Security

Build, orchestrate, benchmark, and audit Angular 18 Micro-Frontend with Rsbuild & Module Federation 2.0 via multi-agent workflow.

Harden a production Linux VPS for your application across three layers — application (systemd hardening, monitoring alerts, backup automation), Ubuntu OS (UFW…

AI-powered security analysis of code changes — traces data flow, detects injection, auth bypass, secrets exposure, and unsafe deserialization across files.

Hardens code against vulnerabilities.

Metodología reproducible, agnóstica de lenguaje y framework, para auditar seguridad, estándares de código y errores probables en cualquier proyecto — cómo…

Patrones de autenticación: useAuth hook, token management, Google Sign-In, requestWithAuth.

Judge what an email is trying to get someone to do, with TypeSafe's Jev: a category across 16 kinds of mail (vendor payment fraud / BEC, fake invoice…

Draft, stage, and publish social-media posts for Reddit, Hacker News, Twitter/X, Mastodon, LinkedIn, Threads, Facebook, Instagram, and Dev.to.

Query token security audit to detect scams, honeypots, and malicious contracts before trading.

在添加身份验证、处理用户输入、使用机密、创建 API 端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

X/Twitter API 集成，用于发布推文、线程、阅读时间线、搜索和分析。涵盖 OAuth 认证模式、速率限制和平台原生内容发布。当用户想要以编程方式与 X 交互时使用。

Microsoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API.

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege…

Multi-phase UAT gate — cold-start smoke, build, typecheck, lint, tests, step-by-step manual verification, gaps-closure loop.

Amazon PPC campaign builder and optimizer for sellers.

This skill should be used when the user asks to review a diff or pull request, write review comments, audit code quality, establish review standards, or…

Security-focused review of an open-source pull request or diff.

Use when you need to map the application's routes, pages, and components, build reusable Playwright playbooks, or perform a UI/UX audit across the application

SkillsBench task PR review — classifies the task track (standard / research / multimodal), runs static policy checks against the track-specific rubric…

Debug/administer the Paperclip AI-company server on vps-openclaw — paths, CLI board auth, agent/adapter config, logs, DB, patch infra.

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources"…

Auto-diagnose and fix a failing or degraded installed skill.

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API…

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential…