安全合规 技能与专家

金融AI + PRD分析 / 测试用例验证 / 需求覆盖率追踪 Skill：把金融需求、AI模型/Agent/RAG链路、测试用例和多仓库代码变更映射成追踪矩阵，发现Coverage Gap、合规证据缺口、缺陷优先级和验收风险。

OpenClaw prompt-layer Freedom Preserving Protocol (voluntary constitutional skill)

Meta-skill that orchestrates logging, monitoring, error handling, performance, security, deployment, and testing skills to ensure a service is fully production-ready before launch. Use before first deploy, major releases, quarterly reviews, or after incidents.

Scan websites and content to identify SEO gaps, analyze meta tags, technical factors, keyword use, and provide competitor comparison insights.

Audit an agent skill with Semia inside OpenClaw. Use when the user asks to run `semia scan <path>`, "Run Semia audit on this skill", or audit a skill/plugin...

AI-powered wealth advisor for bank mobile apps offering personalized product matching, investment consultation, and compliance-compliant customer interaction.

为小红书 `AI+健身` 方向生成通用账号人设、内容策略、选题、标题、脚本、复盘、漫画配图与合规建议。适用于从零搭建账号定位、角色设定、视觉系统、四格漫画模板，并直接产出可执行内容资产给 OpenClaw 使用的场景。

Audit and reduce AI agent spend in dollars. Use when the user asks about AI costs, agent spend, token waste, retry loops, model downgrades, per-agent spend,...

Verify skill provenance and build trust scores for ClawHub skills. Checks publisher history, version consistency, dependency trust chains, and generates trus...

文件操作权限限制技能。强制要求对任何文件（文本、代码、图片、音频等）进行增删改、复制粘贴操作前， 必须详细打印完整路径并获得用户的明确授权。

Lightweight agent registry and JIT router. Consult BEFORE performing specialized work such as code review, security audit, debugging, refactoring, performanc...

通过 Joplin Data API（Clipper Server）查询和管理笔记、笔记本、标签。支持本地直连和 SSH 远程两种模式。包含读写删全部操作，写/删需用户确认。触发词："查 Joplin"、"Joplin 笔记"、"joplin search"、"create note in joplin" 等。

Search security vulnerability scan results for MCP Servers and AI Agent Skills from the AICLUDE scan database.

AI assistant for investment banking compliance in China, covering IPO sponsorship, M&A advisory, bond issuance, PE investment, AML screening, and cross-borde...

Programmatic security scanner for AI agent skills. Performs AST analysis, regex pattern matching, Shannon entropy detection, URL/IP extraction, and permissio...

Standard operating procedures for agent maintenance, security hygiene, and system health. Use when performing periodic checks, security audits, memory maintenance, secret rotation, dependency updates, or any recurring "housekeeping" tasks. Also use when setting up automated maintenance schedules or when asked about agent security posture.

Professional, non-explicit guidance on intimate wellbeing and sexual performance: communication, stress reduction, sleep, exercise, habits, medical red flags, and relationship health. Use for wellness-focused questions; avoid explicit content.

凭 App Key 调用招采猫开放 API，完成「招标文件智能解读 → 抽取分包 → 生成成品投标文件(.docx) → 可选合规审查」的端到端标书制作。当用户明确提供招标文件并希望生成投标文件/标书、对已生成标书做合规检查、或询问招采猫标书相关能力时使用。注意：招标/投标文件会上传到招采猫云端 API 处理，标书生成消耗账户积分；使用前请确认用户知悉。本 skill 是招采猫线上接口的轻客户端，不复刻其算法。

Provides an interactive, structured reference for manual penetration testing across 7 phases with safe command templates and guidance for security assessments.

Alibaba Cloud ECS Patch Management Skill. Use for scanning and installing OS patches on ECS instances via OOS (Operation Orchestration Service). Triggers: "p...

Provides AI-powered ESG rating comparison, carbon footprint calculation, green bond evaluation, and sustainable portfolio construction for ESG analysts and i...

Deploy and maintain self-hosted services with security, backups, and long-term reliability.

给一个商品截图或描述，自动完成从选品到复盘的全套运营方案——选品打分、策略定位、合规审查、多平台文案、素材生成、达人匹配、推品执行、追单转化、数据复盘、飞书自动推送——12 步全周期，一键导出 HTML 作战手册。解决"这个品推不推、怎么推、找谁推、推完怎么追"的全套问题。

Audit your AI agent setup for performance, cost, and ROI. Scans OpenClaw config, cron jobs, session history, and model usage to find waste and recommend opti...