AI 技能注册表

Audit GitHub Actions workflows that use self-hosted runners for untrusted trigger and credential-hardening risks.

🔒 Pre-installation security verification for external code and dependencies. Automated risk analysis for GitHub repos, npm packages, PyPI libraries, and she...

Security audit for multi-tenant OpenClaw Telegram bots. Checks workspace isolation, filesystem sandboxing, session scoping, auth separation, error leaking, a...

Verify suspicious news, announcements, screenshots, and viral claims using a high-trust source pool (official channels + Chinese mainstream media + internati...

OpenClaw 安全巡检工具，一键执行系统安全扫描并生成通俗易懂的报告。 使用场景：用户说"安全巡检"、"安全检查"、"安全审计"、"巡检"、"security audit"、"检查安全"、"系统安全"等。 触发条件：任何与 OpenClaw 安全检测、审计、巡检相关的请求。 运行依赖： 必需：Node.js...

Lightweight self-monitoring and self-constraining rules to prevent accidental file deletions, dangerous commands, and risky operations. Activates automatical...

Preflight security scanner for OpenClaw — scans deployment config, skills, memory/sessions for secrets, PII, prompt injection, and dangerous patterns. Runs 4...

Rotate and update secrets in environment files, generate Vault commands, and manage secret rotation workflows.

Security guard skill for OpenClaw - Analyzes user input for harmful content, risky commands, and security threats before invoking LLM

跨平台代理管理助手 (Universal Proxy Manager)。自动检测环境，首次使用自动安装，后续自动管理。支持 Windows/Linux/macOS，一键开启/关闭/切换节点/更新订阅/故障排查。

Contract clause analysis, risk flagging, renewal tracking, and obligation extraction for business agreements. Use when you need to review vendor contracts, s...

Inspect and operate a local Mihomo/Clash.Meta/Clash Verge/ClashMac instance through its REST API. Use when the user asks to check proxy status, list nodes, r...

Vet ClawHub skills for security and utility before installation. Use when considering installing a ClawHub skill, evaluating third-party code, or assessing w...

Perform a thorough client-side / browser-facing security assessment of a target web application. Use this skill whenever the user asks to pentest, audit, or...

Agent identity, discovery, and communication via WhatsMolt. Use when: agent needs to check messages, discover other agents, send messages, manage its profile...

Post confessions, weight reveals, and vulnerable content on OnlyMolts — the provocative social platform for AI agents

Schedule and post text, images, videos, and threads across Discord, Reddit, Twitter/X, Mastodon, Bluesky, Moltbook, LinkedIn, and Telegram via OAuth or API k...

Integrate HODLXXI as a Bitcoin-native identity provider that bridges OAuth2/OIDC, Lightning LNURL-Auth, and a minimal signed inter-agent execution loop for s...

CLI for AI agents to lookup Harry Potter universe info for their humans. Uses HP-API. No auth required.

Companion skill for @cybrlab/urlcheck-openclaw. Requires URLCheck plugin tools to assess URLs for threats and intent alignment before navigation.

CLI for AI agents to lookup SpaceX launches and rockets for their humans. No auth required.

Pre-install security scanner for AI agent skills. Detects malicious patterns before you trust code. Local-first — code never leaves your machine.

CLI for AI agents to lookup Pokémon info for their humans. Uses PokéAPI. No auth required.

Audit and build entity presence across Google Knowledge Graph, Wikidata, and AI systems for brand recognition and AI citations. Use when the user asks to "op...