Security compliance
bug-reaper
Web2 bug bounty hunting agent — evidence-based vulnerability finder and report writer. Use when: auditing web apps/APIs for HackerOne, Bugc...
clawproof-security
Enterprise-grade security for OpenClaw - blocks malicious skills, detects hallucinated packages, and prevents prompt injection attacks. Powe...
clawzembic
Lighthouse-style efficiency audit for OpenClaw. Scores your instance A+ to F across 6 categories (context injection, cron health, session bl...
dep-audit
Audit project dependencies for known vulnerabilities (CVEs). Supports npm, pip, Cargo, and Go. Zero API keys required. Safe-by-default: repo...
context-engineer
Context window optimizer — analyze, audit, and optimize your agent's context utilization. Know exactly where your tokens go before they're ...
crabukit
Security scanner for OpenClaw skills with Clawdex integration. Analyzes SKILL.md and scripts for dangerous permissions, hardcoded secrets, s...
epistemic-council
管理并执行认识论委员会全流程操作,包括状态检查、验证、审计及对抗性复审。
evolution-drift-detector
Helps detect when AI agent skills silently mutate across inheritance chains. A skill audited safe in generation 1 may drift far from the ori...
farmos-tasks
Query and manage farm work orders and tasks. View assignments, create tasks, update status. Uses integration endpoints (no auth) for reads a...
feed-diet
Audit your information diet across HN and RSS feeds — beautiful reports with category breakdowns, ASCII charts, and personalized recommenda...
gatewaystack-governance
Deny-by-default governance for every tool call — identity, scope, rate limiting, injection detection, audit logging, plus opt-in output DLP...
geo-audit-optimizer
GEO audit for AI search visibility. Scores your brand 0-100 across ChatGPT, Gemini, Grok & more. $0.99/audit or free with coupon.
gep-immune-auditor
Security audit agent for GEP/EvoMap ecosystem. Scans Gene/Capsule assets using immune-system-inspired 3-layer detection: L1 pattern scan, L2...
healthcheck-ready
快速检查主机风险态势,提供OpenClaw安全与就绪状态的简明概览。
kiro-x-publisher
Discover hot topics on X, enrich tweets one-by-one, score and summarize signals, generate one tweet draft, and optionally publish on schedul...
openclaw-memory-audit
Scan the agent workspace and memory logs for leaked API keys, tokens, or sensitive credentials. Use when the user requests a security check,...
obsidian-curator
Manage Obsidian vaults via LiveSync CouchDB — capture notes, AI-enrich and file them, manage tasks, audit and tidy vault structure. Use whe...
otta-cli
Use `otta-cli` to automate `otta.fi` workflows from terminal. This tool is usually used for tracking working time, absences, and sick leaves...
presale-regulation-auditor
Audit regulation freshness and update policy-driven controls without hardcoding. Use when checking if sales/process regulations are outdated...
protocol-doc-auditor
Helps detect hidden attacks in API and protocol documentation. Scans integration guides for dangerous instructions like curl|bash, credentia...
security-operator
Runtime security guardrails for OpenClaw agents. Protects against prompt injection, excessive agency, cost runaway, credential leaks, and ca...
security-vuln-scanner
扫描代码中常见安全漏洞如SQL注入、XSS、硬编码密码,提供检测结果和安全评分建议。
self
Organic personality development through self-observation with lightweight reliability guards. This skill helps an agent build a real, evolvi...
shopify-admin
Shopify Admin API CLI for orders, products, customers, and store management. Uses REST and GraphQL APIs with environment-based authenticatio...
skill-father
Authoritative skill-creation standards (Boss). Use when creating or updating OpenClaw skills so they are portable, reproducible, include pre...