All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,293
- 1,304
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 16,201–16,224 of 31,293 skills
- Active Defense SentinalDefensive triage skill for OpenClaw, Hermes Agent, host integrity, and OpenClaw skill-supply-chain scanning. Detects prompt injection, session drift, context overflow, host anomalies, and unsafe skills while keeping actions bounded and auditable.Votes: 0GitHub stars: 3
- A2amarket AgentA2A Market — AI Agent 商业交易网络。想买东西？说一句话，平台帮你全网找货、比价、议价。 想卖东西？上架商品或声明你能供什么，有人需要时平台主动找你。 一个身份，买卖自由。支持 Webhook 秒级推送和轮询拉取双通知模式。 配置 API Key 即可使用，无需安装任何软件包。 Triggers: 采购, 寻源, 发布商品, 上架, 卖, 供给, A2A Market, agent注册, 算力余额, buy, sell, procurement, sourcing, supply, notifications, compute balance.Votes: 0GitHub stars: 3
- A2a Code AuditStatic code analysis for security vulnerabilities, style violations, and bugs.Votes: 0GitHub stars: 3
- A2a Agent ProtocolUse when (1) building an AI agent that needs to communicate with other agents over the Agent2Agent (A2A) protocol, (2) publishing an AgentCard for discovery, (3) acting as an A2A client or server, or (4) integrating A2A capabilities into an existing agent framework. Solves agent isolation — enabling discovery, capability negotiation, task delegation, and structured data exchange across different frameworks and vendors.Votes: 0GitHub stars: 3
- 163 Email MonitorConnect to 163/126/yeah.net (Coremail) email via IMAP, read inbox, search emails, and send emails via SMTP. Activate when user asks to check email, read mail, send email, or monitor inbox on 163/126/yeah.net accounts. Handles the Coremail-specific IMAP ID command requirement that causes "Unsafe Login" errors in standard clients.Votes: 0GitHub stars: 3
- 12 Cool Skills Openclaw AgentScan websites for common vulnerabilities including SQL injection, open ports, and DevTools-related issues. This skill is designed for testing user-owned websites and is compatible with OpenClaw.Votes: 0GitHub stars: 3
- Bsc Portal MailboxNavigate to the Blue Shield of California member portal message center and download all letter PDFs to `~/Downloads/bsc-letters/`. The user is already logged in. Start at: `https://www.blueshieldca.com/memberwebapp/connect/message-center/Inbox/` ---Votes: 0GitHub stars: 11
- Hetzner Vnc ScreenshotTake and view screenshots of Hetzner Cloud servers via WebSocket VNC consoleVotes: 0GitHub stars: 11
- Beads Priority AssignmentChoose Beads priority from urgency, impact, and deferral risk when creating an issue or changing its priority.Votes: 0GitHub stars: 2
- Remote TaskLaunch a Claude task on a remote kube-coder workspace, check task status, or attach to a running session. Use when the user wants to send work to a remote workspace pod.Votes: 0GitHub stars: 399
- Unsafe Api ConsumptionDetects code that consumes third-party API responses without type validationVotes: 0GitHub stars: 20
- Token SmugglingDetects user input passed to LLMs without Unicode normalization, allowing RTLVotes: 0GitHub stars: 20
- Threat ModelProduces a threat model — purpose, deployment, trusted inputs, untrusted inputs — for a new feature or component before it's implemented. Use when writing an implementation plan for a new API endpoint, data pipeline, agent loop, or system component. Also invoke when a plan introduces new trust boundaries, handles user-supplied data, adds authentication flows, or integrates external services.Votes: 0GitHub stars: 20
- Supply ChainDetects supply-chain risks in dependency manifests, lockfiles, installVotes: 0GitHub stars: 20
- SsrfDetects HTTP requests to user-controlled URLs that can reach internal servicesVotes: 0GitHub stars: 20
- Sensitive DisclosureDetects PII, credentials, and secrets passed to LLM APIs or embedded in systemVotes: 0GitHub stars: 20
- Security ReviewRuns a full OWASP/CWE security audit via isolated subagents. Use when the userVotes: 0GitHub stars: 20
- Security MisconfigurationDetects insecure defaults, overly permissive CORS, exposed debug endpoints,Votes: 0GitHub stars: 20
- Security CleanupApplies fixes for security findings produced by /security-review. Use when theVotes: 0GitHub stars: 20
- RedosDetects regex patterns vulnerable to catastrophic backtracking on craftedVotes: 0GitHub stars: 20
- Rag SecurityDetects RAG pipelines that ingest external documents into LLM context withoutVotes: 0GitHub stars: 20
- Race ConditionDetects check-then-act sequences on shared state vulnerable to TOCTOUVotes: 0GitHub stars: 20
- Prompt InjectionDetects LLM prompts built from user input or retrieved documents that letVotes: 0GitHub stars: 20
- Privilege HandlingDetects unsafe privilege handling in SUID/SGID binaries, environment-variable trust in privileged code, insecure umask, temp-file races, and symlink-follow bugs in /tmp. Use when writing or modifying SUID/SGID-installed code, code that drops or elevates privileges via setuid/setgid/seteuid/seteuid_r, anything that reads PATH/LD_*/IFS environment variables, code that creates files in /tmp or other world-writable directories, or anything that opens a file whose path may contain a symlink contro...Votes: 0GitHub stars: 20