安全合规 技能与专家

AI驱动的Java代码安全审计技能，实现系统化、高覆盖率的漏洞挖掘。使用场景： (1) 审计Java/Kotlin项目寻找安全漏洞（0day挖掘、代码审计、安全评估） (2) 企业级代码库的安全审计（支持大型项目） (3) 需要高质量、低幻觉率的安全审计报告 (4) CI/CD集成的前期漏洞发现 触发关键词：Ja...

Comprehensive code security audit toolkit combining OWASP Top 10 vulnerability scanning, dependency analysis, secret detection, SSL/TLS verification, AI Agen...

Map document sections to compliance framework controls with confidence scoring. Produces bidirectional mappings for gap analysis.

Semantic search over video files using Gemini embeddings. Index dashcam, security camera, or any mp4 footage, then search with natural language queries to fi...

Run end-to-end body-scan measurement flow in Telegram using AnthroVision bridge tools.

自动扫描OpenClaw技能文件，检测恶意代码、凭据泄露、依赖漏洞及权限风险，提供安全评估与修复建议。

Manage Alibaba Cloud ID Verification (Cloudauth) via OpenAPI/SDK. Use for listing resources, creating or updating configurations, querying status, and troubl...

Google Docs Management - permission-based create, read, and edit doc content; manage sharing, permissions, rename and delete.

Static code analysis tool. Detects security vulnerabilities, code smells, and complexity issues across 17 languages. All analysis runs locally — no code leav...

自动检测用户会话空闲30分钟，执行低风险自主进化操作并通过官方渠道发送进化报告。

检测文案、文件或网页中的小红书违禁词并加粗显示，提供违禁词替换建议和仅替换违禁词后的文案；当用户需要查询小红书平台违禁词、检查小红书笔记文案是否包含敏感词、或希望获得安全替换词和修改后文案时使用。

Run a two-pass, multidisciplinary code audit led by a tie-breaker lead, combining security, performance, UX, DX, and edge-case analysis into one prioritized report with concrete fixes. Use when the user asks to audit code, perform a deep review, stress-test a codebase, or produce a risk-ranked remediation plan across backend, frontend, APIs, infra scripts, and product flows.

Solidity language server providing smart contract development support including compilation, linting, security analysis, and code intelligence for .sol files. Use when working with Ethereum smart contracts, Substrate pallets, or any Solidity code that needs compilation, security checks, gas optimization, or code navigation. Essential for ClawChain pallet development.

ECC essentials bundle - install 23 core skills (agentic-engineering, security-review, deployment-patterns, docker-patterns, git-workflow, search-first, safety-guard) in one shot. Use when user asks to install ECC essentials, bootstrap OpenClaw with extended capabilities, or set up a full ECC workflo

Manage Alibaba Cloud Cloud Firewall (Cloudfw) via OpenAPI/SDK. Use for listing resources, creating or updating configurations, querying status, and troubleshooting workflows for this product.

MANDATORY security foundation for OpenClaw. Consolidate scattered API keys and credentials into a secure .env file with proper permissions. Includes GPG encryption for high-value secrets, credential rotation tracking, deep scanning, and backup hardening. Use when setting up OpenClaw, migrating credentials, auditing security, or enforcing the .env standard. This is not optional — centralized credential management is a core requirement for secure OpenClaw deployments.

Find and fix code issues before publishing a PR. Single-pass review with auto-fix. Use when reviewing code changes before submission or auditing existing cod...

Manage Alibaba Cloud KeyManagementService (Kms) via OpenAPI/SDK. Use for listing resources, creating or updating configurations, querying status, and troubleshooting workflows for this product.

把一份招标文件交给它，剩下的交给自动化。标书自动撰写工具通过 App Key 接入招采猫开放 API，先逐条拆解招标文件里的资格条件、评分办法与废标条款，再据此成篇写出技术标与商务标、直接导出 .docx 成品，最后跑一遍合规审查揪出格式与实质性偏差。凡是遇到写投标文件、批量成稿、投标前自查的活儿，即便没点名标书工具，也走本 SKILL。

Provides real-time cyber and cognitive security threat intelligence, scoring and briefing relevant news, vulnerabilities, exploits, and influence operations...

Security engineering workflow for OpenClaw privilege governance and hardening. Use for least-privilege execution, approval-first privileged actions, idle tim...

毒理学评估技能。覆盖TRA/PDE/TTC/QSAR/NAMs/毒理学数据库/SDS/GHS。适用化妆品/食品/药品/医疗器械/化学品安全评估。

专为小红书内容创作打造的一站式笔记生成工具，基于全网每日持续收录的2000+条爆款笔记数据，根据用户输入关键词，精准检索查询平台当下热门爆款笔记，通过AI深度复盘爆款内容的结构、开头逻辑、干货密度与互动话术，提炼核心流量密码与创作要点，严格贴合小红书内容生态与传播逻辑，生成通顺、合规、可直接发布的完整笔记文案，降...

Comprehensive NEAR best practices guide with 100+ terms covering wallet security, smart contracts, and DeFi safety.