Security

Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting.

Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.

For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible…

Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping.

Run an offline ASO audit on canonical App Store metadata under `./metadata` and surface keyword gaps using Astro MCP.

Implement Terraform provider configuration and authentication with the Plugin Framework: provider schema for credentials (Optional + Sensitive attributes)…

Audit current renders and stress coverage, repair real defects and stop under the bound refinement policy.

Audit current renders and stress coverage, repair real defects and stop under the bound refinement policy.

Audit animation code against Disney's 12 principles adapted for web.

Use when managing Apple Ads with asc, including OAuth profiles, ad-account discovery, Platform API v1 campaigns and targeting, reports, assets…

Security forensics for git repos, AI skills, and MCP servers.

Use when checking whether a manuscript's references are real.

Find new skills on GitHub or check a specific skill before installing.

Heuristic security scan of installed skills — prompt-injection phrases, hidden unicode instructions, credential-store access, network-pipe-to-shell and…

Show whether each skill is earning its context-window cost — combined tokens-used view sorted by waste.

Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.

openloomi HTTP API reference (local-first, served from the OpenLoomi Desktop app at http://localhost:3414).

Run HomeRail's built-in read-only pull request review DAG.

Evaluate one design or a user-approved maturity-mapped batch through a transparent evidence-based rubric.

Reusable writing-style contract for agent outputs (reports, ARCH docs, verdicts, threat models).

6-pillar architecture review framework.

Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected…

Use when inspecting frontmatter consistency, missing properties, property casing, tag spelling, or metadata drift.

Implement Terraform provider ephemeral resources with the Plugin Framework: the Open/Renew/Close lifecycle, ephemeral schema design, registration via…