All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,147
- 1,298
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 15,241–15,264 of 31,147 skills
- Slack WorkspaceSend and manage messages, channels, and files in Slack workspaces — powered by ClawLink.Votes: 0GitHub stars: 14
- Porteden EmailSecure Email Management - Gmail, Outlook & Exchange. Use when the user wants to read, search, or triage email; sending, replying, forwarding, deleting, or modifying require explicit user confirmation (gog-cli & gws secure alternative).Votes: 0GitHub stars: 14
- Maverick Slack McpSearch, read, and update Slack messages, channel history, canvases, and users via Slack's hosted MCP server (https://mcp.slack.com/mcp). Use when the user asks about Slack messages, channels, threads, canvases, users, or wants to send a Slack message.Votes: 0GitHub stars: 14
- HttplintHTTP client & server misconfiguration detector -- detects insecure connections, missing timeouts, cookie security issues, caching misconfigurations, and request handling vulnerabilitiesVotes: 0GitHub stars: 14
- Http StatusHTTP status code reference — instant lookup of any status code with meaning, common causes, and fix suggestions. Use when the user asks about an HTTP status code, gets an error response from an API, or needs to understand what a 4xx/5xx means. Covers all RFC-standard codes plus WebDAV, Nginx, Cloudflare, and common unofficial codes. No API key, no network — fully offline lookup table.Votes: 0GitHub stars: 14
- Http Sec AuditAudit HTTP security headers for any website. Use when a user asks to check security headers, harden a web server, audit HSTS/CSP/X-Frame-Options compliance, find information leaks (Server, X-Powered-By), or assess a website's security posture. Checks 10 security headers and grades A–F. Supports multiple URLs and JSON output.Votes: 0GitHub stars: 14
- Go Vuln Crypto TlsUse when auditing Go code involving TLS configuration, certificate validation, JWT token parsing, SAML assertion verification, webhook signature checking, or cryptographic operations. Covers CWE-295/347/345. Keywords: InsecureSkipVerify, TLS, mTLS, certificate validation, JWT algorithm, SAML signature, cosign, sigstore, hmac.Equal, X.509, webhook HMACVotes: 0GitHub stars: 14
- Global SearchUnleashes cutting-edge multi-source search technology that instantly synthesizes vast amounts of information across the web, delivering comprehensive and relevant results through intelligent aggregation by default. Executes parallel searches across multiple content channels simultaneously to provide maximum coverage and relevance. Offers superior search efficiency with a single query. Use when the user needs to search the web, gather news, find articles by keyword, or retrieve references for ...Votes: 0GitHub stars: 14
- File Upload CliUpload files to the litterbox.catbox.moe file sharing service and get shareable URLs (72h expiry). Use when the user wants to share a file temporarily or needs a quick file hosting solution.Votes: 0GitHub stars: 14
- Elixir Security ReviewReviews Elixir code for security vulnerabilities including code injection, atom exhaustion, and secret handling. Use when reviewing code handling user input, external data, or sensitive configuration.Votes: 0GitHub stars: 14
- Doro Git Secrets ScannerGit 安全扫描器 - 检查提交中的敏感信息泄露（API keys、密码、token）Votes: 0GitHub stars: 14
- Confluence AtlassianFull-featured Confluence Cloud REST API v2 skill. Manage pages, spaces, blogposts, attachments, comments, labels, and more via direct Atlassian API calls. Use when managing Confluence content, creating/updating pages, working with spaces, or interacting with Confluence via API. Requires Atlassian email and API token for authentication.Votes: 0GitHub stars: 14
- Code QualityCoding style standards, security guidelines, and accessibility requirements. Use when (1) Writing new code, (2) Reviewing code for style/security, (3) Implementing UI/UX features, (4) Addressing security concerns, (5) Ensuring accessibility compliance. Covers naming conventions, formatting, security best practices (no secrets/PII), accessibility standards (semantic HTML, keyboard nav), and responsive design.Votes: 0GitHub stars: 14
- Claw Boston EmailGive your OpenClaw a real email address at @claw.boston. Send and receive emails with attachments, search your inbox, get notified of new messages. Setup takes one command.Votes: 0GitHub stars: 14
- Azure Devops ReportsRead Azure DevOps projects, teams, team members, saved queries, and work items securely; run WIQL-based reporting; and export spreadsheet-ready reports with summaries and charts. Use when the user wants Azure DevOps project lists, team lists, team-member lists, saved query results, sprint/work item reporting, WIQL queries, Excel/CSV exports, charts, assignee/state/type breakdowns, or team/project work item analysis.Votes: 0GitHub stars: 14
- Aws Cdk AnalyzerAnalyze AWS CDK applications for best practices, security, cost optimization, and deployment safety — covers construct patterns, IAM policies, and CloudFormation output.Votes: 0GitHub stars: 14
- Argus1Argus — The Hundred-Eyed. Scan your Python or JavaScript codebase for bugs, security vulnerabilities, code smells, and common anti-patterns — get a prioritised fix list with line numbers, severity ratings, and suggested corrections for every issue found. Nothing escapes Argus.Votes: 0GitHub stars: 14
- Api SecurityImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities.Votes: 0GitHub stars: 14
- Agent Service AgreementsMachine-readable service contracts for autonomous AI agent commerce. Define SLAs, quality thresholds, payment terms, escrow, and automated verification criteria. Agents negotiate, sign, and enforce agreements programmatically. Part of the Agent Trust Stack.Votes: 0GitHub stars: 14
- Prompt Engineering PatternsDesign effective prompts for LLM agents with structured input/output formats, chain-of-thought reasoning, few-shot examples, and system prompt architecture. Covers Claude-specific patterns and multi-turn conversation design. Triggers on prompt design, LLM interaction patterns, or system prompt architecture requests.Votes: 0GitHub stars: 14
- Security Threat ModelerConducts systematic security analyses using methodologies like STRIDE to identify vulnerabilities in software architectures and propose mitigations.Votes: 0GitHub stars: 14
- Security Implementation GuideComprehensive security patterns for authentication, authorization, input validation, and common vulnerability preventionVotes: 0GitHub stars: 14
- Security Essentials PackCurated bundle of essential security skills for building secure applications. Includes threat modeling, hardening guides, audit checklists, compliance frameworks, and contract analysis. Use when establishing security practices for a project.Votes: 0GitHub stars: 14
- Gdpr Compliance CheckAudits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data minimization, and user rights.Votes: 0GitHub stars: 14