安全合规 技能与专家

7-layer AI security scanner for OpenClaw. Blocks prompt injection, SSRF, command injection, data leakage, and memory poisoning across ALL channels (Signal, T...

Analyzes multi-language project dependencies to identify vulnerabilities, license risks, outdated packages, unused libraries, and plans safe upgrade paths.

Design, manage, and scale a channel partner program with tiers, deal registration, compensation, enablement, co-marketing, and performance audits.

Analyze GitHub pull requests for security risks and determine if a PR is safe to merge.

Scan codebase for environment variables, generate .env.example, validate .env, and ensure .gitignore safety

GCP compliance evidence collection for auditclaw-grc. 12 read-only checks across Cloud Storage, firewall, IAM, logging, KMS, DNS, BigQuery, Compute, and Clou...

Enforces skill-trust-scanner security checks before installing skills, blocking or alerting based on risk scores to reduce supply chain threats.

Generate QR codes from text or URL for mobile scanning.

Deep-dive security audit with 1,000 iterations (~4-8 hours). Use when user says 'deep security audit', 'ralph ultra', 'compliance audit prep', 'thorough secu...

Use whenever the user wants to find, shortlist, vet, or enrich US accounting and tax firms (CPA firms) — financial-statement audit, SOC 1/2 audit, corporate...

Performs a quick risk posture check on the host and provides a concise snapshot of OpenClaw's security and readiness status.

Create and manage fungible tokens and NFTs on Hedera with minting, supply control, and permission configuration.

Health check knowledge base for broken links, missing frontmatter, tag inconsistencies, and coverage gaps. Use when user says "audit KB", "check frontmatter"...

Use BEFORE any payment or money-moving tool call. Gates the action against a signed mandate and returns a signed, verifiable verdict, so a prompt-injected or...

Security threat analyzer for OpenClaw skills. Scans skill directories for prompt injection payloads, shell injection, obfuscated commands, credential theft,...

Monthly LLM stack audit — compare your current models against latest benchmarks and pricing from OpenRouter. Identifies potential savings, upgrades, and bett...

Bulletproof AI code verification. The agent IS the engine — no external tools required. Spawns parallel verification workers that slop-scan, type-check, muta...

Quick conversion audit for any homepage or landing page. Use when someone asks to "review my homepage," "audit my landing page," "why isn't my page convertin...

Search and track active or completed state bills by keywords and state using the LegiScan API with customizable filters.

Tracks data provenance and lineage by tracing sources, logging transformations, and auditing anchors to ensure data auditability and compliance.

Guides startups and scale-ups through SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS compliance to achieve audit readiness without external consultants.

Audit an OpenClaw agent workspace and generate standardized evaluation reports, scores, and patches. Use when asked to review memory quality, retrieval effic...

Comprehensive security audit with 100 iterations (~30-60 min). Use when user says 'security audit', 'ralph security', 'weekly security check', 'audit this pr...

Validates, tests, and scores skills for structure, script correctness, documentation, and usability to ensure compliance with tiered quality standards.