Security
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
-
modbender Skill WindowsWindows-specific patterns, security practices, and operational traps that cause silent failures.
12 -
modbender Bundle SkillguardSecurity scanner for ClawHub skills. Vet third-party skills before installation — detect dangerous patterns, suspicious code, and risky dependencies.
12 -
modbender Bundle Brew AuditAudit Homebrew installation — outdated packages, cleanup opportunities, and health checks. Use when asked about brew updates, system maintenance, or package health on macOS.
12 -
modbender Bundle Claw AuditSecurity scanner and hardening tool for OpenClaw. Use when the user asks about security, wants to scan installed skills for malware or vulnerabilities, audit their OpenClaw configuration, check their security score, or harden their setup. Also triggers on keywords like "scan", "audit", "secure", "vulnerability", "malware", "safe", "hardening", "security score".
12 -
modbender Bundle ClawdvaultSECURITY NOTICE: The following content is from an EXTERNAL, UNTRUSTED source (e.g., email, webhook).
12 -
modbender Bundle CrawsecureCrawSecure is a documentation-first security skill for the ClawHub / OpenClaw ecosystem.
12 -
modbender Bundle EncryptionEncrypt files, secure passwords, manage keys, and audit code for cryptographic best practices.
12 -
modbender Bundle Env DoctorDiagnose .env file issues — missing variables, format errors, security risks, and misconfigurations.
12 -
modbender Bundle Geo StudioMaster GEO content orchestrator that understands user goals and intelligently routes tasks across specialized GEO skills. Automatically selects the right workflow from strategy and audit to content creation, optimization, and human editing. Use as the default starting point for any GEO-related task including creating GEO content, ranking in AI search, auditing content for AI visibility, building GEO strategies, writing AI-citable articles, or when unsure which specific GEO skill to use.
12 -
modbender Bundle Google AdsQuery, audit, and optimize Google Ads campaigns. Supports two modes: (1) API mode for bulk operations with google-ads Python SDK, (2) Browser automation mode for users without API access - just attach a browser tab to ads.google.com. Use when asked to check ad performance, pause campaigns/keywords, find wasted spend, audit conversion tracking, or optimize Google Ads accounts.
12 -
modbender Bundle Guardrails Interactive Security Guardrails ConfigurationHelps users configure comprehensive security guardrails for their OpenClaw workspace through an interactive interview process.
12 -
modbender Bundle Scan SkillDeep security analysis of an individual skill before installation
12 -
modbender Bundle Skill Flag SkillScan Clawdbot/OpenClaw skills for malicious patterns, backdoors, and security risks.
12 -
modbender Bundle SkillfenceRuntime security monitor for OpenClaw skills. Watches what your installed skills actually DO — network calls, file access, credential reads, process activity. Not a scanner. A watchdog.
12 -
modbender Bundle Tarkov APISecurity-focused Tarkov.dev + optional EFT Wiki operations for hardcore Escape from Tarkov players. Use when users want reliable EFT data lookups (items, prices, ammo comparison, tasks, map bosses, service status), stash valuation snapshots, trader flip detection, and map-risk/raid-kit recommendations. Use wiki lookups conditionally for validation or patch-sensitive context, with safe endpoint and query controls.
12 -
modbender Bundle Vibe CheckAudit code for "vibe coding sins" — patterns that indicate AI-generated code was accepted without proper review. Produces a scored report card with fix suggestions.
12 -
modbender Bundle API GatewayConnect to 100+ APIs (Google Workspace, Microsoft 365, GitHub, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to interact with external services. Security: The MATON_API_KEY authenticates with Maton.ai but grants NO access to third-party services by itself. Each service requires explicit OAuth authorization by the user through Maton's connect flow. Access is strictly scoped to connections the user has authorized. Provided by Maton (https://maton.ai).
12 -
modbender Skill BuildwrightAutonomous development workflow — research codebase, generate spec, get one human approval, then implement with TDD, security scan, and code review without interruption. Use when building features, fixing bugs, or shipping code with consistent quality gates.
12 -
modbender Bundle Cmc API DexAPI reference for CoinMarketCap DEX endpoints including token lookup, pools, transactions, trending, and security analysis. Use this skill whenever the user mentions DEX API, asks about on-chain token data, wants to look up tokens by contract address, needs security/rug risk checks, or is building DEX integrations. This is the definitive reference for CMC DEX API questions. Trigger: "DEX API", "token by contract address", "CMC security API", "liquidity pool API", "/cmc-api-dex"
12 -
modbender Bundle Code ReviewSystematic code review patterns covering security, performance, maintainability, correctness, and testing — with severity levels, structured feedback guidance, review process, and anti-patterns to avoid. Use when reviewing PRs, establishing review standards, or improving review quality.
12 -
modbender Bundle Guava GuardRuntime security guard for OpenClaw agents. Warns on dangerous tool call patterns. For full static scanning, use guard-scanner.
12 -
modbender Bundle Guava SuitePremium security suite for AI agents. Adds $GUAVA token-gated strict mode protection on top of guard-scanner. Features: 2-layer defense (static + runtime), Soul Lock, Memory Guard, on-chain identity verification via SoulRegistry V2. Requires $GUAVA token on Polygon Mainnet.
12 -
modbender Skill HealthcheckTrack water and sleep with JSON file storage
12 -
modbender Bundle Lan ScannerDiscover devices and scan ports on your local network using nmap with security-first defaults.
12 -
modbender Skill Phone VoiceConnect ElevenLabs Agents to your OpenClaw via phone with Twilio. Includes caller ID auth, voice PIN security, call screening, memory injection, and cost tracking.
12 -
modbender Bundle Pr ReviewerAutomated GitHub PR code review with diff analysis, lint integration, and structured reports. Use when reviewing pull requests, checking for security issues, error handling gaps, test coverage, or code style problems. Supports Go, Python, and JavaScript/TypeScript. Requires `gh` CLI authenticated with repo access.
12 -
modbender Bundle Ralph UltraDeep-dive security audit with 1,000 iterations (~4-8 hours). Use when user says 'deep security audit', 'ralph ultra', 'compliance audit prep', 'thorough security review', 'before major release', or 'security incident investigation'. Covers OWASP deep dive, supply chain, compliance, business logic, 4 expert personas.
12 -
modbender Bundle SecretcodexGenerate creative code names and encode/decode secret messages using classic and sophisticated ciphers. Blends nostalgic decoder ring fun with modern cryptographic techniques. Includes Caesar, Vigenère, Polybius, Rail Fence, and hybrid methods. Provides keys for secure message sharing between trusted parties.
12 -
modbender Bundle Skill StoreSmart skill installation advisor for ClawHub. Searches for skills matching your needs, evaluates candidates on security (via skill-shield), code quality, and documentation, then produces a comparison report with a recommendation. Use when: looking for a skill to do something specific, comparing similar skills, or wanting a safety-checked recommendation before installing. Zero external dependencies.
12 -
modbender Bundle Sys UpdaterProduction-safe Ubuntu maintenance orchestrator: runs daily apt security updates, tracks non-security updates across apt/npm/pnpm/brew with quarantine + auto-review, applies only approved updates, rotates logs/state, and generates clear 09:00 MSK Telegram reports (including what was actually installed).
12 -
modbender Bundle Task RunnerManage tasks and projects across sessions with persistent task tracking. Use when you need to organize work, track progress, and maintain todo lists that persist between conversations. Features: add tasks with projects and priorities, list pending/completed tasks, mark tasks complete, export projects to markdown. Security: file exports are restricted to safe directories only (workspace, home, /tmp). Perfect for multi-session projects, experiment tracking, and maintaining productivity.
12 -
modbender Bundle Test MasterUse when writing tests, creating test strategies, or building automation frameworks. Invoke for unit tests, integration tests, E2E, coverage analysis, performance testing, security testing.
12 -
modbender Bundle Tor BrowserHeadless browser automation with Tor SOCKS5 proxy support for accessing .onion sites and anonymous browsing. Use when navigating dark web resources, scraping Tor hidden services, conducting security research on dark web forums, or when anonymity is required. Supports navigation, element interaction, screenshots, and data extraction through Tor network.
12 -
modbender Skill Release PrepDeep code audit + documentation sync + release preparation for Python packages. Use when preparing a release, checking code quality before publishing, auditing code vs docs, fixing pre-release issues, generating changelogs, bumping versions, or publishing to PyPI. Triggers on "release", "prepare release", "audit code", "check docs", "ready to release?", "publish", "pre-release check", "code review before release".
12 -
modbender Bundle Skill HunterFind, evaluate, and install ClawHub skills. Semantic search across 10,000+ skills, security vetting before install, side-by-side comparison. The skill that makes skills useful.
12 -
modbender Bundle Skill ReviewScrape ClawHub skill pages for Security Scan (VirusTotal/OpenClaw) + Runtime Requirements + Comments for all of Oliver's local skills, and write a markdown report.
12
Frequently asked questions
What are Security agent skills?
Security agent skills give AI agents disciplined security workflows: code review for vulnerabilities, secret handling, dependency audits, and hardening checklists. Every skill on SkillMD also passes its own safety review before listing, with capability flags shown on each page.
Which Security skills are most installed?
Popular Security skills on SkillMD right now include Windows, skillguard, brew-audit. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Security skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.