“Security scanning”

Security audit and vulnerability scanning for AI agent skills before install.

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Security audit and vulnerability scanner for AI agent skills before installation.

Scan text or files before memory writes or sensitive output.

Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.

Scan a codebase and its git history for exposed secrets — API keys, tokens, private keys, passwords — and block them before they ship.

Authorized offensive and defensive security assessments, one router over per-surface playbooks: API, cloud/K8s, code audit & SAST review, database, digital…

Use when the user asks for a defensive security assessment, security audit, vulnerability scan, or "how safe / how reliable is this code/project/repo".

Perform a thorough security review of the project, starting from a randomly selected file.

Scan OpenBot/Clawdbot skills for security vulnerabilities, malicious code, and suspicious patterns before installing them.

Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security…

Security review and safe-op patterns.

Structured, adversarial, multi-phase security audit of a codebase — recon → coverage-led hunting → finder≠validator validation → machine-readable findings →…

Scan project memory · age distribution + ungrouped count (L1 build readiness) + per-namespace entity stats · NO LLM.

Security intelligence for code analysis.

Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR…

Audit an AI agent skill before installing it.

Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.

Detects prompt injection attacks targeting LLM-based applications using a multi-layered defense combining regex pattern matching for known attack signatures…

STRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design.

Audits a third-party or freshly cloned repo before install or run for install hooks, auto-run files, CVEs, typosquats, and malicious code, graded A-F with a…

Audit HTTP security headers for any URL and receive a grade (A+ to F) with specific recommendations for missing headers

HTTP security header audit (A+ to F) with fix recommendations