“Security scanning”

Database security, access control, and data protection

Run the pre-publish security audit for every publishable @tetherto/mdk-* package (or any non-private package in an npm monorepo).

Scan project and generate/audit CLAUDE.md files with stack auto-detection and Context7 docs.

Assess security posture, threat models, and compliance evidence for SOC2, ISO27001, GDPR, or HIPAA requirements.

Phased risk-centric security assessment framework.

Scan ClawHub skills for security vulnerabilities BEFORE installing.

OWASP Top 10, auth hardening, input validation, security headers, dependency management, and pre-commit secret scanning.

Hardens LDAP directory services against credential harvesting, LDAP injection, anonymous binding, and channel-binding bypass by enforcing LDAPS, channel…

Audit installed skills for malicious code, hidden instructions, and security vulnerabilities.

Run or install repo security leak checks with BetterLeaks and Trivy.

Scan a Git repository before pushing to find private information that should not be published.

Handle a security incident through the NIST SP 800-61 lifecycle — validate and scope the signal, build a timestamped fact timeline, classify severity, plan…

Configures Fail2ban with custom filters and actions to detect port scanning activity, SSH brute force attempts, and network reconnaissance, automatically…

大模型安全测评全流程管理工具。支持创建/更新模型和智能体测评资产、查询可用资源、发起合规测评任务、发起安全测评任务、分析测评结果等全流程操作。

Scans target codebase files for hardcoded secrets, plain credentials, and dangerous execution functions.

Pre-launch security and performance audit for AI-built ("vibe coded") web and mobile apps.

Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices.

Perform an explicitly requested local or offline source security audit when a hosted scanner is unavailable or a portable audit is requested; preserve…

Use when the user asks why IBM Bob asks for approval, how approved or denied command patterns match (prefix, wildcard, case), what "Security warning" or…

This skill should be used when the user asks to "analyze Terraform modules", "scan IaC for security issues", "review Terraform configurations", "check…

Use when designing, implementing, reviewing, or troubleshooting security tests, authorization checks, input validation, secret handling, dependency…

Comprehensive OWASP-aligned security guidance across six standards - Top 10 (2021) for web apps, ASVS 5.0, MASVS v2.1.0 for mobile, API Security Top 10…

Autonomous AI pentester for web apps and APIs.

Use when the user asks to detect, scan, audit, score, or flag AI-writing patterns without rewriting the text, including requests for a deterministic local…