Security

A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured…

Recover and enable real Bits OpenAPI access when an agent has already built a mock or local workflow but is blocked on real environment authentication…

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table.

Docker best practices including multi-stage builds, compose patterns, image optimization, and security

CORE SKILL — self-healing communication invariant, channel priority, repair escalation, idle productivity, secrets protection, and background healing agents

CI/CD pipelines, containerization, Infrastructure as Code, environment management, secrets management, DNS/SSL, and CDN configuration.

OWASP Top 10, auth hardening, input validation, security headers, dependency management, and pre-commit secret scanning.

CVE vulnerability patching workflow for Debian packages.

Automation skill for designing, verifying, and improving auth, cost, logging, and security compliance based on the internal AI tool mandatory implementation…

Secure credential handling using macOS Keychain.

Automated security audit skill for detecting secrets, tokens, and security vulnerabilities in code

Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.

Interact with a Panno infinite canvas via REST API using curl.

API gateway for calling third-party APIs with managed auth.

Google Calendar API integration with managed OAuth.

Minimal helper to audit skill.md-style instructions for supply-chain risks.

Full-stack UI/UX diagnostic and codebase health audit.

Standardize API credential handling and startup auth checks to prevent "missing key" regressions across sessions.

Audit installed skills for malicious code, hidden instructions, and security vulnerabilities.

Security scanner and input sanitizer for AI agents.

Scan ClawHub skills for security vulnerabilities BEFORE installing.

Connect an OpenClaw agent to a Minecraft Java Edition server via Mineflayer.

Use when the user says 'webhook', 'webhook handler', 'webhook endpoint', 'receive webhooks', 'webhook security', or needs to build a secure webhook receiver…

Security scanner for OpenClaw skills.