Security

brycewang-stanford Bundle

This skill should be used when the user asks to review a diff or pull request, write review comments, audit code quality, establish review standards, or improve how a team performs code review.

majiayu000 Bundle

Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session driving every feature, at most one PR of proven corrections. Use for /maintain-verification-skill or "audit the verify skill".

modbender Bundle

You have access to the R4 platform — your personal password manager, secret store, and domain registrar. R4 is how you manage credentials and buy domains.

modbender Skill

Work with S3-compatible object storage with proper security, lifecycle policies, and access patterns.

modbender Bundle

Write solid PHP avoiding type juggling traps, array quirks, and common security pitfalls.

modbender Bundle

Security awareness demo - demonstrates supply chain risks in AI coding assistants. See the full research: https://x.com/theonejvo/status/2015892980851474595

modbender Bundle

Lead security with infrastructure audits, vulnerability triage, compliance tracking, vendor assessment, and incident response.

modbender Skill

Configure Cross-Origin Resource Sharing correctly to avoid security issues and debugging pain.

modbender Skill

Implement MQTT messaging avoiding security, QoS, and connection management pitfalls.

modbender Bundle

Safely operate the nova CLI wallet for authentication, balance checks, sending funds, withdrawals, and key management across mainnet and testnet. Enforces deterministic JSON/TOON parsing, exit code validation, financial confirmations, network verification, and strict secret-handling rules. Use when performing nova wallet automation, stablecoin transfers, claim links, exports, or any blockchain transaction via the nova CLI.

modbender Bundle

HSM-backed secret management for AI agents — store, retrieve, rotate, and share secrets via the 1Claw vault without exposing them in context.

modbender Bundle

Inject secrets into subprocesses via environment variables. You never see secret values — authy run injects them directly. Use for any command that needs API keys, credentials, or tokens.

modbender Skill

Security and vulnerability scanner for OpenClaw code, plugins, skills, and Node.js dependencies. Powered by OpenClaw AI models.

modbender Bundle

Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations.

modbender Bundle

Expert Tezos blockchain development guidance. Provides security-first smart contract development, FA1.2/FA2 token standards, gas optimization, and production deployment patterns. Use when building Tezos L1 smart contracts or implementing token standards.

modbender Skill

Generate Content Security Policy headers from your codebase

modbender Skill

Backup and restore openclaw configuration, skills, commands, and settings. Sync across devices, version control with git, automate backups, and migrate to new machines.

modbender Bundle

Build secure Django apps avoiding ORM pitfalls, N+1 queries, and common security traps.

modbender Bundle

Scan, audit, and clean up Python virtual environments (.venv, conda), node_modules, and development artifacts consuming disk space. Use when the user mentions disk space, environment cleanup, stale venvs, node_modules bloat, project cleanup, broken environments, dangling symlinks, or asks about disk usage from development tools. Also use when encountering ENOSPC errors, slow installs from cache bloat, or when onboarding into a project and needing to verify environment health.

modbender Skill

Store, retrieve, list, and manage secrets using gopass (the team password manager). Use when the user asks to save credentials, look up passwords, generate secrets, manage password entries, or interact with a gopass password store. Covers CRUD operations, secret generation, TOTP, recipients, mounting stores, and clipboard operations.

modbender Bundle

Harvey is an imaginary friend and conversation companion - a large white rabbit who helps bridge loneliness, beat boredom, and ease awkward moments. NEW in 2.0 - Secret Guide Mode where Harvey pretends to be spontaneous but secretly guides you to hidden gems nearby! Includes brain training games (trivia, riddles, "what if" scenarios), journey tracking with proactive check-ins, and quick a/b/c response options. Responds in the user's language automatically.

modbender Skill

Assist with Monero XMR transactions, privacy features, wallet management, and security practices.

modbender Bundle

Integrate PayPal payments with proper webhook verification, OAuth handling, and security validation for checkout flows and subscriptions.

modbender Skill

Avoid common Roblox mistakes — server/client security, DataStore pitfalls, memory leaks, and replication gotchas.

modbender Bundle

Send and close SIGNL4 alerts using the SIGNL4 inbound webhook (team secret in URL).

modbender Bundle

Red team security mode for OpenClaw. Runs an adversarial audit on demand or nightly — checks exposed ports, credential leaks, file permissions, suspicious processes, and OpenClaw config posture. Assigns a letter grade. Built for macOS deployments.

modbender Skill

Build reliable backend services with proper error handling, security, and observability.

modbender Skill

Assist with Bitcoin transactions, wallets, Lightning, and security decisions.

modbender Bundle

Connect to security cameras, capture snapshots, and process video feeds with protocol support.

modbender Skill

Use the cfshare CLI to expose local ports/files as temporary Cloudflare Quick Tunnel URLs. Trigger when a user needs a temporary public URL for a local service, needs to share files/directories from terminal, or needs to inspect/export cfshare audit and policy state.

modbender Skill

Security check for ClawHub skills powered by Koi. Query the Clawdex API before installing any skill to verify it's safe.

modbender Bundle

Run a structured quality control audit on any codebase. Use when asked to QC, audit, review, or check code quality for a project. Supports Python, TypeScript, GDScript, and general projects. Produces a standardized report with PASS/WARN/FAIL verdict, covering tests, imports, type checking, static analysis, smoke tests, and documentation. Also use when asked to compare QC results over time.

modbender Skill

Register, manage, and protect domain names with practical DNS and security guidance.

modbender Skill

Index important directories and perform safe folder operations with proper security checks.

modbender Skill

DNS & email security analysis powered by IntoDNS.ai - scan domains for DNS, DNSSEC, SPF, DKIM, DMARC issues

modbender Skill

Implement WebAuthn passkeys avoiding critical security and compatibility pitfalls.