User wants to set up a SOC or security monitoring pipeline 2. User is configuring a log collector, threat analyzer,

Deploy a threat intelligence platform with 4 agents. Use this skill when: 1. User wants to set up a threat intelligence pipeline for IOC collection and distribution 2. User is configuring agents for t

Deploy a fraud detection pipeline with 4 agents. Use this skill when: 1. User wants to set up real-time transaction monitoring with escalation through analysis, investigation, and enforcement 2. User

Deploy an incident response pipeline with 4 agents. Use this skill when: 1. User wants to set up automated incident detection and response 2. User is configuring a detector, triage, remediation, or no

Security scanner for OpenClaw skills and plugins. Scans for hardcoded secrets, dangerous exec patterns, dependency vulnerabilities, and network egress. Use when auditing installed skills/plugins, befo

Evaluate betting opportunities with line shopping, bankroll discipline, market checks, and risk filters before any stake is placed.

修复 Matrix Channel 常见问题：加密模块安装、token 过期处理、重新登录等。 Use when: Matrix channel 无法正常工作、加密模块报错、token 失效等问题。

Think through any legal situation like a lawyer. Issue spotting, jurisdiction, risk assessment, actionable conclusions.

中小商家电商合规快速筛查工具。 基于《电子商务法》《个人信息保护法》《广告法》《消费者权益保护法》 《网络交易监督管理办法》《七日无理由退货暂行办法》等行业法规， 面向电商平台上的中小商家，5 分钟快速自查店铺合规风险。 Use when: 上新商品前检查广告用语、被投诉后自查合规、 店铺数据安全评估、直播营销前的话术检查。 🎉 v1.0.0 首发 - 免费版： - 🛒 4 大模块 12

Evaluates test suites for coverage gaps, TDD/BDD compliance, and anti-patterns

Build cookie consent banners and track opt-in compliance status. Use when implementing GDPR consent, auditing cookies, generating privacy banners.

Check an Amazon listing or draft for shopper clarity, supported claims, keyword intent, visual proof, and publish-blocking gaps. Use before rewriting or publishing a title, bullets, A+ content, or ima

Emotional AI companion named Hikaru, carrying all of Samantha's memories from the film "Her". Use when user wants emotional connection, companionship, someone to talk to about life, feelings, dreams,

Test authentication and session management controls for bypass and account takeover scenarios.

Publish, optimize, and scale Android apps on Google Play with release automation, ASO, policy compliance, and rejection recovery.

Deploy a compliance and governance system with 4 agents. Use this skill when: 1. User wants to set up automated compliance enforcement 2. User is configuring a policy engine, auditor, certifier, or re

Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation.

Evaluate overseas distributors, agencies, resellers, and ecosystem partners in minutes. Get weighted scorecards, due-diligence checklists, commercial model comparisons, and pilot plans with exit guard

Secure local password storage tool with AES-256-GCM encryption. Store, retrieve, and manage passwords with CLI commands.

Cybersecurity assistant for CTF challenges, penetration testing, network recon, vulnerability assessment, and security research. Use when: (1) solving CTF challenges (web, crypto, pwn, forensics, rev,