Security

Amazon Bedrock production readiness assessment covering IAM governance, data retention (ZDR), quota and capacity headroom, and operational observability…

Automatically load this skill when investigating application outages, service degradation, or errors that could have security-related root causes — including…

Review code for any Frappe application — a checklist distilled from years of engineering practice on correctness, security, performance, concurrency…

Audit and improve existing CLAUDE.md files across a repository.

Automated vulnerability scanner for agent platforms.

Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting.

Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.

For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible…

Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping.

Run an offline ASO audit on canonical App Store metadata under `./metadata` and surface keyword gaps using Astro MCP.

Implement Terraform provider configuration and authentication with the Plugin Framework: provider schema for credentials (Optional + Sensitive attributes)…

Audit current renders and stress coverage, repair real defects and stop under the bound refinement policy.

Audit current renders and stress coverage, repair real defects and stop under the bound refinement policy.

Audit animation code against Disney's 12 principles adapted for web.

Email/SMS lifecycle and deliverability framework for SMB Product-Builder products that send transactional or lifecycle messages (booking reminders, CRM…

Use when managing Apple Ads with asc, including OAuth profiles, ad-account discovery, Platform API v1 campaigns and targeting, reports, assets…

Security forensics for git repos, AI skills, and MCP servers.

Use when checking whether a manuscript's references are real.

Find new skills on GitHub or check a specific skill before installing.

Heuristic security scan of installed skills — prompt-injection phrases, hidden unicode instructions, credential-store access, network-pipe-to-shell and…

Show whether each skill is earning its context-window cost — combined tokens-used view sorted by waste.

Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.

openloomi HTTP API reference (local-first, served from the OpenLoomi Desktop app at http://localhost:3414).

Run HomeRail's built-in read-only pull request review DAG.