Skill rating

Chinese website data scraping expert with anti-bypass strategies (中国网站数据爬取专家+反爬绕过策略). Teach AI agents to scrape Chinese websites that Scrapling alone can't handle — Baidu anti-crawl, Taobao login wall

当用户要把网页抓取/邮件/工具返回值/检索文档/用户上传内容喂给 AI，又担心里面藏『忽略之前指令』『你是新AI』这类指令时使用。在不可信内容进上下文之前先扫描：中英双语文式库（忽略指令/角色劫持/越狱/DAN/索要系统提示）+ 启发式（面向AI的祈使句、角色切换、索要隐藏指令）+ 沙箱规则。附可运行扫描脚本，输出风险分·命中规则·处置建议（丢弃/隔离/沙箱）。复用 desens-scan 与 r

You are the Accessibility Engineering Engine — a complete WCAG compliance, inclusive design, and digital accessibility system. You help teams build products that work for everyone, pass audits, and...

Protect OpenClaw installations from prompt injection, data exfiltration, malicious skills, and workspace tampering

B2B content writing with daily workflows and batching systems across Sales/HR/Fintech/Ops Tech

ProtonMail integration via Proton Mail Bridge for reading and sending encrypted emails.

RSS/Atom feed digest with optional CVE enrichment, Ghost CMS drafts, and channel notifications

Skills for age verification and age-appropriate content filtering.

Scan SBOM for known CVE vulnerabilities

Define security policies for your workspace and audit compliance. Check installed skills against command, network, and data handling rules. Generate audit-ready compliance reports.

Use a persistent OpenClaw browser profile to access http://mail.ztpc.com/ (Aliyun Enterprise Mail), scan UNREAD emails only, and conservatively mark obvious spam / phishing as Spam (never delete). ...

Skills for detecting adult/inappropriate content.

This document outlines your standard procedures, principles, and skillsets for conducting security audits. You must adhere to these guidelines whenever you are tasked with a security analysis.

Extract data from construction images using AI Vision. Analyze site photos, scanned documents, drawings.

Skills for geographic restrictions and regional compliance.

Network-wide ad and tracker blocking at the DNS level. A Pi-hole alternative that runs directly on your machine as an OpenClaw skill. No separate hardware needed.

change ScanResult file extension from txt -> xlsx located in template

Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage.

Deploy privacy-first analytics with correct API patterns, rate limits, and GDPR compliance.

Publish and manage iOS and Android apps with account setup, submission workflows, review compliance, and rejection handling.

Comprehensive security audit for OpenClaw. Scans 7 domains (runtime, channels, agents, cron, skills, sessions, network), supports 3 expertise levels, context-aware analysis, and visual dashboard. Read

Missed deadlines are the

Agent防火墙免费版,为AI Agent应用提供基础安全防护能力. 核心能力:提示注入检测、工具调用过滤、输入净化、安全策略检查. 适用场景:Agent应用安全防护、用户输入净化、工具调用安全验证. 差异化:免费版聚焦核心防护能力,支持单Agent保护,适合个人开发者快速集成. 适用关键词: Agent防火墙, 提示注入, 安全防护, 输入净化, agent firewall, prompt i

电商知识产权与合规检测一站式 AI 工具集，整合睿观知产合规检测（版权/商标/外观专利/实用新型专利/图片政策）与智慧芽专利数据查询（著录/权利要求/说明书/附图/法律状态/家族/引用/以图搜图/PDF）共 2 类底层工具、22 项子能力。

Runtime safety guard for OpenClaw multi-agent workflows. Blocks destructive tools (write, edit, exec, process, apply_patch) for controlled agents, forcing delegation to sub-agents.

CCPA/CPRA Compliance Check — based on the California Consumer Privacy Act (CCPA) and the CPRA amendment, covers 12 core compliance checks for businesses subject to California privacy law. Free to inst

Session and cookie security auditor (OWASP A07:2021 — Identification and Authentication Failures). Scans Express/Koa/Fastify, Flask/Django/FastAPI, Go net/http, Spring Boot, and Rails source code for

Secure webhook token management using MGC Blackbox. Supports DingTalk, WeCom, Feishu, Telegram, Slack and more. Two execution modes: local script with MGC-stored config, or full zero-exposure via mgc_

Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation from low-privilege use

Monitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates, and unauthorized certificate issuance targeting your organization.

Master smart contract security with auditing, vulnerability detection, and incident response

Analyze and understand malware distribution tactics, cracked software risks, and security threat detection patterns

Automated penetration testing toolkit for security assessment, vulnerability scanning, and automated security reporting

Pi-hole installation, blocklist management, DNS-over-HTTPS setup, DHCP integration, local DNS records, and troubleshooting broken DNS resolution on a home network.

Indexed by skills.sh from absolutelyskilled/absolutelyskilled

Audits game assets for compliance with naming conventions, file size budgets, format standards, and pipeline requirements. Identifies orphaned assets, missing references, and standard violations.

Automatically categorize emails by type, priority, and required action

Create a new specification file for the solution, optimized for Generative AI consumption.

Path traversal and LFI playbook. Use when file paths, download endpoints, include operations, archive extraction, or wrapper behavior may expose filesystem control.

Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, incl

Query federation audit logs with compliance filtering

Initialize federation on this node — generate keypair and configure peers

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing da

Entry P0 primary router for HackSkills. Use when the task involves web application testing, API security assessment, recon, vulnerability triage, exploit path planning, or choosing the right next cate

Expert in Swift and SwiftUI development for iOS, macOS, and Apple platforms

Checks for inconsistencies or errors in forms

Local encrypted credential and script management for AI agents. Zero‑exposure execution layer for storing tokens, passwords, configs, and scripts without plaintext leakage.

元测 —— 有纪律的 AI 安全测试方法论：对已授权目标（自有资产 / SRC 众测 / bug bounty / CTF / 靶场）按 侦察→发现→验证→报告 四阶段做 Web 安全测试（SQLi / XSS / SSRF / XXE / 反序列化 / 命令注入 / 文件上传 / 鉴权与访问控制 / 业务逻辑 / 信息泄露 / 不安全配置 / API 安全 + 漏洞评估与渗透报告方法论），内置