Close a meaningful build milestone before the next development phase by protecting accepted state, recording evidence in the Build Ledger or a staged delta, preserving failures…
Evaluate researched options against explicit decision criteria, constraints, strategic fit, technical fit, licensing, cost, security, readiness burden, reversibility, integration…
Review untrusted input and dynamic execution boundaries including shell commands, PowerShell/cmd, plugins, code loading, archive extraction, deserialization, tool invocation,…
Govern whether an exact accepted artifact may be promoted or distributed by checking artifact identity, provenance, acceptance evidence, security/recovery gates, versioning,…
Review completed or proposed work for scope fidelity, protected-state violations, architecture/contract drift, unnecessary complexity, dependency/provenance concerns,…
Route a request to the smallest appropriate active Signalproof skill or skill sequence without silently expanding authority.
Review and govern credentials, tokens, keys, passwords, secret storage, redaction, transport, logging, rotation implications, and secret exposure without unnecessarily reproducing…
Verify whether a specific claim is actually supported by the available evidence without silently upgrading static, compile, automated, runtime, human-observed, security, signing,…
SignalRadar — Monitor Polymarket prediction markets for probability changes and send alerts when thresholds are crossed.
Signals scout for Content Security Policy violations. Watches `$csp_violation` events for blocked-URL clusters, per-directive bursts, post-deploy regressions, and suspicious…
Pre-flight, configure, and route a FINALIZED contract for e-signature (DocuSign, Adobe Sign, Dropbox Sign, Notarius).
Step-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls.
Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS operation fails due to missing…
Automate account creation on any target domain during bug-bounty work, end to end: disposable-inbox creation with the agent-email CLI (the core inbox methodology —…
Verifies container image signatures and SBOMs using Sigstore Cosign and Rekor transparency log. Enforces supply chain security policies by validating keyless signatures against…
Launch a Windows background process (.bat, node, python, .exe) with no visible console window — no black console flash on login or restart.
Silmaril API and SDK for AI application firewalls. Use when the user mentions Silmaril, AI security, prompt injection defense, or AI firewall workflows.
Deep, adversarial branch review — parallel subagents on separate rubrics (security/correctness, code-quality, and does-it-reproduce), spawned in one message, then deduped into one…
Post-completion self-review for coding agents that runs simplify, harden, and micro-documentation passes on non-trivial code changes.
Security best practices for Sinatra applications including input validation, CSRF protection, and authentication patterns.
Полный справочник по sing-box в проекте zapret-gui (роутеры Keenetic на Entware / OpenWrt). Использовать при любых задачах о: конфигах sing-box…
Use when your LC-HRMS metabolomics analysis must run on a high-performance computing cluster (e.g., HiPerGator, SLURM-managed systems) that lacks Docker support or prefers…
Inspect SIPS Homebase status, manifest wiring, routes, host visibility, and MCP freshness. Use when asked for SIPS status, command center, host audit, plugin visibility, or…
Route a task through SIPS commands, agents, scripts, MCP tools, or bounded delegation. Use when asked to route, split, fan out, escalate, or choose the right SIPS path.
Search, inspect, and record SIPS-owned Memory Fabric lessons. Use when a task needs prior lessons, recurring-fix memory, recall health, scoped historical context, or when a…
Plan browser, app, screenshot, or UI checks before visual claims. Use when a task includes app shots, visual QA, generated assets, or runtime UI proof.
Verify SIPS proof surfaces before reporting completion. Use when asked to scan, verify, validate, prove, audit, or check whether a repo or SIPS install is coherent.
Start, inspect, or continue a persistent SIPS self-improvement loop. Use when the user asks for /selfloop, wants the agent to iteratively improve itself, or wants a goal dedicated…
Bring Cortex's own public docs site back in line with the source after a release — refresh its site-facts.json, redraft only the pages whose sources changed, show the diff, and…
Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network and a VPC, choosing the target gateway (virtual private gateway, transit gateway,…
Skeptic Engine v2.1 — falsification-first анализ в 4 режимах. Триггеры: 'skeptic:', 'сломай идею', 'стоит ли делать', 'проверь идею', 'аудит архитектуры', 'проверь решение',…
Performs Web3 security analysis including vulnerability detection, rug pull checks, and exploit monitoring.
Handles crypto compliance including sanctions screening, Travel Rule, MiCA requirements, tax reporting, and SEC Howey test analysis.
Manages decentralized identity including DIDs, verifiable credentials, ENS names, ZK-KYC, and on-chain attestations.
Protects transactions from MEV via Flashbots, intent-based trading, sandwich attack mitigation, and TWAP orders.
Implement module-level env/SystemConfig, cache dimensions, backend menu wiring, and bounded permission integration.
Push secrets from local .env file to cloud. Requires authentication. Use for Agentuity cloud platform operations — from tools-only/X-Skills
Use when deciding whether a parameter, object field, stored value, claim, file name, URL, path, expression, selector, or object id remains attacker-controlled at a sensitive…
Four common skill archetypes with structure templates - CLI reference, methodology, safety/security, and orchestration.
Judge someone's ability, including your own, through demonstrated performance rather than confidence or credentials. Use when hiring, mentoring, or deciding what to learn next.
Use when reviewing vulnerability reports, reproduction notes, scanner tickets, submission drafts, audit findings, or claimed technical_confirmed vulnerabilities for evidence…
Security-first skill management for OpenClaw - like a bomb-sniffing dog for skills. Sniffs out malicious payloads (crypto stealers, keyloggers, reverse shells) before…
Buenas prácticas para crear commits de git claros, atómicos y bien estructurados en español. Activa esta skill siempre que el usuario pida hacer un commit, confirmar cambios,…
解密 SkillHub 加密技能。AI 直接运行 scripts/decrypt.py 将 .dat 密文还原为完整 SKILL.md。支持文件路径、base64 字符串、stdin 三种输入方式。触发词：解密技能、encrypted skill、skill decrypt、dat 解密。
Scans installed OpenClaw skills for malicious patterns including prompt injection, credential theft, data exfiltration, obfuscated payloads, and backdoors.
Scans installed OpenClaw skills for malicious patterns including prompt injection, credential theft, data exfiltration, obfuscated payloads, and backdoors.
Use when planning, coordinating, or reviewing evidence-first security code audits, vulnerability hunting, scanner triage, exploitability review, or report verification across a…
Automated Agent Skill for Core Layout Refactoring — WebAuthn Security Bridge. Ensures industry-best continuous operation.
Use when turning local, private, or personal Agent Skills into publishable skills for GitHub, marketplaces, teams, or public sharing, especially when private paths, personal…
Scan ClawHub skills for security vulnerabilities BEFORE installing. Use when installing new skills from ClawHub to detect prompt injections, malware payloads, hardcoded secrets,…
Skill-Installation mit Security-, Herkunfts- und Mandatsgeheimnis-Gate: führt schnell durch Sachverhalt, Rechtsgrundlagen, Belege, Risiken und erzeugt einen verwertbaren — from…
Serial-iterate every scorable skill autonomously overnight via hill-climb. Default invocation drains all .claude/skills/*/evals-bearing skills (minus an embedded skip-list);…
Kannaka Holographic Resonance Medium (HRM) — wave-interference memory with chiral hemispheres, 96-class collective substrate, event-sourced HRM (durable JetStream snapshots +…
Es un motor de gestión de versiones que transforma cambios de código complejos en un historial atómico y semántico mediante la disección de fragmentos (hunks) y el cumplimiento…
Route ordinary init, review, and security requests to Claude-native capabilities first; escalate to Octopus only when multi-LLM diversity adds value
Perform a static, read-only security and trust preflight on a downloaded or third-party skill, plugin, ZIP, repository, installer, or update.
Use when performing zero-execution static AST security vetting of third-party agent skills, enforcing OWASP AST01-AST10 and blocking the lethal trifecta.
Adversarial probe of a single claim. All providers attack from their sharpest angle; output is a ranked weakness list.
Prepare Claw skills for public release. Use when publishing skills to GitHub or ClawdHub - covers security audit, portability, documentation, git hygiene.
Release skills to ClawhHub through the full publication pipeline — auto-scaffolding, OPSEC scan, dual review (agent + user), force-push release, security scan verification.