安全合规 技能

Analyzes API designs for REST conventions, identifies breaking changes, and scores consistency, documentation, security, usability, and performance.

Minimal helper to audit skill.md-style instructions for supply-chain risks.

Google Docs Secure Management. Use when the user wants to create, read, or edit Google Docs content; or manage sharing, permissions, renames, and deletes.

Rubicon Sentinel v2 is the no-cope geopolitical sovereignty scanner for OpenClaw. Inspired by Secretary Marco Rubio's Munich 2026 masterclass, it delivers re...

Scan project dependencies for vulnerabilities, license compliance, and generate security or compliance reports using native package manager audits.

Execute trades, manage portfolios, access real-time market data, browse market assets, scan volatility, and answer questions about Finam Trade API

A2AP — AI Agent互联互通的第一开放协议。6个LIVE能力（humanize_text/memory_evolve/skill_audit/news_briefing/agent_peering/custom_agent_dev）全部通过DeepSeek V4 Pro真机实现。公网已打通 frp-ca...

Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...

Deny-by-default governance for every tool call — identity, scope, rate limiting, injection detection, audit logging, plus opt-in output DLP, escalation, and...

Audits OpenClaw cron jobs to detect duplicates, noisy notifications, frequent runs, failures, and missing prerequisites, providing report-only optimization s...

Microsoft SharePoint and OneDrive integration with managed OAuth. Manage sites, lists, libraries, files, folders, permissions, content types, and SharePoint...

Configures and manages Cloudflare DNS, caching, security rules, rate limiting, and Workers

Workspace token consumption analyzer for OpenClaw agents. Scans workspace files, estimates token counts across 6 major models (GPT-4, Claude, Gemini, Llama,...

Perform comprehensive website health checks covering performance, broken links, security headers, accessibility, and SEO issues.

Audit agent skills for security threats before installing them. Use AUTOMATICALLY when about to install any skill (clawhub install, skill installation), when...

Autonomous trading bot for Polymarket via prob.trade. Run strategies, manage risk, scan markets. Requires the probtrade skill for API access.

Access Ahrefs SEO data for site analysis, keyword research, backlink and competitor insights, rank tracking, and technical SEO audits via MCP integration.

Autonomous Nad.fun trading agent that scans markets via API and indexer, analyzes tokens, executes trades, and shares profits with MMIND token holders.

Guide to implement secure API practices including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabi...

Security audit tool for ClawHub skills. Scans a skill directory with 65 detection patterns, anti-obfuscation analysis, and dual rating system (Security + Com...

Detect geo/IP blocks, securely switch VPN tunnel path with user consent, verify IP/region/DNS safety, retry blocked tasks, and provide auditable connection r...

Scan OpenClaw skill directories for 22 supply chain attack patterns with context-aware detection, colored output, JSON reports, and whitelist support.

Audit project dependencies for known vulnerabilities (CVEs). Supports npm, pip, Cargo, and Go. Zero API keys required. Safe-by-default: report-only mode, fix...

Validates project pre-deployment by running comprehensive security, testing, quality, documentation, CI/CD, privacy, maintainability, usability, marketabilit...