Use before anything goes public or gets deployed, to catch leaked API keys, exposed .env files, plain-text passwords, secrets in frontend code, and the obvious security holes....
Claude Skills Online Marketplace
Security
15 of 835
Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.
Check MCP servers against the PolicyLayer registry before connecting to them. Use when you are about to add, install or configure any MCP server (editing .mcp.json or a client...
Given a Chrome Releases blog post URL (chromereleases.googleblog.com), extract every CVE/bug and find the underlying Gerrit CL that fixed it by searching the local Chromium...
End-to-end Chrome security backport for an Electron release branch. Given a Chrome Releases blog URL and a branch (e.g. 41-x-y), determines which CVE fixes are missing from the...
Applies n8n's RBAC scope decorators to REST endpoints. Use when creating a new @RestController, adding any @Get/@Post/@Put/@Patch/@Delete route to an existing controller, or...
This skill should be used when the user asks about "flash protection", "readout protection", "RDP levels", "secure boot", "TrustZone", "PCROP", "write protection", "firewall",...
Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis
业务诊断助手适合technical、管理者、software、漏洞公告在用户提出“这件事该怎么做”这类问题，需要快速拆解目标、判断重点并形成可执行结果时使用，帮助基于输入材料生成摘要、诊断结论、行动建议和可复用交付物。
风险审阅助手适合人力资源、管理者、运营、software在用户提出“这里有什么风险”这类问题，需要快速拆解目标、判断重点并形成可执行结果时使用，帮助基于输入材料生成摘要、诊断结论、行动建议和可复用交付物。
Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.
Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.
Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.
Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with...