Security

johnalbertini14-glitch Bundle

Configure Cross-Origin Resource Sharing correctly to avoid security issues and debugging pain.

johnalbertini14-glitch Bundle

Implement MQTT messaging avoiding security, QoS, and connection management pitfalls.

johnalbertini14-glitch Bundle

Manage application secrets with the Redshift CLI (https://redshiftapp.com) — decentralized, encrypted secret management built on Nostr. Use when setting, getting, deleting, listing, uploading, or downloading secrets, injecting secrets into commands, configuring projects/environments, or authenticating with Nostr keys. Covers redshift secrets, redshift run, redshift setup, redshift login, and related commands.

johnalbertini14-glitch Bundle

Transform an Android phone with IP Webcam into an intelligent Edge AI security system with OpenClaw.

johnalbertini14-glitch Bundle

Security-focused Tarkov.dev + optional EFT Wiki operations for hardcore Escape from Tarkov players. Use when users want reliable EFT data lookups (items, prices, ammo comparison, tasks, map bosses, service status), stash valuation snapshots, trader flip detection, and map-risk/raid-kit recommendations. Use wiki lookups conditionally for validation or patch-sensitive context, with safe endpoint and query controls.

johnalbertini14-glitch Bundle

Mirror congressional stock trades with automated broker execution and risk management. Use when you want to track and automatically trade based on congressional disclosures from House Clerk and Senate eFD sources.

johnalbertini14-glitch Bundle

Authentication and authorization patterns — JWT, OAuth 2.0, sessions, RBAC/ABAC, password security, MFA, and vulnerability prevention. Use when implementing login flows, protecting routes, managing tokens, or auditing auth security.

johnalbertini14-glitch Bundle

Vet ClawHub skills for security and utility before installation. Use when considering installing a ClawHub skill, evaluating third-party code, or assessing whether a skill adds value over existing tools.

johnalbertini14-glitch Bundle

Secure secret handoff and credential setup wizard for AI agents. Use when you need sensitive information from the user (API keys, passwords, tokens) or need to save credentials to config files. Never ask for secrets via chat — use Confidant instead.

johnalbertini14-glitch Bundle

Cross-reference GitHub PRs and issues to find duplicates and missing links. Spawns parallel Sonnet subagents to semantically analyze the last N PRs and issues, finding PRs that solve the same problem (duplicates) and issues resolved by open PRs but not yet linked. Groups findings into thematic clusters, scores them by actionability, and offers rate-limited commenting or bulk actions (close, label). Use this skill when the user wants to find duplicate PRs, link issues to PRs, clean up a repo's cross-references, or audit PR/issue relationships. Also useful when the user says things like "find related PRs", "which PRs fix this issue", "are there duplicate PRs", "link issues and PRs", or "audit cross-references".

johnalbertini14-glitch Bundle

Integrate payments with provider selection, checkout flows, subscription billing, and security best practices.

johnalbertini14-glitch Bundle

Avoid common Solidity mistakes — reentrancy, gas traps, storage collisions, and security pitfalls.

johnalbertini14-glitch Bundle

Generate creative code names and encode/decode secret messages using classic and sophisticated ciphers. Blends nostalgic decoder ring fun with modern cryptographic techniques. Includes Caesar, Vigenère, Polybius, Rail Fence, and hybrid methods. Provides keys for secure message sharing between trusted parties.

johnalbertini14-glitch Bundle

Run slither static analysis on Solidity contracts. Fast, lightweight security scanner for EVM smart contracts.

johnalbertini14-glitch Bundle

Spin up a one-time web UI for securely entering secret keys and env vars. Supports guided instructions, single-key mode, and cloudflared tunneling.

johnalbertini14-glitch Bundle

Analyze Sui Move test coverage, identify untested code, write missing tests, and perform security audits. Includes Python tools for parsing coverage output and generating reports.

johnalbertini14-glitch Bundle

Build and operate online stores with payment security, inventory management, marketplace integration, and conversion optimization.

johnalbertini14-glitch Bundle

Premium security suite for AI agents. Adds $GUAVA token-gated strict mode protection on top of guard-scanner. Features: 2-layer defense (static + runtime), Soul Lock, Memory Guard, on-chain identity verification via SoulRegistry V2. Requires $GUAVA token on Polygon Mainnet.

johnalbertini14-glitch Bundle

Scrape ClawHub skill pages for Security Scan (VirusTotal/OpenClaw) + Runtime Requirements + Comments for all of Oliver's local skills, and write a markdown report.

johnalbertini14-glitch Bundle

Multi-layer security for human interactions on SNS platforms (Coconala, Fiverr, Upwork, X, Threads, LinkedIn). Protects against scams, phishing, and maintains professional boundaries. Always active alongside moltbook-security.

johnalbertini14-glitch Bundle

A world-class, spec-driven development framework for building production-ready, AI-native applications. Use for any new project to ensure adherence to the most advanced 2026 best practices in architecture, security, testing, and deployment.

johnalbertini14-glitch Bundle

Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure. Use when you need to scan targets for vulnerabilities, check SSL certificates, find open ports, detect misconfigurations, or perform security audits. Integrates with nmap, nuclei, and other security tools.

johnalbertini14-glitch Bundle

GitHub repository trust scoring and due diligence. Use when asked to analyze, audit, score, or evaluate any GitHub repo — especially for crypto/DeFi project DD, checking if a repo is legit, evaluating code quality, verifying team credibility, or comparing multiple repos. Also handles X/Twitter URLs containing GitHub links — auto-extracts and analyzes repos from tweets. Triggers on "analyze this repo", "is this legit", "check this GitHub", "trust score", "audit this project", "repo quality", "batch scan repos", "analyze this tweet". ALSO auto-triggers when the user pastes an X/Twitter URL that contains a GitHub link — no explicit "analyze" command needed. When triggered by a tweet, ALWAYS include the tweet text/context above the analysis. Do NOT use for general GitHub browsing, reading READMEs, or cloning repos without analysis.

johnalbertini14-glitch Bundle

Encrypt files, secure passwords, manage keys, and audit code for cryptographic best practices.

johnalbertini14-glitch Bundle

Identity provider compliance checks for auditclaw-grc. 8 read-only checks across Google Workspace (MFA, admin audit, inactive users, passwords) and Okta (MFA, password policy, inactive users, session policy).

johnalbertini14-glitch Bundle

Create, audit and publish production-ready OpenClaw skills with one command. 10 modes included.

johnalbertini14-glitch Bundle

Secure browser automation with Chrome profile support, vault integration, approval gates, and comprehensive audit logging. Use for authenticated sites, sensitive operations, or compliance requirements.

johnalbertini14-glitch Bundle

Comprehensive code review for quality, security, and best practices. Quick review for small changes, full review for large changes.

johnalbertini14-glitch Bundle

Automatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.

johnalbertini14-glitch Bundle

Security audit tool for OpenClaw skills. Scans for credential harvesting, code injection, network exfiltration, obfuscation. ALWAYS run before installing any new skill from external sources. Triggers on: new skill installation, skill audit, security scan, skill review, before loading external skill.

johnalbertini14-glitch Bundle

Aliyun OSS (Object Storage Service) file management toolkit for Python. Use when working with Aliyun OSS to upload files, download files, list objects, delete files, manage directories, read file contents, check file existence, get file metadata, copy and move objects. Supports both authenticated (with API key/secret for write operations) and anonymous access (read-only).

johnalbertini14-glitch Bundle

Headless browser automation with Tor SOCKS5 proxy support for accessing .onion sites and anonymous browsing. Use when navigating dark web resources, scraping Tor hidden services, conducting security research on dark web forums, or when anonymity is required. Supports navigation, element interaction, screenshots, and data extraction through Tor network.

johnalbertini14-glitch Bundle

Solidity language server providing smart contract development support including compilation, linting, security analysis, and code intelligence for .sol files. Use when working with Ethereum smart contracts, Substrate pallets, or any Solidity code that needs compilation, security checks, gas optimization, or code navigation. Essential for ClawChain pallet development.

johnalbertini14-glitch Bundle

Challenges the user for a secret word before allowing access to sensitive files or system commands.

johnalbertini14-glitch Bundle

Google Workspace CLI for Gmail, Calendar, and Auth (restricted via security wrapper).

johnalbertini14-glitch Bundle

Smart dependency health check — security audit, outdated detection, unused deps, and prioritized update plan