issue-fix
Attempt to fix a security issue tracked in `<tracker>` by implementing the change in a public `<upstream>` PR. Runs `security-issue-sync` first to reconcile…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,570 results
issue-import
Scan <security-list> for reports that have not yet been copied into <tracker> as tracking issues, present the proposed imports to the user, and — defaulting to…
issue-import-from-md
Open one or more `<tracker>` tracking issues from a markdown file containing a batch of security findings. Each finding becomes one tracker landing in the…
issue-import-from-pr
Open a tracking issue in <tracker> for a security-relevant fix that has already been opened (or merged) as a public PR in <upstream>, in the case where there…
issue-import-from-scan
Triage a security scanner's multi-finding output (read via a pluggable scan-format adapter) and turn findings into security work only after a complete…
issue-import-via-forwarder
Optional sub-skill of `security-issue-import`, `security-issue-invalidate`, and `security-issue-sync` that handles the *relay/forwarder* case: a report that…
issue-sync
Synchronize a security issue in <tracker> with the state of its GitHub discussion, the <security-list> mailing thread, and any <upstream> PRs that fix it. The…
model-prepare
Front door for a project that has no published security model yet. Opens the conversation with `<governance-body>` on the private list, drives production of a…
model-update
Refresh an existing security model from what has actually happened since it was written. Mines the decision history — `<tracker>` dispositions with their…
model-verify
Pre-flight check on a project's published security model, run per repository in scope. Verifies two things — (1) **discoverability**: an agent can mechanically…
tracker-stats-dashboard
Generate a self-contained HTML dashboard of `<tracker>` repository statistics for security-team review.
workflow-security-audit
Read-only GitHub Actions workflow security audit for one repository, an explicit repository set, or a whole GitHub org. Runs `zizmor` to surface injection…
api-security-best-practices
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
aot-security-audit
Run a security audit on a TypeScript/Node.js or C#/ASP.NET Core codebase and produce a prioritized findings report with concrete fixes. Use this skill whenever…
browser-aac-login
Use Bitwarden Agent Access CLI (`aac`) with Codex in-app Browser login flows. Use when a user wants Codex to log into a website through `aac listen`/`aac run`,…
gitcode-pr-security-review
GitCode PR security review skill. Used to automatically review code security issues in Pull Requests of GitCode repositories, use the sdk-security-audit skill for code security analysis, and publish the review results as comments to the corresponding PR. Use this skill when the user needs to perform a security code review on a PR of a GitCode repository.
sdk-security-audit
C/C++ and Python SDK code security audit. Use when users request security audits, code audits, vulnerability scanning, or security checks. Supports local repositories and remote GitHub/GitLab/GitCode repositories. Starting from external SDK function entry points, perform symbol-level analysis based on secure coding standards, and output issue reports with a complete chain of evidence.
openclaw-sentry
Scan workspace files for leaked secrets: API keys, tokens, passwords, private keys, and credentials. Detects AWS, GitHub, Slack, Stripe, OpenAI, Anthropic,…
analyzing-ios-app-security-with-objection
Performs runtime mobile security exploration of iOS applications using Objection, a Frida-powered toolkit that enables security testers to interact with app…
analyzing-linux-audit-logs-for-intrusion
Parse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious…
analyzing-lnk-file-and-jump-list-artifacts
Analyze Windows LNK shortcut files and Jump List artifacts to establish evidence of file access, program execution, and user activity using LECmd, JLECmd, and…
analyzing-malware-sandbox-evasion-techniques
Detect sandbox evasion techniques in malware samples by analyzing timing checks, VM artifact queries, user interaction detection, and sleep inflation patterns…
analyzing-network-covert-channels-in-malware
Detect and analyze covert communication channels used by malware including DNS tunneling, ICMP exfiltration, steganographic HTTP, and protocol abuse for C2 and…