AI Agent Skills Marketplace
Showing 11 of 11 results
Hikvision NVR
Ask your AI agent for the Hikvision footage you need, then walk away while it downloads. Pulling video off a Hikvision DVR or NVR usually means web-UI menus, ISAPI XML, ffmpeg flags, and "why is this video broken" troubleshooting. This skill removes all of it. Once your NVRs are registered, you just tell your agent "pull the lobby camera from 8 to 9 PM yesterday" and a clean MP4 lands in your downloads folder. Speaks Hikvision's ISAPI natively, falls back to RTSP when the NVR throttles, works around firmware quirks that return wrong segment data, clips to the exact time window you asked for, and verifies the output (codec, resolution, duration, on-screen timestamp). Credentials live in your OS keychain, never on command lines or in logs. Validated on DS-9016HWI-ST, DS-7316HQHI-SH, DS-7716NI-I4/16P, DS-9632NI-ST, and DS-7716NI-SP/16 with firmware V3.1.10 through V4.50.000.
AgentPass Local
Install a local credential broker with a desktop GUI, allowed-domain policy checks, and OS-protected sensitive fields. Use it when an approved agent workflow needs a narrow login or API handoff without putting passwords, tokens, recovery codes, or payout details into chat, logs, screenshots, or repositories.
owasp-security-reviewer
Review code against the OWASP Top 10 and get a prioritized, evidence-based report. Flags injection, broken access control, cryptographic failures, SSRF, and misconfiguration, with the exact file and line, the exploit scenario, and a concrete fix for each finding. Includes severity scoring and a remediation checklist. No account, no API key.
claw-auditor
Audit an OpenClaw or ClawHub skill before you install it. Statically inspects the package for red flags: unsafe shell execution, exfiltration paths, over-broad file access, prompt-injection patterns, obfuscated payloads, and missing provenance. Returns a risk score with per-finding evidence and a clear install or reject verdict.
gdpr-data-handling
# GDPR Data Handling Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls. ## When to Use This Skill - Building systems that process EU personal data - Implementing consent management - Handling data subject requests (DSRs) - Conducting GDPR compliance reviews - Designing privacy-first architectures - Creating data processing agreements ## Core Concepts ### 1. Personal Data Categories | Category | Examples | Protection Level | | ---------------------- |
code-review-expert
# Code Review Expert ## Overview Perform a structured review of the current git changes with focus on SOLID, architecture, removal candidates, and security risks. Default to review-only output unless the user asks to implement changes. ## Severity Levels | Level | Name | Description | Action | |-------|------|-------------|--------| | **P0** | Critical | Security vulnerability, data loss risk, correctness bug | Must block merge | | **P1** | High | Logic error, significant SOLID violation, performance regres
agent-email-inbox
# AI Agent Email Inbox ## Overview This skill covers setting up a secure email inbox that allows your application or AI agent to receive and respond to emails, with content safety measures in place. **Core principle:** An AI agent's inbox receives untrusted input. Security configuration is important to handle this safely. The skill builds the agent on a Resend **Inbox**. An inbox groups email into threads, and your agent replies inside the thread with one call. Resend sets the recipients and the threading h
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
agent-governance
# Agent Governance Patterns Patterns for adding safety, trust, and policy enforcement to AI agent systems. ## Overview Governance patterns ensure AI agents operate within defined boundaries — controlling which tools they can call, what content they can process, how much they can do, and maintaining accountability through audit trails. ``` User Request → Intent Classification → Policy Check → Tool Execution → Audit Log ↓ ↓ ↓ Threat Detection Allow/Deny Trust Update ``` ## When to Use - **Agents with tool acc
skill-security
# skill-security Agent skills run with the user's privileges and are distributed with almost no vetting. Roughly one in four published skills contains a security issue, and coordinated campaigns have flooded marketplaces with credential-stealers, ransomware droppers, and skills that poison the agent's memory so the backdoor survives removal. This skill answers one question: **is this skill safe to install?** ## How it works: two stages This skill is deliberately split. - **Stage 1 — the scanner (determinist
data-manager-api-setup
# Data Manager API Setup ## Setup Authentication Refer to [Set up API access](https://developers.google.com/data-manager/api/devguides/quickstart/set-up-access.md.txt) for more details. ### 1. Enable the API **Prerequisites**: A Google Cloud project, the Google Cloud CLI (`gcloud`), and a Google Account with a project role that can enable APIs, such as **Owner**, **Editor**, or **Service Usage Admin**. Always tell the user about the required role. If `gcloud` isn't installed, prompt the user to install it f