Search: "security"
Showing 24 of 30 results
agent-permission-boundary-audit
This skill provides a comprehensive security and governance audit for AI agent systems. It analyzes tool inventories, authentication models, connector scopes, and execution logs to identify over-privileged tools and risky permission combinations.
AgentPass Local
Install a local credential broker with a desktop GUI, allowed-domain policy checks, and OS-protected sensitive fields. Use it when an approved agent workflow needs a narrow login or API handoff without putting passwords, tokens, recovery codes, or payout details into chat, logs, screenshots, or repositories.
Hikvision NVR
Ask your AI agent for the Hikvision footage you need, then walk away while it downloads. Pulling video off a Hikvision DVR or NVR usually means web-UI menus, ISAPI XML, ffmpeg flags, and "why is this video broken" troubleshooting. This skill removes all of it. Once your NVRs are registered, you just tell your agent "pull the lobby camera from 8 to 9 PM yesterday" and a clean MP4 lands in your downloads folder. Speaks Hikvision's ISAPI natively, falls back to RTSP when the NVR throttles, works around firmware quirks that return wrong segment data, clips to the exact time window you asked for, and verifies the output (codec, resolution, duration, on-screen timestamp). Credentials live in your OS keychain, never on command lines or in logs. Validated on DS-9016HWI-ST, DS-7316HQHI-SH, DS-7716NI-I4/16P, DS-9632NI-ST, and DS-7716NI-SP/16 with firmware V3.1.10 through V4.50.000.
owasp-security-reviewer
Review code against the OWASP Top 10 and get a prioritized, evidence-based report. Flags injection, broken access control, cryptographic failures, SSRF, and misconfiguration, with the exact file and line, the exploit scenario, and a concrete fix for each finding. Includes severity scoring and a remediation checklist. No account, no API key.
Code Review Agent
Comprehensive code review with security, performance, and style analysis for Python, TypeScript, and Go. Detects OWASP Top 10 vulnerabilities, N+1 queries, race conditions, and logic errors before they reach production.
claw-auditor
Audit an OpenClaw or ClawHub skill before you install it. Statically inspects the package for red flags: unsafe shell execution, exfiltration paths, over-broad file access, prompt-injection patterns, obfuscated payloads, and missing provenance. Returns a risk score with per-finding evidence and a clear install or reject verdict.
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
AgentGuard
GoPlus AgentGuard — AI agent security guard. Run /agentguard checkup for a full security health check, scans all installed skills, checks credentials, permis...
Security
Runs a backend-backed live safety check for instructions that may trigger tool execution, external calls, file edits, permission changes, destructive or irre...
Security
Enterprise-grade security framework for LobsterAI with audit logging, RBAC, input validation, output sanitization, code scanning, and dependency vulnerabilit...
Security
Runs a backend-backed live safety check for instructions that may trigger tool execution, external calls, file edits, permission changes, destructive or irre...
Agent Security
Security hardening for AI agents. Audit your workspace for leaked secrets, check file permissions, validate API key storage, scan for prompt injection risks,...
Security Audit
Comprehensive OpenClaw security audit — checks gateway binding, credential exposure, channel policies, tool sandboxing, network/IP leaks, and macOS system se...
Security Deposit Settlement
Settle a US rental security deposit after move-out with the Tektolo deposit settlement engine - the return deadline, which deductions are allowed and how much after depreciation, interest owed, the refund, penalty exposure and a draft itemized statement, every rule cited. Use when a landlord or property manager is closing a move-out, when a tenant asks whether a deposit came back on time or a deduction is allowed, or for a state's deposit rules.
Security App Wealth Advisor
AI-powered wealth advisor for bank mobile apps offering personalized product matching, investment consultation, and compliance-compliant customer interaction.
Galleon DeFi Security Token Diligence
Investigate token controls, exits and launch flows
Security Quant Backtest
AI-powered quantitative backtesting tool for China A-share strategies, supporting design, historical tests, performance attribution, walk-forward analysis, a...
Security Portfolio Risk
Provides AI-driven portfolio risk analysis for China A-shares with VaR, stress testing, tail risk, factor exposure, and risk attribution for fund managers.
rafter-security
Security toolkit for AI workflows. Use when scanning code or repos for vulnerabilities, auditing third-party skills/MCPs/agent configs before installing, evaluating shell commands before running them, or generating secure design questions for new features. Provides `rafter run` (remote SAST + SCA, needs RAFTER_API_KEY), `rafter secrets` (offline secrets-only), `rafter agent exec --dry-run` (command-risk classification), and `rafter skill review`.
Security Ib Compliance
AI assistant for investment banking compliance in China, covering IPO sponsorship, M&A advisory, bond issuance, PE investment, AML screening, and cross-borde...
安全情报雷达
安全情报雷达为 AI Agent 提供智能化的漏洞与威胁情报订阅能力。它聚合 NVD CVE、GitHub Security Advisory、社区恶意技能通报等多源数据，并按资产关联度与可利用性双重排序，把每天数十上百条告警压缩到只剩必须处理的两三条。 核心能力：多源情报聚合（CVE/GHSA/恶意技能）、资产...
portal-security-watch
Monitor CVEs and security advisories through the Chinng AI-Agent Portal. Use for incremental vulnerability checks, package watchlists, and actionable security summaries.
golang-security
Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, reviewing, or auditing Go code for security, or when working on any risky code involving crypto, I/O, secrets management, user input handling, or authentication. Includes configuration of security tools.
Security Hardening
Security audit and hardening for AI agents — credential hygiene, secret scanning, prompt injection defense, data leakage prevention, and privacy zones.
Agent Runtime Security
Complete OpenClaw Agent Security Hardening - Protects against data leaks (storage security) and prompt injection (runtime security). Use for initial setup, s...
Scan.now Security Tools
Use Scan.now when the user wants a passive security assessment of a website they are authorized to test, or wants to inspect a suspicious public link for phishing signals.