reverse-engineer-anything
Reverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA. Use shipped-artifact or requested runtime evidence to…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,492 results
snyk-security-scan
Scan code, dependencies, containers, IaC and SBOMs with Snyk via its first-party MCP server: authenticate, trust a folder, run the right scanner, read the…
guardrails-developer-guide
Routes NVIDIA NeMo Guardrails library product-usage questions to the canonical documentation. Use when users ask how to install, configure, integrate,…
nemoclaw-user-configure-security
Presents a risk framework for every configurable security control in NemoClaw. Use when evaluating security posture, reviewing sandbox security defaults, or…
vercel-supabase-launch-check
Use when an AI-built app on Vercel and Supabase (Lovable, Bolt, v0, Cursor or Claude Code output) is about to launch or be handed to a client, or when the user…
uniswap-v4-security-foundations
Security-first guide for building Uniswap v4 hooks covering vulnerabilities, audit requirements, and best practices
third-party-code
Review/generate third-party code attribution, licensing, and notice requirements
security-review
Threat-model-driven security review of a change, feature, or subsystem. Runs a STRIDE-style pass over the actual code and produces a filing-ready report with…
publish-findings
Import selected Wiz package vulnerabilities, SAST, repository secrets, and IaC findings to Codex Security Cloud after previewing the destination and evidence.…
verify-fix
Use when the user asks whether an existing security fix, patch, finding, or completed issue actually remediates the original vulnerability without modifying…
aagent-system
Multi-agent automation system for AI Agent skill sample collection, security scanning, threat intelligence gathering, and research analysis. Supports a single-machine multi-process architecture, and can automatically collect samples, detect malicious skills, extract IOCs, and update rules. Trigger command: /aagent start
afrexai-cybersecurity-engine
Complete cybersecurity assessment, threat modeling, and hardening system. Use when conducting security audits, threat modeling, penetration testing, incident…
agent-access-control
Tiered stranger access control for AI agents. Use when setting up contact permissions, handling unknown senders, managing approved contacts, or configuring…
agent wallet
The agent's wallet. Use this skill to safely create a wallet the agent can use for transfers, swaps, and any EVM chain transaction.
auth
Design and implement authentication systems with the right patterns for each use case.
authenticate-wallet
Sign in to the wallet. Use when you or the user want to log in, sign in, connect, or set up the wallet, or when any wallet operation fails with authentication…
clawdstrike
Security audit and threat model for OpenClaw gateway hosts. Use to verify OpenClaw configuration, exposure, skills/plugins, filesystem hygiene, and to produce…
information-security-manager-iso27001
ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control…
mema-vault
Secure credential manager for Mema. Uses AES-256 encryption and best practices to store, retrieve, and rotate secrets. NEVER output raw secrets in logs or…
secure-code-guardian
Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities. Invoke for authentication, authorization,…
security-auditor
Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets,…
security-patterns
Real-time security pattern detector based on Anthropic's official security-guidance plugin. Use proactively when writing code to detect command injection, XSS,…
security-scanner
Scans OpenClaw skills for security vulnerabilities and suspicious patterns before installation
self-xyz
Integrate Self (self.xyz) — a privacy-first identity protocol using zero-knowledge proofs to verify passports and ID cards. Use when the user mentions Self…