“Security scanning”

Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified…

Run a fast AWS Security Agent diff scan on only the changed code since a git ref.

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Scan agent skills for security issues.

Scan any agent skill for security risks before you install or use it.

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation.

The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab.

Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Security code review for vulnerabilities.

GitHub Actions security review for workflow exploitation vulnerabilities.

Redis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via…

AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC…

Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected…

Pre-execution security guard for AWS operations.

Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.

Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket.

Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security.

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces.

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise…

Scan a project to identify Kafka applications, extract schemas from data models, tag PII fields, generate Terraform for Confluent Schema Registry…

Security best practices for Azure DocumentDB — TLS enforcement, Private Endpoint / firewall configuration, Microsoft Entra ID + RBAC for authentication, and…