All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,715
- 1,322
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,521–20,544 of 31,715 skills
- Spec Writing RulesEnforces clear, unambiguous, testable, FULL-STACK specification writing rules for Phase II web applications (Frontend + Backend + Auth + Database). Apply before any code is written.Votes: 0GitHub stars: 221
- Aerobase FlightsSearch, score, and compare flights with jetlag impact analysis.Votes: 0GitHub stars: 221
- SecureclawSecurity hardening toolkit for OpenClaw. Run audits, apply fixes, scan skills, monitor costs and memory integrity.Votes: 0GitHub stars: 221
- FlounderOperates Flounder, an autonomous white-hat security auditor. Use when a user asks for a security audit, bug-bounty review, vulnerability investigation, or exploit proof for an authorized repository, source tree, package, smart contract, Solidity/EVM project, ZK or proof-system code, deployed address, transaction, project link, or prior Flounder run; to run Flounder prepare, map, dig, audit, verify, confirm, or report workflows; to configure Flounder server, daemon, provider profiles, model au...Votes: 0GitHub stars: 221
- Google CalendarInteract with Google Calendar via the Google Calendar API – list upcoming events, create new events, update or delete them. Use this skill when you need programmatic access to your calendar from OpenClaw.Votes: 0GitHub stars: 221
- Staged Changes ReviewComprehensive review of staged Git changes for risk assessment, error detection, and impact analysis. Use when the user wants to review staged changes, check for errors before commit, analyze risks in git staged files, validate code changes before committing, or needs suggestions on staged modifications.Votes: 0GitHub stars: 221
- Nfr AssessAssess non-functional requirements across 6 quality categories (Security, Performance, Reliability, Maintainability, Scalability, Usability) with measurable criteria, evidence-based evaluation, and automated checks. Scores each category, identifies gaps with severity ratings, and provides remediation guidance. Use during quality review to evaluate production readiness and NFR compliance.Votes: 0GitHub stars: 221
- AuthFastAPI authentication with JWT, OAuth 2.1, RBAC, and API keys using python-jose + passlib. Use for: login endpoints, token issuance, protected routes, role checks, social login. Triggers: auth, JWT, token, login, OAuth, RBAC, password, bearer, session, middleware.Votes: 0GitHub stars: 221
- Ffcpe Catalog Entry JsonUse when authoring or validating an FFCPE (Firefly Creative Production for Enterprise) custom-action catalog-entry.json for the run-workflow service (App Builder actions). Covers installing the Adobe I/O CLI and this plugin, schema shape, org/auth, agent discovery, customActionConfig, validation, workflow usage, and troubleshooting. Use **`aio ffcpe catalog`** to validate/register—never raw curl. Older searches may say **Workflow Builder**; same plugin and topic **`ffcpe`**.Votes: 0GitHub stars: 221
- Pentest CommandsProvide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments.Votes: 0GitHub stars: 221
- File Path TraversalIdentify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers to read arbitrary files on the server, potentially including sensitive configuration files, credentials, and source code.Votes: 0GitHub stars: 221
- Security BasicsEssential security checklist and patterns for web applications. Use when reviewing code for security issues, implementing authentication, or hardening an application. Covers OWASP top 10, input validation, and secure coding practices.Votes: 0GitHub stars: 221
- Vibe Goal AlignmentUse when the user asks to align, confirm, or correct the agent's understanding before action; when prior misinterpretation, risky ambiguity, release/version/commit intent, destructive effects, or goal disagreement could cause rework or damage.Votes: 0GitHub stars: 221
- AuditComprehensive audit toolkit with 14 audit types. Includes a pre-push branch audit (8-category checklist with Clean/Minor/Blocking verdicts) plus 13 deep-dive audits run via sub-agents: code quality, documentation brittleness, docs-code sync, language best practices, concurrency, resource management, test quality, feature completeness, performance, bug patterns, design philosophy compliance, security vulnerabilities, and UI design (CRAP principles). ALWAYS use this skill when the user wants to...Votes: 0GitHub stars: 221
- Setup CredentialsSet up and install credentials for an agent. Detects missing credentials from agent config, collects them from the user, and stores them securely in the encrypted credential store at ~/.hive/credentials.Votes: 0GitHub stars: 221
- Canvas Component UploadBefore uploading, confirm the user has Drupal Canvas CLI installed and configured for their target site.Votes: 0GitHub stars: 221
- Gemini ImageGenerate images using AI when user wants to create pictures, draw, paint, or generate artwork. Supports text-to-image and image-to-image generation.Votes: 0GitHub stars: 221
- Secrets ManagementUse when storing credentials in OCI Vault, troubleshooting secret retrieval failures, implementing secret rotation, or setting up application authentication to Vault. Covers vault hierarchy confusion, IAM permission gotchas, cost optimization, temp file security, and audit logging.Votes: 0GitHub stars: 221
- Iam Identity ManagementUse when writing IAM policies, troubleshooting permission denied errors, setting up dynamic groups, or implementing IDCS integration. Covers policy syntax gotchas, principal types confusion, compartment inheritance, and common authorization failures.Votes: 0GitHub stars: 221
- Secrets ManagementUse when storing secrets in OCI Vault, debugging 401/403 secret retrieval errors, implementing secret rotation, configuring instance principal auth, or caching Vault API calls. Covers IAM dual-permission gotcha, vault hierarchy confusion, temp file security window, BASE64 encoding requirement, and cost optimization.Votes: 0GitHub stars: 221
- Prod ReadinessUse when assessing release readiness or running a pre-launch review. Spawns 5 specialist agents in parallel (security, testing, performance, observability, code quality) and synthesizes a prioritized report with ship/don't-ship recommendation. Keywords: production readiness, release review, pre-launch, security audit, test coverage, ship checklist.Votes: 0GitHub stars: 221
- Iam Identity ManagementUse when writing IAM policies, troubleshooting 403/404 permission errors, setting up dynamic groups, or debugging IDCS federation. Covers OCI-specific policy syntax gotchas, principal type confusion, compartment hierarchy rules, verb hierarchy, and common authorization failures. KEYWORDS: IAM, policy, permission denied, dynamic group, compartment, IDCS, federation, 403, 404.Votes: 0GitHub stars: 221
- Health CheckRun all quality gates across the entire codebase and report results. Headless — no analysis, just execute and print. Use for pre-PR validation, phase completion, or routine health monitoring.Votes: 0GitHub stars: 221
- Compute ManagementUse when launching OCI compute instances, troubleshooting out-of-capacity or boot failures, optimizing compute costs, or handling instance lifecycle. Covers shape selection, capacity planning, service limits, instance principal auth, and production gotchas. KEYWORDS: compute, instance, shape, capacity, OCPU, boot volume, launch, flex.Votes: 0GitHub stars: 221