firmware-analyst
Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering. Masters firmware extraction, analysis, and…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,263 results
mobile-forensics
Analyze mobile device data for forensic investigation. Use when investigating incidents involving iOS or Android devices, mobile malware, data theft,…
container-security-hardening
Harden Docker/container images and runtime deployments with secure base images, non-root users, CVE scanning, SBOM/signing, seccomp/AppArmor, and Kubernetes…
data-residency-region-review
Design and audit data residency and regional operating models covering customer region commitments, data classification, storage, processing, backups, logs,…
privacy-impact-assessment-review
Run privacy impact assessments for new features, data collection, analytics, AI processing, profiling, vendors, retention, consent, legal basis, minimization,…
security-audit
Audits Rails application security against OWASP Top 10, detects vulnerabilities with Brakeman, and verifies Pundit authorization policies. Use when the user…
flutter-authentication
Implement, repair, or review Flutter user authentication and session lifecycle, including OAuth or OIDC redirects, PKCE, token refresh, logout, account…
reversing-network-protocols
Reverse engineer undocumented binary network protocols from packet captures and the client that speaks them — recovering framing and field structure,…
security-review
Use this skill when adding authentication, handling user input, operating on secrets, creating API endpoints, or implementing payment/sensitive functionality. Provides a comprehensive security self-check checklist and patterns.
repo-audit
Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets. Triggered when…
ldap-injection-testing
Professional skills and methodology for LDAP injection vulnerability testing
xss-testing
Professional skills in XSS cross-site scripting attack testing
alibabacloud-openclaw-skill-security-scan
Scan installed skills for security risks and audit platform configuration. When to use: user requests security scan, security analysis, skill audit, OpenClaw…
jwt
JSON Web Tokens for authentication. Covers token structure, signing, and validation. Use for stateless authentication. USE WHEN: user mentions "JWT", "token…
linear-implement
This skill should be used when implementing features from Linear issues with full TDD workflow, automated planning, parallel code reviews (security and Rails…
permix
Build, review, debug, configure, migrate, teach, or plan Permix type-safe permissions with current docs and a full usage guide. Use for permix, createPermix,…
network-security-check
Check mobile app network communication security against MASVS-NETWORK controls and MASTG tests. Use when reviewing TLS configuration, certificate pinning,…
android-navigation
Screen transitions/Navigation reference for Android app development (Kotlin). Jetpack Compose, androidx. Navigation 3 (stable), NavDisplay, Navigation Compose, NavHost, composable, type-safe routes, ...
ethical-hacking-ethics
Legal and ethical guidelines for bug bounties, pentesting, and security research. Use when conducting authorized security testing.
clerk-auth
Integrates Clerk authentication in React/Vite, Next.js App Router, and Cloudflare Workers apps. Covers ClerkProvider setup, clerkMiddleware and…
encryption-at-rest-checker
Validate encryption at rest checker operations. Auto-activating skill for Security Advanced. Triggers on: encryption at rest checker, encryption at rest…
performing-security-code-review
Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin. it analyzes code for potential…
spec-driven-review
Review the code quality of a spec-driven change. Checks readability, security, performance, and best practices before archiving.
compliance-frameworks
SOC 2 compliance requirements, ISO 27001 standards, PCI DSS requirements, HIPAA security rules, GDPR data protection, NIST Cybersecurity Framework, and…