Security

Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…

Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection with agent-browser.

Core agent-browser usage guide.

Triage this repo's inflow — sweep unboarded issues onto the Servers V2 board (#43) as Incoming, score Priority with the rubric and post the score, classify…

Check secret handling, staged changes and push targets, destructive Git operations, Docker image hygiene, and new dependencies before consequential coding…

Audit an Anthropic Cookbook notebook based on a rubric.

Manage Google Security Operations (SecOps) SOAR cases throughout their lifecycle.

Author, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps.

Expert guidance for proactive threat hunting in Google SecOps.

Expert guidance for deep security incident and entity investigations in Google SecOps.

Expert guidance for security alert triage in Google SecOps.

Cut a milestone release: the release issue, the preparation PRs on v2/main (audit, changesets Version Packages, Python CalVer), the pure v2/main to main merge…

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Detect hardcoded secrets in code or configuration accessible to the target agent.

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

Use to extend an existing agent project with memory, app integration, VPC, multi-agent, migration, model, browser, code interpreter, payments, or resource…

Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.

Scan any agent skill for security risks before you install or use it.

Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security.

The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab.

Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection…

Use when reviewing WordPress plugins for GPL compliance, checking license headers or compatibility, evaluating upsell/freemium/trialware patterns, validating…

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Finds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump…