“Security scanning”

Pre-commit verification pipeline — static security scan, baseline-aware quality gates, independent reviewer subagent, and auto-fix loop.

Scan React codebase for security, performance, correctness, and architecture issues.

Orchestrate a full AWS infrastructure scan across resources, security, cost, and applications.

This skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security…

Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis.

Comprehensive security audit including threat modeling, vulnerability scanning, and compliance assessment.

The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab.

Declare and drift-validate a repo's steady-state hygiene posture (tests, security scans, code quality, governance, …) and aggregate coverage across the fleet.

An MCP server that provides interaction with StackHawk's security scanning platform.

This skill should be used when the user asks for "security review", "vulnerability scan", "audit Elm security", "security audit", "find vulnerabilities"…

Scan AI agent skills, Git repositories, URLs, ZIP files, or SKILL.md files for security risks before installation.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance.

Symbiotic CLI MCP Server for security scanning and analysis

Run a stateful red team / blue team security audit on the current project or a specific module.

This skill should be used when the user asks for "security review", "vulnerability scan", "audit gleam security", "security audit", "find vulnerabilities"…

Security best practices for secure coding, authentication, authorization, and data protection.

Use when the user asks for a full Go security audit or comprehensive security check.

This skill should be used when the user asks for "security review", "vulnerability scan", "audit F# security", "security audit", "find vulnerabilities"…

Scans git-tracked (public) files for operator-private tokens that should live only in gitignored files — real usernames, absolute home paths, companion-store…

Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.

Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.

Search and install 4,000+ security-scanned MCP servers from inside any MCP-aware AI client.