Security

leoyeai-openclaw-master-skills Bundle

Deep-scan a codebase, understand its architecture and patterns, then produce a comprehensive audit report with prioritized fixes. Optionally apply changes on a feature branch with a PR for review. Covers security, performance, error handling, logging, testing, and documentation.

leoyeai-openclaw-master-skills Bundle

Tenant rights knowledge and actionable defense templates. Use when someone has a landlord refusing repairs, is facing eviction, wants to recover a security deposit, is dealing with mold/pests/habitability issues, or needs to understand their rights as a renter.

fusengine Bundle

Use when running ecosystem-specific vulnerability scans across project dependencies (npm/composer/pip/cargo/go/etc), with optional auto-fix.

fusengine Bundle

Use when verifying or configuring HTTP security headers (CSP, HSTS, CORS, X-Frame-Options) for a web application (Next.js, Laravel, Express, Django).

catcorner22 Skill

Vercel Firewall expert guidance — automatic DDoS mitigation, the Vercel WAF (custom rules, IP blocking, managed rulesets, rate limiting), Attack Mode, system bypass, bot management, and the `vercel firewall` CLI. Use when configuring platform-level security, responding to attacks, or staging firewall rules.

catcorner22 Skill

Look up known skill/plugin pairs that fight (context strip vs inject, length vs rhythm, duck vs dual-axis, rewrite vs lock) before loading both. Use when composing an ai-transfer stack. Scope boundary — library routing audit → `skill-library-audit`; compute triage → `emergency-triage-compute`.

tractorjuice Skill

[COMMUNITY] Generate an EMI / PI safeguarding assessment — method statement (segregation vs insurance vs guarantee), designated safeguarding bank/insurance arrangements, reconciliation cadence + sign-off chain, end-to-end client-funds flow, audit plan aligned to FCA REP-CRIM expectations.

tractorjuice Skill

[COMMUNITY] Generate a DISP (Defence Industry Security Program) Member self-attestation pack covering E8 ML2, ISM applicability, governance, personnel security, and incident reporting — supports DISP Levels 1, 2, 3.

tractorjuice Skill

[COMMUNITY] Generate a three-tier AI autonomy posture (Tier 1 internal-productivity, Tier 2 investor-facing-with-approval, Tier 3 regulated/financial). Captures per-tier guard-rails, approval gates, audit obligations, and tier-promotion criteria.

jacob-balslev Bundle

Use when a goal, plan, design, strategy, metric, or assumption should be examined by reversing it: ask how to guarantee failure, how the opposite could be true, what would have to happen for the desired outcome not to occur, or how an apparent win could backfire. Covers objective reversal, prospective-hindsight framing, failure-path enumeration, obstacle-first planning, consider-the-opposite debiasing, opposite-hypothesis testing, metric inversion, architectural non-goal definition, red-team-style self-review, and prevention design. Do NOT use for decomposing a problem to irreducible premises (use first-principles-thinking), post-failure root-cause analysis (use debugging), recurring failure clustering (use pattern-recognition), claim/source grounding (use epistemic-grounding), full FMEA scoring, full pre-mortem facilitation, or full AI/security red-team programs.

codyswanngt Bundle

The gardener of the learnings…

codyswanngt Bundle

Security review methodology

codyswanngt Bundle

Run an OWASP ZAP baseline…

codyswanngt Bundle

Audit whether the current…

team-telnyx Skill

Manage account balance, payments, invoices, webhooks, and view audit logs and detail records. This skill provides Go SDK examples.

team-telnyx Skill

Manage account balance, payments, invoices, webhooks, and view audit logs and detail records. This skill provides Java SDK examples.

team-telnyx Skill

Manage account balance, payments, invoices, webhooks, and view audit logs and detail records. This skill provides Ruby SDK examples.

team-telnyx Skill

Manage account balance, payments, invoices, webhooks, and view audit logs and detail records. This skill provides Python SDK examples.

team-telnyx Skill

Manage account balance, payments, invoices, webhooks, and view audit logs and detail records. This skill provides JavaScript SDK examples.

bilal140202 Skill

Use this skill when the work involves authentication, authorization, trust boundaries, sensitive data, input validation, or vulnerability assessment. Activated when designing or modifying AuthN/AuthZ flows; handling or storing PII, financial, or health data; processing user input or file uploads; integrating with third-party APIs; designing system boundaries; reviewing pull requests (implicitly always active); or when the user mentions security concerns, vulnerabilities, or asks for a security audit. Examples: "is this secure?", "audit this for vulnerabilities", "how should I handle auth?", "is this input validation sufficient?", "what are the security risks here?", mentions of XSS, CSRF, SQLi, IDOR. Security is ALWAYS active as a secondary lens during code review and architecture design — never skip it.

bilal140202 Skill

Observal admin operations including user management, enterprise settings, submission review queue, security events, audit logs, and SSO configuration. Use when the user needs to manage users, approve or reject submissions, view security events, or configure SAML/SCIM.

bilal140202 Skill

Skill Audit — Pre-Install Security Scanner

bilal140202 Skill

Audits repositories for Claude Code readiness and suggests improvements. Use when asked to check CLAUDE.md quality, review settings, audit project organization, or optimize for agentic work.

jacob-balslev Bundle

Use when implementing or reviewing an inbound webhook handler for any third-party provider - verifying signatures, deduplicating retries, choosing the right HTTP status code for retry vs no-retry, persisting raw payloads before canonical mapping, and quarantining unverifiable events. Covers signature schemes, idempotency patterns, provider retry contracts, raw-then-canonical pipelines, quarantine, secret rotation, and PII-capture timing. Do NOT use for outbound webhook publishing (use `event-contract-design`), general background-job orchestration, or chasing a webhook handler that has already failed in production (use `debugging`).

jacob-balslev Bundle

Use when designing or auditing dependency structure: package boundaries, runtime vs build dependencies, adapter layers, duplicate-purpose libraries, supply-chain risk, upgrade policy, lock-in, and dependency graph health. Do NOT use for choosing a major framework (use `framework-fit-analysis`), vulnerability-only review (use `owasp-security`), or routine refactoring without dependency boundary changes (use `refactor`).

codyswanngt Bundle

Audit whether the current…

fabioc-aloha Skill

Step-back protocol — restate, generalise, specialise, invert, ask why, pre-mortem, check stakeholders, and audit framings before solving

fabioc-aloha Skill

Systematic 5-dimension audit framework for VS Code extensions — debug hygiene, dead code, performance, menu validation, dependency cleanup

diaszano Skill

Use this skill when you need to diagnose and fix bugs, identify root causes of failures, or analyze error logs and stack traces to resolve issues.

diaszano Skill

Use this skill when you need comprehensive quality assurance strategy, test planning across the entire development cycle, or quality metrics analysis to improve overall software quality.

diaszano Skill

Use this skill when building Electron desktop applications that require native OS integration, cross-platform distribution, security hardening, and performance optimization. Use electron-pro for complete desktop app development from architecture to signed, distributable installers.

diaszano Skill

Use this skill when you need exhaustive UI and UX functionality testing driven by documented user flows, with browser or desktop interaction tooling and structured defect reporting.

diaszano Skill

Use this skill when you need to conduct comprehensive code reviews focusing on code quality, security vulnerabilities, and best practices.

diaszano Skill

Use this skill when you need to design and execute controlled failure experiments, validate system resilience before incidents occur, or conduct game day exercises to test your team's incident response capabilities.

diaszano Skill

Use this skill when you need to diagnose why errors are occurring in your system, correlate errors across services, identify root causes, and prevent future failures.

diaszano Skill

Use this skill when an active security breach, service outage, or operational incident requires immediate response, evidence preservation, and coordinated recovery.