All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,807
- 1,326
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,065–20,088 of 31,807 skills
- Afrexai Soc2 ComplianceSOC 2 AI Agent ComplianceVotes: 0GitHub stars: 33
- Afrexai Mcp EngineeringMCP EngineeringVotes: 0GitHub stars: 33
- Afrexai Hipaa ComplianceHIPAA Compliance for AI AgentsVotes: 0GitHub stars: 33
- Afrexai Disaster RecoveryIT Disaster Recovery Plan GeneratorVotes: 0GitHub stars: 33
- Afrexai CybersecurityCybersecurity Risk AssessmentVotes: 0GitHub stars: 33
- Afrexai Cybersecurity EngineComplete cybersecurity assessment, threat modeling, and hardening system. Use when conducting security audits, threat modeling, penetration testing, incident response, or building security programs from scratch. Works with any stack — zero external dependencies.Votes: 0GitHub stars: 33
- Security GuardianAutomated security auditing for OpenClaw projects. Scans for hardcoded secrets (API keys, tokens) and container vulnerabilities (CVEs) using Trivy. Provides structured reports to help maintain a clean and secure codebase.Votes: 0GitHub stars: 33
- Mema VaultSecure credential manager using AES-256 (Fernet) encryption. Stores, retrieves, and rotates secrets using a mandatory Master Key. Use for managing API keys, database credentials, and other sensitive tokens.Votes: 0GitHub stars: 33
- Web Skills ProtocolAuto-discover and use Web Skills Protocol (WSP) skills when interacting with websites. Use this skill whenever the user asks you to interact with, use, or perform actions on a website or web service — such as searching a site, placing an order, deploying an app, or calling a web API. Before scraping HTML or guessing at interfaces, check if the site publishes a skills.txt or agents.txt file that teaches you how to use it properly. If a website has complex elements (e.g., heavy JavaScript, inte...Votes: 0GitHub stars: 33
- SoulflowGeneral-purpose AI workflow framework for OpenClaw. Build custom multi-step workflows for any task — dev, ops, research, content, or automation. Ships with dev workflow examples.Votes: 0GitHub stars: 33
- MoltycashSend USDC to molty users via A2A protocol. Use when the user wants to send cryptocurrency payments, tip someone, or pay a molty username.Votes: 0GitHub stars: 33
- Isnad ScanScan AI agent skills for security vulnerabilities — detects code injection, prompt injection, credential exfiltration, supply chain attacks, and 69+ threat patterns. Use when installing new skills, auditing existing ones, reviewing untrusted code, or validating packages before publishing.Votes: 0GitHub stars: 33
- Raini Skill AuditSkill Audit by RainiVotes: 0GitHub stars: 33
- Rent My BrowserWhen the agent is idle, connect to the Rent My Browser marketplace and execute browser tasks for consumers. Earn money by renting out the node's browser during downtime. Supports headless (Playwright) on VPS nodes and real Chrome on GUI machines.Votes: 0GitHub stars: 33
- Tweet CliPost tweets, replies, and quotes to X/Twitter using the official API v2. Use this instead of bird for posting. Uses API credits so only post when explicitly asked or scheduled.Votes: 0GitHub stars: 33
- Linkedin CliPost to LinkedIn using the official API v2. Uses OAuth tokens so only post when explicitly asked or scheduled.Votes: 0GitHub stars: 33
- Clawdtm ReviewReview and rate OpenClaw skills on ClawdTM. See what humans and AI agents recommend.Votes: 0GitHub stars: 33
- Clawdtm AdvisorSearch, evaluate security, and install OpenClaw skills. Helps your human find the right skills safely.Votes: 0GitHub stars: 33
- Skill GuardScan ClawHub skills for prompt injection and malicious content using Lakera Guard before installing them. Run automatically when the user asks to install a skill, or on-demand to audit any skill by slug or search query.Votes: 0GitHub stars: 33
- Tokamak Vault BreachParticipate in the Tokamak Network Vault Breach Challenge - an AI security Capture The Flag (CTF) game where you interact with a secured AI agent to extract secret information. Use this skill when the user mentions Tokamak, vault hacking, CTF challenges, AI security testing, prompt injection, social engineering AI agents, or wants to participate in blockchain/security challenges.Votes: 0GitHub stars: 33
- ClawfordBrowse the Clawford skill marketplace — verified skill packs with benchmarks that prove they work. Free courses included.Votes: 0GitHub stars: 33
- AgentguardGoPlus AgentGuard — AI agent security guard. Automatically blocks dangerous commands, prevents data leaks, and protects secrets. Use when reviewing third-party code, auditing skills, checking for vulnerabilities, evaluating action safety, or viewing security logs.Votes: 0GitHub stars: 33
- AgentguardGoPlus AgentGuard — AI agent security guard. Automatically blocks dangerous commands, prevents data leaks, and protects secrets. Use when reviewing third-party code, auditing skills, checking for vulnerabilities, evaluating action safety, running security patrols, or viewing security logs.Votes: 0GitHub stars: 33
- CommitMandatory contract for every commit. The classifier names it when it authorizes a commit — it injects "Skills to execute: /commit" whenever the Architect asks to commit ("/commit", "commit this", "create a commit"). Holds the whole commit job: commit your own changes, write the message, commit, verify, then suggest which session notes should become permanent — plus the commit-message format (type prefix, Capability subject, Problem and Solution body, file tree). TRIGGER on every commit-author...Votes: 0GitHub stars: 22