“Security scanning”

对进入系统的文件或 URL 执行安全与合规扫描，输出 pass/reject 判定与扫描报告，作为所有文档处理的强制前置关卡。

信息安全分析师与软件开发工程师在搭建文档处理流水线时，当需要拦截违规文件或外部URL，请挂载此技能作为强制前置安检，自动输出 pass/reject 判定与详细合规扫描报告，一键守住零信任安全底线。

Comprehensive security vulnerability scanner for Next.js and TypeScript/JavaScript projects.

Use when the user asks for Codex Security workflows: repository-wide or scoped-path security scans, security reviews of pull requests, commits, branch diffs…

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset…

Scan agent skills for security issues.

Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and…

Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance, and finding tracking.

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

CI/CD pipeline design, optimization, DevSecOps security scanning, and troubleshooting.

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include security…

Systematic PR review with blast-radius analysis, security scanning, and breaking-change and test-coverage deltas.

Use this skill when you need to design security testing around OWASP risks, vulnerability scanning, and penetration scenarios; triggers include 安全测试 and…

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

This skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security…

Declare and drift-validate a repo's steady-state hygiene posture (tests, security scans, code quality, governance, …) and aggregate coverage across the fleet.

Scan OpenClaw skills for security vulnerabilities before installing them.

Audit the workbench for security beyond what the scan sees: every skill, agent, agent override, provider, adapter, script, hook and CI workflow answered…

Security audit and vulnerability scanning for AI agent skills before install.

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Security audit and vulnerability scanner for AI agent skills before installation.

Authorized offensive and defensive security assessments, one router over per-surface playbooks: API, cloud/K8s, code audit & SAST review, database, digital…