Comprehensive security hardening and installation guide for OpenClaw (formerly Clawdbot/Moltbot). Use this skill when the user wants to secure a server, install the OpenClaw…
Guides the creation of self-signed SSL/TLS certificates using OpenSSL, including key generation, certificate creation, combined PEM files, and verification scripts.
Open-source automated bug detection, persona feedback, and test case generation using 33+ specialized AI testing agent profiles.
This skill should be used when the user asks to 'swap tokens', 'trade OKB for USDC', 'buy tokens', 'sell tokens', 'exchange crypto', 'convert tokens', 'swap SOL for USDC', 'get a…
This skill should be used when the user asks to 'find a token', 'search for a token', 'look up PEPE', 'what's trending', 'top tokens', 'trending tokens on Solana', 'token…
Progressive-disclosure operational-safety-depth modules for the work-loop. Holds failure-mode-keyed checklists the quality-engineer reviewer reasons from (state-and-idempotency,…
Skill for configuring security and authorization in Orchard Core. Covers permission definitions, authorization services, CORS, security headers, content security policies, and…
CLI for Google OSV database. Query vulnerabilities for packages, scan local projects for vulnerable dependencies. **Dependency**: This is an x-cmd module.
This skill uses the owasp-compliance-checker plugin to automatically identify potential security vulnerabilities based on the OWASP Top 10 (2021) list.
Audit web applications against OWASP guidance and produce specific remediation steps. Use this skill whenever the user mentions owasp, appsec review, asvs, top ten, web…
Use this skill when the user says 'OWASP audit', 'OWASP top 10', 'security audit', 'vulnerability assessment', 'full security check', or needs a comprehensive web application…
Command-line task management tool for AI coding agents and humans. Provides local SQLite-based task boards for tracking work items, checklists, and comments without requiring an…
A skill that runs a GAP ANALYSIS & feedback review of an existing project through a multi-agent harness instead of a single review pass.
A skill that runs a GAP ANALYSIS & feedback review of an existing project through a multi-agent harness (enhanced variant: GPT-5.5 cross-model adversarial confirmation) — from…
A skill that runs a hard, testable coding task through a multi-agent harness (enhanced variant: GPT-5.5 cross-model adversarial verification).
World-Class Partnerships & Ecosystem Playbook. Use for: strategic alliances, joint ventures, channel partner management, partner tiering, co-marketing, co-selling, ecosystem-led…
Partner, channel, and ecosystem marketing for B2B SaaS. Use this skill for co-marketing with technology alliances and channel partners, integration launches, joint campaigns and…
Use this skill when working with Hudu passwords (asset passwords) - secure credential storage, retrieval, folders, and access patterns.
This skill should be used when the user asks to "simulate attacks", "build attack trees", "model exploit chains", "score exploitability", or is running PASTA stage 6.
Run the risk-centric PASTA process to analyze threats from an attacker's perspective against defined business value.
This skill should be used when the user asks to "calculate risk scores", "prioritize mitigations", "generate remediation roadmap", "analyze business impact", or is running PASTA…
Universal payroll computation workflow base that defines the gross-to-net calculation, statutory deduction handling, payslip generation, and payroll reporting runbook for all…
PAYUNi 統一金流物流工具 V3 完整 API 參考（依據 docs.payuni.com.tw 官方文件 2026-05-04 版重新爬取）。 涵蓋 7-ELEVEN 超商 B2C/C2C/C2B 物流（建立物流單 v1.3、超商門市地圖 v1.1、出貨單列印 v1.0、 退貨便要號 v1.0、店到店轉宅配 v1.0）、黑貓宅配物流（建立宅配單…
Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into o — from…
In-depth security audit and penetration testing of web, API, and mobile applications. Static source-code analysis, dynamic testing, configuration checks, and generation of…
This skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing
The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides a comprehensive taxonomy for managing cybersecurity risk through six core Functions - Govern,…
This skill covers conducting cybersecurity assessments specific to oil and gas facilities including upstream
This skill covers conducting comprehensive security assessments of Operational Technology (OT) networks including
This skill covers performing vulnerability assessments in OT environments using the Claroty xDome platform for
This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including
This skill covers conducting cybersecurity assessments of electric power grid infrastructure including generation
This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source
This skill should be used when the user says \"IT admin mode\", \"check for security issues\", \"review audit logs\", \"configure Drive permissions\", \"monitor login activity\",…
> Use this skill whenever asked about Philippine social security contributions for self-employed individuals.
Search, filter, download, and analyze Copernicus Data Space products with the phidown project. Use this skill when a user asks to find Sentinel products, query by AOI/date/product…
Use this skill when working with KnowBe4 phishing simulations - creating campaigns, managing security tests, tracking recipient interactions (sent, opened, clicked, reported),…
End-to-end runbook for deploying the Polymarket-Trader Rust engine + dashboard to a Raspberry Pi dev target.
Use this skill to pick exactly one GitHub repository that needs a refresh: scan a given list of owners, collect signals of neglect — long stretches without commits, failing or…
Integrate security audits and vulnerability scanning directly into the CI/CD pipeline. Use this skill whenever the user mentions devsecops, sast, dast, pipeline scanning, security…
> Use this skill whenever asked about taxation and legal status of cryptocurrency in Pakistan. Trigger on phrases like \"Pakistan crypto tax\", \"is crypto legal Pakistan\",…
> Use this skill whenever asked about Pakistan payroll and salary-tax withholding for employers. Trigger on phrases like \"Pakistan payroll\", \"salary tax withholding Pakistan\",…
> Use this skill whenever asked about social security and pension contributions for workers and the self-employed in Pakistan.
Use this skill to scan a Claude Code plugin (or any npm/PyPI package tree) for security issues before installation.
Critically review the user-facing surface of a PRD, design spec, or feature proposal against behavioral and UX principles.
Use this skill when working with Checkpoint Harmony Email security policies - DLP policies, anti-phishing rules, anti-malware settings, quarantine policies, allow/block lists, and…
Company policy guardrail for every Claude response. Use this skill ALWAYS before answering any question, drafting any output, running any task, or recommending any action that…
Map organizational power structures, classify resistance archetypes, design reframe strategies, and produce a sequenced change plan — saved as a political-map artifact to…
Use this skill when you are running as the Poolside ACP agent inside printer (i.e. printer launched the `pool` CLI in `acp` server mode).
Configure row-level security (RLS) roles, object-level security, and perspectives for Power BI semantic models using pbi-cli.
Guided onboarding and best practices for building applications with PowerSync — Cloud and self-hosted setup, sync configuration, client SDK usage, backend integration (Supabase,…
Manage PR crises using classification, golden hour response, crisis statement templates (3C framework), and reputation recovery planning.
Use this skill to review a PR or diff for security regressions. Do not use it for full-repository audits or legal contract review.
Comprehensive pre-launch checklist for Flutter apps covering code quality, environment setup, error monitoring, analytics, force updates, security, store compliance, and…
Use when the user is trying to predict how a dominance-seeking leader will sort people in their orbit — who gets kept, who gets rehabilitated after a rift, who gets quietly…
Use this skill to orchestrate the procure-to-pay (source-to-pay) process across Dynamics 365 Supply Chain Management, Finance, and compliance-aware separation-of-duties…
Use this skill when working with the Pax8 product catalog - searching for cloud software, browsing vendors, checking pricing, reviewing provisioning details, and finding the right…
Use this skill when the user wants to audit a Solana or Anchor program for security vulnerabilities — account validation, PDA safety, arithmetic, CPI risks, reinit attacks, and…
Permissionless DeFi yield and credit on Solana via the Project 0 (P0) protocol. Deposit funds to earn yield across Solana's highest-yielding venues.
Complete API lifecycle management for Laravel applications — from OpenAPI design through governance and security hardening.