Skills 导航

安装前审计 Claude Code Skill 的代码执行、Prompt 注入和依赖供应链风险，支持本地目录或 Git 仓库扫描，输出 PASS/WARN/FAIL 结论及修复建议

✎ 把代码审查、漏洞扫描和合规检查串成一条线，帮团队更早发现风险，做安全治理更省心。

覆盖应用安全、漏洞管理与合规审计，支持代码/依赖扫描、CVE 评估、Secrets 检测和安全自动化，适合做安全基线落地、漏洞响应、审计检查与安全开发治理。

✎ 应用安全、漏洞管理和合规检查一套打通，还能自动化扫描与响应，帮团队更早发现并收敛风险。

面向多语言项目做依赖体检，扫描漏洞与 CVE、排查许可证冲突、梳理传递依赖和过时版本，给出安全升级与合规治理建议。

✎ 依赖审计能快速揪出项目依赖中的漏洞与合规风险，把安全扫描和审计合在一起，适合依赖链复杂的团队持续把关。

覆盖威胁建模、漏洞评估、安全架构设计、代码审计与渗透测试，内置 STRIDE、OWASP、加密模式和安全扫描流程，适合系统设计评审与上线前安全排查。

✎ 安全专家把威胁建模、漏洞分析到渗透测试串成一套流程，内置 STRIDE 与 OWASP 指南，做安全设计和排查更省心。

Use this skill when the user provides AF2, ESMFold, AF3, Boltz-1, SASA, or MD results and needs a Gate 1-4 audit with a Go/Hold/Kill decision.

Secure key management for AI agents. Use when handling private keys, API secrets, wallet credentials, or when building systems that need agent-controlled funds. Covers secure storage, session keys, leak prevention, and prompt injection defense.

Audit GDPR compliance, generate privacy policies, and document data flows. Use when auditing practices, drafting policies, or checking consent flows.

Check connectivity with ping, port scan, and DNS lookup in one fast tool. Use when testing reachability, scanning ports, resolving DNS records quickly.

Skill 重叠分析工具 - 检测已安装 skills/commands 的功能重复，辅助精简配置。Triggers: 'skill 审计', '功能重叠', '重复检测', 'skill audit', 'skill scan', '精简配置'.

Monitor website availability and response times. Use when checking site status, benchmarking latency, tracking uptime history, or alerting on outages.

Generate htpasswd entries for Apache/Nginx basic auth password management. Use when creating credentials, managing password files, or verifying users.

Log vehicle mileage, review driving trends, and export trip reports for tracking. Use when logging trips, tracking fuel economy, exporting mileage data.

Reviews Elixir code for security vulnerabilities including code injection, atom exhaustion, and secret handling. Use when reviewing code handling user input, external data, or sensitive configuration.

Scan new meme coins for risks and opportunities — honeypot detection, liquidity analysis, holder concentration.

Privacy Policy Generator - 隐私政策生成器. Use when you need privacy policy capabilities. Triggers on: privacy policy.

Security vitals checker, also known as ClawVitals. Scans your installation, scores your setup, and shows you exactly what to fix. First scan in seconds.

Audit all installed skills for quality, duplicates, structural issues, and best-practice compliance. Use when asked to review, audit, lint, or check skills for problems. Triggers on "audit skills", "skill quality", "check my skills", "skill duplicates", "skill hygiene".

Security health check and recurring posture tracking for OpenClaw. Finds real misconfigurations across authentication, version currency, and platform config. Tracks whether your security posture improves or regresses over time. Alerts on new critical findings. Run "run clawvitals" to get your first score in under 30 seconds.

🦞 AI-era digital asset proof system | Full format support | Offline-first | Local blockchain | ISO 27001 security

Log daily steps, set fitness goals, and chart walking trends. Use when logging counts, tracking progress, charting trends, setting goals.

Store, retrieve, and manage login credentials securely using bash and Python with local encryption. Use when saving website logins, API keys, or generating secure passwords.

Track compliance requirements and generate audit trail reports. Use when auditing controls, checking policies, generating audit trails.

COPPA compliance reference — children's online privacy, parental consent, data collection rules, FTC enforcement. Use when building apps for children under 13 or reviewing COPPA obligations.

A little tool to play with Windows security credential-tester, c. Use when you need credential-tester capabilities. Triggers on: credential-tester.