Composes multi-step exploit chains by correlating vulnerabilities across domains, calculates real impact of chained findings, generates end-to-end PoC scripts, and produces bug…
Use when asked to check for security vulnerabilities, or when the /vuln-check command runs — scan the project for known vulnerable dependencies and security anti-patterns.
Builds a deterministic, reproducible proof-of-concept for a suspected vulnerability before writing a finding — eliminating false positives and producing airtight evidence.
Prepare an evidence-bound vulnerability publication and publish the exact approved advisory through Runx Connect with independent provider readback.
Turn one confirmed security finding into a disclosure-ready GitHub advisory with root cause, proof of concept, impact, and source evidence.
Analyze dependency or ecosystem risk and produce remediation and advisory packets.
One lifecycle poll over everything vuln-scanner produces - PR and advisory status, PVR triage transitions, and pending-disclosure aging, with a stars-secured impact headline and…
Triage a vulnerability or scanner finding — assess real severity, exploitability, and how urgently to fix.
Use the VulnCheck CLI to query vulnerability and exploit intelligence. Invoke when the user asks about listing or querying VulnCheck indices, security advisories, vendor…
Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety,…
Analyse et évalue les vulnérabilités d'un système ou d'une application. À utiliser pour comprendre et prioriser les vulnérabilités.
Prüft Vulnerability Disclosure, Coordinated Disclosure, Bug Bounty, Security Advisories und rechtliche Schutzplanken im Softwarerecht De Eu Us.
Prüft Schwachstellenmanagement, Coordinated Vulnerability Disclosure, Meldepflichten, Patch-Triage und Kundeninformation.
Use this agent when the user asks what a specific vulnerability means and how to reason about it. Examples: "Explain CVE-2021-44228", "What does CVE-2021-45046 mean for…
Use when the user asks "how does this vulnerability get into my project", "show me the path to this CVE", "which dependency pulls in this vulnerable library", "trace the…
Vulnerability Report Generator - Auto-activating skill for Security Advanced. Triggers on: vulnerability report generator, vulnerability report generator Part of the Security…
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or…
Score incoming vulnerability reports the same way every time, tie each score to a fix deadline, and run disclosure on a predictable clock.
Write up vulnerabilities from disclosure documents, rough notes, supplied findings, PoCs, source code, or Codex Security scan output into polished, self-contained, source-backed…
Vulnerable Personen Asyl: Fachmodul im Migrationsrecht: prüft Minderjährige, Krankheit, Trauma, Folteropfer und Verfahrensgarantien; mit deutschem Recht, EU/EMRK/GFK, Belegen,…
Generalist agent that plans, browses, executes shell commands, and writes files.
Autonomous security vulnerability scanner for codebases. Detects secrets, XSS, missing security headers, auth issues, OWASP Top 10 patterns, dependency vulnerabilities, PII…
Use when handling a Washington landlord-tenant matter — residential evictions, unlawful-detainer summary proceedings, mobile-home L&T, security-deposit recovery, warranty of…
WhatsApp message relay and firewall for OpenClaw agents. Intercepts messages from third parties (non-owner contacts), notifies the owner, and sends replies only when explicitly…
Stage 1. Sign up at Wasender, get a Personal Access Token, create a WhatsApp session, scan the QR with the user's phone, and verify the connection works end-to-end.
DeFi risk analysis toolkit powered by WACH.AI via x402 payments using AWAL wallet custody. Use when the user asks to check if a token is safe, assess DeFi risk, detect honeypots,…
Waermepumpe: Red-Team und Qualitätskontrolle im Miet- und WEG-Recht: fachlich vertieftes Modul mit Normenradar (BGB/WEG/BetrKV/GEG), Tatbestands-/Beweislastmatrix, Fristen- und…
Web Application Firewall fingerprinting — Cloudflare, AWS WAF, Akamai, Imperva, etc.
Waf Rule Creator - Auto-activating skill for Security Advanced. Triggers on: waf rule creator, waf rule creator Part of the Security Advanced skill category.
Wahoo Fitness Cloud API — fetch workouts, download FIT files, parse power/HR/cadence/GPS into local SQLite for analysis
دليل وخريطة مهارة Wails v3 الشاملة لتطبيقات سطح المكتب (Architecture, Multi-Window Sync, Asset Streaming, Security, Windows Fluent Integration, Drag & Drop, & IPC) — v3.0.0 GA
Add or modify a PostgreSQL WAL / XLOG record — covers choosing built-in rmgr vs Generic WAL (generic_xlog.c) vs custom rmgr (RegisterCustomRmgr), the XLogInsert +…
Validation discipline for any "documented workflow" (README reproduction recipe, getting-started guide, install script, onboarding doc, deploy procedure).
Evaluate delegated-wallet, embedded-wallet, or agent-signer policy evidence without sharing credentials or raw provider payloads.
Manage crypto wallets, transfers, swaps, and balances via the Sponge Wallet API.
Trade crypto tokens: swap, bridge across 14 chains. Manage wallets, agent tokens, and security policies.
WAMP (Web Application Messaging Protocol) secure Pub/Sub for distributed agent event bus. Autobahn|JS patterns, authenticated subscriptions, RPC over WAMP, topic-based routing,…
Sync WaniKani Japanese learning progress data from the API to local storage for analysis and insights.
Use the Warden App (agentic wallet) via browser automation to execute crypto tasks (swap, bridge, deposit/withdraw, perps, portfolio/research) and to build an OpenClaw skill…
Full security audit — secrets, dependencies, IAM, auth, injection, XSS, HTTPS, rate limiting, public storage.
Produce a hardening spec and implement it — auth patterns, security headers, rate limiting, input validation, secrets management, dependency hygiene.
Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps.
Automated SAST + dependency vulnerability scan. Runs Semgrep (code vulnerabilities) and pip-audit (CVE-matched dependencies) and writes a structured JSON report.
Security and privacy by design — GDPR principles, secure coding defaults, and data handling rules
Produce a threat model — assets, ranked threats, mitigations, accepted risks. Use when asked to "threat model this", "what could go wrong security-wise", "map our attack surface",…
View, toggle, and configure wardens — the quality gates that review plans, code, and security
Generate warehouse analytics charts, table images, and report-ready visuals from SQLite/CSV data. Use when the user asks for warehouse charts, product table images, stock health…
Universal database IDE CLI — query PostgreSQL, MySQL, SQLite, BigQuery, MongoDB with cost projection
The Warmup. A daily intelligence brief for the first coffee. CISO mode delivers a structured cybersecurity digest — active threat actors mapped to MITRE ATT&CK, emerging CVEs with…
Crear, servir y operar web apps locales sobre PHP (WebAssembly) + SQLite con la CLI `wasam`, e interactuar con ellas por API HTTP o por CLI.
Wasmtime WASI sandbox for agent-executed code — capability-based security, component model, WASI Preview 2. Isolate untrusted code from the host filesystem/network.
Poll the Anthropic plugin marketplace manifest until "channelhub" appears, then notify the user. Use when waiting for the security review to land — the submission portal shows…
Scan repos for health issues: stale PRs, failing CI, old issues, TODO refs, lockfile problems, and security advisories.
Use when manually monitoring, watching, tracking, or reviewing AI assistant storage, session, transcript, JSONL, or SQLite format drift after official upstream repository,…
3-wave parallel audit — Wave 1 discovery (4 agents), Wave 2 verification (4 agents), Wave 3 cross-optimization (1 synthesizer). Each wave runs agents in parallel.
Generate WaveJSON timing diagrams for digital signals and create HTML viewers to display them. Use when documenting signal timing, creating timing diagrams, analyzing protocol…
Use when results for a The World Bank Economic Review (WBER) manuscript may be sensitive to specification, sample, measurement, or inference choices — and you need a…
Weaves custom Skills for Claude following official best practices including proper structure, metadata, progressive disclosure, and security guidelines.
Use when a task needs the judgment of a Web Administrator — diagnosing an outage or slow-page incident, planning a TLS/DNS cutover, deciding CDN vs origin caching policy, or…