Security

johnalbertini14-glitch Bundle

Build reliable backend services with proper error handling, security, and observability.

johnalbertini14-glitch Bundle

Implement reliable backup strategies avoiding data loss, failed restores, and security gaps.

johnalbertini14-glitch Bundle

Assist with Bitcoin transactions, wallets, Lightning, and security decisions.

johnalbertini14-glitch Bundle

Connect to security cameras, capture snapshots, and process video feeds with protocol support.

johnalbertini14-glitch Bundle

Index important directories and perform safe folder operations with proper security checks.

johnalbertini14-glitch Bundle

Implement WebAuthn passkeys avoiding critical security and compatibility pitfalls.

johnalbertini14-glitch Bundle

Windows-specific patterns, security practices, and operational traps that cause silent failures.

johnalbertini14-glitch Bundle

Analyze GitHub pull requests for security risks and determine if a PR is safe to merge.

johnalbertini14-glitch Bundle

Monitor official Polymarket sources (The Oracle blog, API status) for important updates, security alerts, and breaking news. Automatic importance scoring with instant notifications for critical events.

johnalbertini14-glitch Bundle

Command-line security analyzer for ClawHub skills. Run analyze-skill.sh to scan SKILL.md files for malicious patterns, credential leaks, and C2 infrastructure before installation. Includes threat intelligence database with 20+ detection patterns.

johnalbertini14-glitch Bundle

审计 fal 账号消耗与用户扣费的一致性。查询 fal 官方账单，交叉比对 fal_tasks 中的用户消耗，汇总积分/现金明细，检测异常。当用户提到"消耗审计"、"账单核对"、"fal 对账"、"用量异常"时使用此 skill。

johnalbertini14-glitch Bundle

Step-by-step 6-part guide to set up OpenClaw AI assistant on VPS with WhatsApp, Google OAuth, backups, security, automation, and verification.

johnalbertini14-glitch Bundle

Automated daily security audits for OpenClaw agents with email reporting. Runs deep audits and sends formatted reports.

johnalbertini14-glitch Bundle

Audit dropped ClawHub skill ZIPs, classify risk (SAFE/CAUTION/REMOVE), auto-sort files, and generate a plain-English security dashboard.

johnalbertini14-glitch Bundle

Policy-based compliance assessment for OpenClaw skills. Define security policies, assess skills against them, track violations, and generate compliance reports. Maps findings to frameworks like CIS Controls and OWASP. Integrates with arc-skill-scanner and arc-trust-verifier.

johnalbertini14-glitch Bundle

Audit regulation freshness and update policy-driven controls without hardcoding. Use when checking if sales/process regulations are outdated, inconsistent with operations, or need config-level updates.

johnalbertini14-glitch Bundle

Host-based Linux incident response and remediation skill focused on precise threat detection, forensic-safe data collection, firewall control (iptables/nftables), integrity validation, and controlled remediation while preserving system stability.

johnalbertini14-glitch Bundle

Accept crypto payments on Solana via MoonPay Commerce (formerly Helio). Create Pay Links, generate checkout URLs, check transactions, and list supported currencies. Use when the user wants to accept crypto payments, create payment links, charge for products/services with crypto, or query payment transactions. Requires a MoonPay Commerce account with API key and secret.

johnalbertini14-glitch Bundle

Complete cybersecurity assessment, threat modeling, and hardening system. Use when conducting security audits, threat modeling, penetration testing, incident response, or building security programs from scratch. Works with any stack — zero external dependencies.

johnalbertini14-glitch Bundle

Security hardening for AI agents - Moltbot, OpenClaw, Cursor, Claude. Lock down gateway, fix permissions, auth, firewalls. Essential for vibe-coding setups.

johnalbertini14-glitch Bundle

Autonomous operator for Switchboard on-demand feeds, Surge streaming, and randomness. Designs jobs, simulates via Crossbar, and deploys/updates/reads feeds across Solana/SVM, EVM, Sui, and other Switchboard-supported chains—with user-controlled security, spend limits, and allow/deny lists.

johnalbertini14-glitch Bundle

Regulations change 4,000+ times per year. Your clients can't track them all. complianceclaw monitors federal and state regulatory changes, maps them to your clients' obligations, generates compliance checklists, and produces audit-ready reports—before the enforcement action arrives.

auth0 Bundle

Use when adding, fixing, or improving how an app authenticates users or protects an API, or when using or configuring any Auth0 feature — signing users in and out, sessions and tokens, guarding routes and endpoints, MFA, SSO, Organizations, RBAC, custom domains, Universal Portals for hosted account and organization self-service, or Universal Login branding. Also use to audit a tenant's health, security, and plan fit (CheckMate), to debug why an auth flow fails, to migrate from another auth provider, or to set up the Vercel native integration. Covers any web, mobile, or backend framework and every Auth0 SDK, tool, and API. Use even if the user never mentions Auth0.

behisecc Bundle

This skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.

hustcer Bundle

Comprehensive Nushell scripting best practices, idioms, security, and evidence-driven code review. Use when writing, reviewing, auditing, debugging, or refactoring Nushell (.nu) scripts, modules, custom commands, pipelines, config, and tests. Also use for Bash/POSIX-to-Nushell conversion and Nu 0.114/0.115 migration issues such as stricter types, YAML 1.2, `external_arg`, `run`, SemVer, optional `nothing`, subprocess diagnostics, and explicit submodule imports.

ivan-magda Bundle

Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinning (SecTrust, SPKI), keychain sharing across apps/extensions, migrating secrets from UserDefaults or plists, or OWASP MASVS/MASTG mobile compliance on Apple platforms.

jazzychad Bundle

Run a thorough audit of an iOS / macOS Swift codebase — bugs, dead code, duplication, Swift concurrency issues, deprecated APIs, security, performance, and SwiftUI quality — and produce a single navigable CODE_AUDIT.md report with file:line-cited findings. Use when the user asks for a "code audit", "comprehensive review", "find tech debt", "what should I clean up", or similar broad-scope assessment of a Swift project.

kunchenguid-chrome-devtools-axi Skill

Control a Chrome browser session through the chrome-devtools-axi CLI - navigate, snapshot, click, fill forms, run JavaScript, inspect console and network, take screenshots, audit performance. Use whenever a task needs a real browser: opening or testing a web page, clicking through a flow, extracting page content, or debugging a website.

devanshudesai Bundle

UI/UX design audit with Steve Jobs and Jony Ive design philosophy

skymavis Bundle

Draft, promote, archive, and supersede ADR-style decision records (types are open: architecture, product, security, policy, legal, …) and keep INDEX.md and cross-links generated, via the bundled scripts/decisions.py tool. Use when creating or promoting decision drafts, superseding or archiving a decision, fixing a promotion breach, flattening the old per-type accepted/ layout, or running build, check, promote, rename-draft-id, migrate-layout, or install.

dmmulroy-better-result Bundle

Adopt better-result in an existing TypeScript codebase. Use for a repository-wide error-handling audit and proposal, or for implementing a named vertical slice with TaggedError and Result.

dmmulroy-better-result Bundle

Audit better-result changes or PRs against known Prisma and Better T Stack downstream dependents. Use when working on better-result API/type/runtime changes and the user asks whether a change breaks Prisma dependents, Better T Stack dependents, npm dependents, or PR compatibility.

dosu-ai Bundle

Use the Dosu CLI to authenticate and configure coding agents; manage Libraries, Agents, sources, Monitor, documents, reviews, threads, topics, members, integrations, and deployments; query knowledge; or audit a repository for Dosu-generated docs. Use for Dosu platform work that should be done from a terminal instead of the web app.

hosmelq Bundle

Durable repo-local workflow control for explicit loop/queue workflows, long-running implementation or review passes, durable source-backed investigations, and goal/control handoffs that need a persistent cursor, evidence surface, verifier, and stop state. Use when the user asks to create, run, resume, reset, audit, or improve a durable loop/queue; asks for a goal with verified control links; references existing control artifacts; or grants durable continuation. Do not trigger for ordinary one-turn research, generic docs, notes, goals, or handoffs that do not need durable tracking.

spatie-guidelines-skills Bundle

Apply Spatie's security guidelines when configuring applications, databases, servers, credentials, or signed Git commits, or when reviewing code for security concerns; use for SSL setup, CSRF protection, password hashing, database permissions, and server hardening.

webshare-proxy Skill

Audits a Webshare account for wasted proxy spend and recommends plan adjustments based on the account's own historical usage, using the webshare CLI. Use periodically (e.g. monthly) or whenever asked to review proxy costs, find savings, cut spend, or right-size plans. Strictly read-only — it recommends, it never changes the account.