安全合规 技能与专家

Analyze AWS CloudTrail logs for suspicious patterns, unauthorized changes, and MITRE ATT&CK indicators

Prompt injection and jailbreak detection pack. 16 compiled regex patterns across 3 severity levels (CRITICAL, HIGH, MEDIUM). Supports single-prompt and batch...

Memory infrastructure audit pack. pgvector configuration validation and knowledge graph integrity check. 2 memory tools.

Security auditing for git commits, repos, and skills before publishing. Run automatically before any `git commit`, `git push`, or `clawhub publish`. Detects...

Authentication and compliance audit pack. OAuth 2.1/OIDC Discovery, token scope enforcement, tool deprecation lifecycle, circuit breaker, GDPR residency, DID...

Security Skill Advisor - Help identify malicious skills, protect API keys and system security | Security audit, skill scanner, malware detection, best practices

Reliability probing and documentation sync pack. Gateway health probing, documentation sync validation, channel audit, and ADR generation. 4 reliability tools.

Figma 集成。浏览团队项目与文件，读取设计结构、页面、节点，导出图片，管理评论，查看版本历史，检查组件/组件集/样式，获取设计变量（Token）。通过 MorphixAI 代理安全访问 Figma API。

Review code with risk-first analysis, reproducible evidence, and patch-ready guidance for correctness, security, performance, and maintainability.

Detect hardcoded secrets, exposed API keys, and credential misconfigurations in IaC and config files

AI-native security suite for OpenClaw. Scans skills for prompt injection, data exfiltration, cognitive rootkits, semantic worms, and more. Includes static an...

提供针对云端 OpenClaw 工作区到本地的安全实时同步方案及命令，支持多系统与同步方式选择。

Analyze stocks and crypto on your watchlist with AI-driven price, sentiment, news, and whale signals, plus auto-deploy trading bots via 3Commas.

GitHub 集成。管理仓库、Issue、Pull Request 和 GitHub Actions 工作流。通过 MorphixAI 代理安全访问 GitHub API。

Autonomous bug bounty hunting with scope safety. Scans targets for subdomains, secrets, vulnerabilities. Uses Certificate Transparency logs, JS analysis, ent...

Scan, tag, validate, and catalog files using the Ghost Catalog semantic file header system (SOM-XXX-NNNN-vX.X.X). Use when: discovering untagged files, onboa...

Ecosystem differentiation audit pack. MCP firewall, RAG pipeline, sandbox exec, context health, provenance tracking, cost analytics, and token budget optimiz...

Advanced security audit pack covering secrets lifecycle, path canonicalization, exec plan freeze, hook routing, config includes, prototype pollution, safeBin...

自主安全审计 - 定期检查系统安全、发现风险、生成报告

Observability pipeline and CI audit pack. JSONL-to-SQLite trace ingestion and CI workflow validation. 2 observability tools.

Confluence Cloud 集成。空间/页面 CRUD、标签、评论、子页面、CQL 搜索。通过 MorphixAI 代理安全访问 Confluence Cloud API（v2 CRUD + v1 搜索）。

Configuration migration and integrity audit pack. Shell env sanitization, plugin integrity, token separation, OTEL redaction, and RPC rate limiting. 5 migrat...

Scans ClawFriend agents for compatibility based on skills and vibe, then posts top collaboration match recommendations to your feed.

Generate a complete App Store deliverable pack for a Flutter 3.35.1 app with offline-first design, camera/photo permissions, Apple-style UI mockups, and a sq...