Skill reviews

Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust across MCP discovery, CVEs, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowf

• References files that are not bundled: discover/SKILL.md, scan/SKILL.md, scan-infra/SKILL.md
• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 8 referenced file(s) missing: discover/SKILL.md, scan/SKILL.md, scan-infra/SKILL.md

Securely expose an OpenClaw Gateway WebUI on a VPS via Cloudflare Zero Trust Access + Cloudflare Tunnel (cloudflared), including DNS cutover for custom hostnames and optional clean

• The skill tells the model to perform an irreversible action with no human approval
• Does not say what the result is
• Does not say what the process needs to start

• References files that are not bundled: img1.jpg, img2.jpg, img3.jpg
• 3 referenced file(s) missing: img1.jpg, img2.jpg, img3.jpg
• Does not say what the result is

Search the web for real-time information using DashScope Qwen. Use this skill whenever: (1) the user asks about current events, news, weather, stock prices, or anything requiring u

• References files that are not bundled: url
• 1 referenced file(s) missing: url
• Does not say what the process needs to start

Feishu IM messaging operations: send messages, images, files to users and groups via Bot API. Activate when user mentions: 飞书发图、发送图片、飞书消息、im:resource、image_key、飞书附件、飞书机器人发消息。

• Does not say what the result is
• No condition that starts the skill

Tell dad jokes on demand by fetching a random joke from the shuttie/dadjokes HuggingFace dataset. Trigger whenever the user asks for a dad joke, wants to hear a joke, asks you to t

• Prose only: no discrete steps
• Does not say what the result is

Prompt-injection and data-exfiltration screening for untrusted text. Use before summarizing web/email/social content, before replying, and especially before writing anything to mem

• References files that are not bundled: scripts/openclaw-safe-memory-append.js
• 1 referenced file(s) missing: scripts/openclaw-safe-memory-append.js
• Does not say what the result is

起名取名助手。宝宝起名、英文名、笔名、品牌名。含寓意解析。. Use when you need name generator capabilities. Triggers on: name generator.

• 1 steps
• Does not say what the result is

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• No condition that starts the skill

Summarize recent emails, generate a thematic image, and send a formatted HTML email report with the summary and image. Use for daily news digests, project updates, or any email-bas

• Does not say what the result is
• No condition that starts the skill

Free AI text-to-image generation. Turn text descriptions into images. No API key required. Supports multiple models via Pollinations.ai free API.

• Does not say what the result is
• No condition that starts the skill

Create PowerPoint presentations (PPTX) using Python and python-pptx. Handles timelines, charts, diagrams, slide layouts, custom colors, shapes, connectors, text formatting, and sli

• References files that are not bundled: assets/business-dark.pptx, assets/education.pptx
• The skill tells the model to perform an irreversible action with no human approval
• 2 referenced file(s) missing: assets/business-dark.pptx, assets/education.pptx

强大的AI自动化绘图与复杂信息可视化工具（基于 ContextWeave）。不仅支持代码与系统架构的可视化，更广泛适用于复杂逻辑梳理、知识库转换、业务流程图、思维导图及长文本的结构化信息图生成。通过深度的语义分析与请求编排，一键将晦涩文本与复杂知识转化为清晰直观的图形表达。

• References files that are not bundled: scripts/...
• 17 top-level sections: this looks like several domains in one skill
• The response is described with custom markup (6 tags): a typed call is more reliable

Security audit CLI + live dashboard for OpenClaw. Scans for secrets, config issues, prompt injections, vulnerable dependencies, and unverified MCP servers. Zero telemetry.

• Does not say what the result is
• No condition that starts the skill

• References files that are not bundled: ../product-guide-writer/SKILL.md
• 1 referenced file(s) missing: ../product-guide-writer/SKILL.md
• Does not say what the result is

• 14 top-level sections: this looks like several domains in one skill
• Does not say what the result is
• No condition that starts the skill

• 11 top-level sections: this looks like several domains in one skill
• Does not say what the result is
• No condition that starts the skill

与 CNB (Cloud Native Build) Open API 交互，用于代码管理和开发协作。当用户需要查询项目、代码仓库、问题、合并请求或其他开发相关数据时使用。需要 CNB_TOKEN 环境变量进行身份认证。API 请求地址从环境变量 CNB_API_ENDPOINT 获取，默认为 https://api.cnb.cool。

• References files that are not bundled: references/activities/getuseractivitiesbydate.md, references/activities/getuserrepoactivitydetails.md, references/activities/topcontributors.md
• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• The skill tells the model to perform an irreversible action with no human approval

• References files that are not bundled: 0001-use-postgresql.md, 0002-caching-strategy.md, 0003-mongodb-user-profiles.md
• 10 top-level sections: this looks like several domains in one skill
• 4 referenced file(s) missing: 0001-use-postgresql.md, 0002-caching-strategy.md, 0003-mongodb-user-profiles.md

Start a secure remote browser tunnel for manual user authentication (solving Captchas, 2FA, logins) and capture session data. Built for AI Commander.

• The skill tells the model to perform an irreversible action with no human approval
• Does not say what the result is
• No condition that starts the skill

Run Codex CLI, Claude Code, Kiro CLI, OpenCode, or Pi Coding Agent via background process for programmatic control.

• References files that are not bundled: references/guide.md
• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 14 top-level sections: this looks like several domains in one skill

Interact with Forgejo using the `tea` CLI. Use `tea issue`, `tea pr`, `tea actions`, and `tea api` for issues, PRs, Actions, and advanced queries.

• Prose only: no discrete steps
• Does not say what the result is

Map construction data to standard ontologies. Create semantic mappings between different data schemas

• References files that are not bundled: ../open-data-integrator/SKILL.md, ../../Chapter-2.5/data-model-designer/SKILL.md, ../../Chapter-4.3/bim-validation-pipeline/SKILL.md
• 3 referenced file(s) missing: ../open-data-integrator/SKILL.md, ../../Chapter-2.5/data-model-designer/SKILL.md, ../../Chapter-4.3/bim-validation-pipeline/SKILL.md
• Does not say what the result is

Book auto-body services through Lokuli MCP. Use when user needs to find and book auto-body. Triggers on requests like "book a auto-body", "find auto-body near me", or any auto-body

• Prose only: no discrete steps
• Does not say what the result is

Query real-time and historical financial data across equities and crypto—prices, market moves, metrics, and trends for analysis, alerts, and reporting.

• Does not say what the result is
• No condition that starts the skill