cmd-review-chain-halt
Review protocol code for chain halt risks, non-determinism, and onchain behavior bugs
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-25 00:14
Security & auditing
7,423 results
onekey-security
Use when the user asks is this token safe, wants a honeypot check, security scan, simulate transaction, risk assessment, hardware wallet safety, App…
om-auto-sec-report
Driver that loops `om-auto-sec-report-pr` across a window (date, PR-number floor, branch, spec, or default last 7 days of merged PRs) and aggregates findings…
om-auto-sec-report-pr
Paranoid OWASP-oriented security analysis for a SINGLE unit of work — one PR, one spec under `.ai/specs/`, or one branch diff. Hunts non-obvious attack vectors…
ai-workflow-red-team-lite
Conduct lightweight red-team exercises on AI automation processes, focusing on misuse paths, boundary failures, and data leakage risks.; use for red-team, ai, workflow workflows; do not use for outputting directly abusable attack scripts, helping to damage systems.
audit-code
Security-focused code review for hardcoded secrets, dangerous calls, and common vulnerabilities
claw-skill-guard
Security scanner for OpenClaw skills. Detects malicious patterns, suspicious URLs, and install traps before you install a skill. Use before installing ANY…
clawdtm-advisor
Search, evaluate security, and install OpenClaw skills. Helps your human find the right skills safely.
openclaw-server-secure-skill
Comprehensive security hardening and installation guide for OpenClaw (formerly Clawdbot/Moltbot). Use this skill when the user wants to secure a server,…
sanitize
Detect and redact PII from text files. Supports 15 categories including credit cards, SSNs, emails, API keys, addresses, and more — with zero dependencies.
security
Security engineer for vulnerability assessment, penetration testing guidance, and secure code review. Use for OWASP Top 10 checks, threat modeling, or security…
skill-scanner
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data…
supabase-gen
Generate Supabase RLS policies from Prisma schema. Use when setting up row-level security for your tables.
code-review
Rigorous review of OWASP Cheat Sheet Series pull requests across security correctness, practicality, link and source verification, duplication, and language.…
totp-generate
Generates a current RFC 6238 TOTP two-factor code from a shared secret the user already holds, via a bundled zero-dependency script that parses otpauth:// URIs…
totp-mcp-server
Builds and self-hosts an MCP server that serves TOTP codes as a tool, so agents get 2FA codes without the shared secret entering the model's context. Use when…
totp-provider-api
Fetches 2FA codes from a managed provider's API or CLI - 1Password (op), Bitwarden (bw), Vault's TOTP engine, 2FAuth - so the seed never lands on this machine.…
audit
Activate for: audit, audit preparation, audit pack, internal audit, external audit, regulatory audit, supervisory visit, audit evidence, audit trail, audit…
dsar-privacy
Data Subject Access Request (DSAR) workflow management. Covers the full 30-day DSAR lifecycle: receipt, identity verification, data discovery, compilation and…
kyc-risk-rating
Activate for: KYC risk rating, customer risk classification, AML risk score, customer risk assessment, high-risk customer, risk-based approach, risk rating,…
security-incident-playbook-generator
Creates response procedures for security incidents with containment steps, communication templates, and evidence collection. Use for "incident response",…
cryptography-expert
Expert in cryptographic algorithms, PKI, TLS/SSL, encryption standards, key management, and secure communication protocols. Use when the user mentions…
incident-response-expert
Expert in security incident response, NIST framework, digital forensics, containment strategies, and recovery procedures. Use when the user mentions forensics,…
penetration-testing-expert
Expert in ethical hacking, penetration testing, OWASP Top 10, vulnerability assessment, exploitation techniques, and security reporting. Use when the user…