Search: "audit"
Showing 24 of 29 results
agent-permission-boundary-audit
This skill provides a comprehensive security and governance audit for AI agent systems. It analyzes tool inventories, authentication models, connector scopes, and execution logs to identify over-privileged tools and risky permission combinations.
prompt-engineer-pro
Prompt Engineer Pro is a production-grade system for teams shipping AI workflows into business-critical environments. Unlike basic prompting assistants, this skill treats prompts as software assets that require governance, audit trails, and regression testing. It helps you build, audit, and harden prompt stacks for complex tasks involving multiple models, tool-use agents, and structured data extraction.
AEO / GEO Site: Build and Audit for AI Answer Engines
Audit or build a website so it is found by search engines and understood, quoted, and cited by AI answer engines (ChatGPT search, Perplexity, Claude, Copilot, Gemini, Google AI Overviews). Use when shipping or reviewing pages, writing schema.org JSON-LD, robots.txt, sitemap.xml or llms.txt, scoring a site for AEO/GEO readiness, or turning an audit into a prioritized fix list. Made by Dani Acosta, follow on X: https://x.com/DaniAcostaAI
claw-auditor
Audit an OpenClaw or ClawHub skill before you install it. Statically inspects the package for red flags: unsafe shell execution, exfiltration paths, over-broad file access, prompt-injection patterns, obfuscated payloads, and missing provenance. Returns a risk score with per-finding evidence and a clear install or reject verdict.
Independent Website SEO & GEO Auditor
Audit one publicly accessible webpage per run for technical SEO, on-page SEO, GEO/AEO readiness, structured data, trust signals, and AI-search citation potential. Generates an evidence-backed Markdown report with verification labels, P0/P1/P2 priorities, and actionable recommendations. For website owners, AI/SaaS teams, e-commerce businesses, creators, SEO consultants, and marketers. Supports English and Simplified Chinese. No API key or paid SEO subscription is required. Live analysis depends on your AI agent’s webpage-access capability. Free version: one public webpage per run. It does not include full-site crawling, batch analysis, authenticated pages, scheduled monitoring, historical comparisons, or proprietary keyword-volume, ranking, traffic, and backlink data. Results do not guarantee indexing, rankings, traffic, revenue, or AI-search citations. Created by ENHE AI Studio https://www.enhe-tech.com.cn/
audit
The Supreme Verifier for the Synthetic Economy。自主巡检代码、合约与资产风险。Use when。Use when 需要安全检测、合规审计、漏洞扫描、加密防护时使用。不适用于渗透测试未授权目标。适用于独立开发者、企业团队和自动化工作流场景。支持中文交互，无需复杂配置即开即用。 需要代码生成、编程辅助、调试测试、开发部署时使用。不适用于非技术类的通用任务。适用于个人、团队和自动化工作流场景。支持中文交互，无需复杂配置即开即用。。提供完整的配置选项和详细的使用说明，帮助用户快速上手并集成到现有工作流中。
Audit
Health check knowledge base for broken links, missing frontmatter, tag inconsistencies, and coverage gaps. Use when user says "audit KB", "check frontmatter"...
ponytail-audit
Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most important first.
memory-audit
Read-only audit of OpenClaw memory organization, redundancy, stale information, retrieval activity, and context overhead. Use for requests such as "audit my memory", "analyze memory usage", or "show memory optimization suggestions".
preinstall-release-audit
Audit public software releases before installation using static artifacts, license checks, endpoint scans, and live distribution verification.
packet-audit
Use when documents must be submitted to an authority and pass first time — visa, rental, mortgage, benefits, insurance, grant, licensing — to check the folder for missing, expired, or mutually inconsistent documents with page-level citations. Offline, deterministic, no model calls. Not legal advice, not an eligibility decision, not OCR.
发布前侵权审核 Release Infringement Audit
发布前侵权/法律风险审核。当用户说「发布前审一下」「有没有侵权风险」「能发到 npm/ClawHub/GitHub 吗」「release audit」时使用。扫描开源许可证兼容性（GPL 传染/CC-NC）、复制的第三方代码、文档图片字体素材、商标冲突、密钥泄漏五大类，输出结构化分级报告。判定锚定 SPDX 与 FSF/CC 官方分类。
agent-trace-audit
当用户说『AI刚才干了什么我要查』『agent操作有没有越界』『出事了能回溯吗』『给AI行为留个账本』，或要给 agent 的操作做可审计留痕时使用。把 agent 的动作日志（时间戳/执行者/动作/对象/是否过闸）建成可追溯账本，标出未过闸的越界操作（有籍），输出时间线+违规清单。可运行脚本（trace_audit 审计器）。理论根基：LGD 三律之有籍（全程可追溯）。与 agent-redteam-kit/有门禁互补。触发词：行为留痕、trace audit、操作审计、agent回溯、可追溯、行为账本、审计日志。
forensic-audit
Three-phase read-only forensic audit of a codebase. Use when the user invokes `/forensic-audit`, asks to run a "forensic audit", "forensic audit pipeline", "multi-pass audit", "security audit", "vulnerability scan", "security check", or "code vulnerability scan".
dsgvo-audit
Multi-phase DSGVO/GDPR compliance audit skill and task list for agentic QA systems (Germany). Scans database schemas, controller files, auth, subject rights (export/erasure), log/stream leakage, and third-party processor integrations for GDPR/DSGVO compliance surface. Use when invoked as /dsgvo-audit, or asked for "DSGVO-Prüfung", "GDPR audit", "dsgvo check", or "compliance check".
审计与账务调整技能包（免费版）
把审计与账务调整底稿按 14 项检查（试算平衡与科目余额、审计调整分录、资产减值准备、资产处置损益、固定资产折旧、无形资产摊销、模具摊销、坏账准备计提、预提费用、预付款与预付账款核销、长期待摊费用摊销、存货跌价准备、现金盘点与长短款、罚款与违约金结算）逐单位核一遍，每个被审计单位一行结论，结论都带原文文件与行号。完全本地运行，核对过程不需要联网、不需要 API Key、没有次数上限。
审计调整分录核对（免费版）
审计调整分录核对表逐项核对（逐行复算、合计勾稽、重复与空缺检测），每条结论引用原文。本免费版执行引擎声明的免费检查项。触发词包括 审计调整分录核对、审计调整分录核对表对不上。
TinkerClaw Backlink Audit
Discover all inbound links (backlinks) to a domain, subdomain, or GitHub repo, then classify each as "ours" (we created/control the source) vs "organic" (someone else). Use when the user asks to find/audit backlinks or inbound links to a site, check who links to a domain or a GitHub repo, separate self-made links from organic ones, or refresh an inbound-links graph. Wraps four sources (GitHub repo referrers, a list of URLs you found, the backlinks.sh Common-Crawl API, and a Google Search Console CSV export) behind one classify-and-report CLI. Two of the four need no account at all; the one optional API key is stored in your OS keychain and cleared by --logout. Built for the TinkerClaw fork — github.com/globalcaos/tinkerclaw. See Permissions, Data Flow & Consent.
audit-report
Use when the user wants audit findings turned into a stakeholder-ready document — severities, page counts, first-seen/fixed history — as a Markdown or CSV deliverable rather than a working diagnosis.
site-audit
Use when the user wants a current site audit, technical SEO findings, Core Web Vitals interpretation, or a fresh TrustGrowth audit when connected. Supports connected, imported, and public/local evidence.
seo-audit
When the user wants to audit, review, or diagnose SEO issues on their site. Also use when the user mentions "SEO audit," "technical SEO," "why am I not ranking," "SEO issues," "on-page SEO," "meta tags review," "SEO health check," "my traffic dropped," "lost rankings," "not showing up in Google," "site isn't ranking," "Google update hit me," "page speed," "core web vitals," "crawl errors," or "indexing issues." Use this even if the user just says something vague like "my SEO is bad" or "help with SEO" — start with an audit. For building pages at scale to target keywords, see programmatic-seo. For adding structured data, see schema. For AI search optimization, see ai-seo.
ISO 评审助手/ISO Audit Assistant
ISO 评审助手：覆盖 28 个 ISO 标准（9001/14001/45001/27001 等），提供条款解读、差距分析、标准文件生成与存量文档转换，陪你轻松过审 ISO Audit Assistant: covers 28 ISO standards (9001/14001/45001/27001…), offering clause interpretation, gap analysis, document generation and legacy-doc conversion to streamline your certificatio
Content Audit
Audit an existing social media account and its content — the retrospective reality-check of what's working and what isn't. Use when someone wants to "audit m...
asc-aso-audit
# asc ASO audit Run a two-phase ASO audit: offline checks against local metadata files, then keyword gap analysis via Astro MCP. When available, include Apple-generated app tags as a discoverability signal. ## Preconditions - Metadata pulled locally into canonical files via `asc metadata pull --app "APP_ID" --version "1.2.3" --dir "./metadata"`. - If metadata came from `asc migrate export` or `asc localizations download`, normalize it into the canonical `./metadata` layout before running this skill. - For A
signed-audit-trails-recipe
# Signed Audit Trails for Claude Code Tool Calls Cookbook-style walkthrough for cryptographically signed receipts on every Claude Code tool call. This is the teaching skill. For the runtime implementation, install the [`protect-mcp`](../../../protect-mcp/) plugin. ## What this gives you Every tool call (`Bash`, `Edit`, `Write`, `WebFetch`) is: 1. **Evaluated against a Cedar policy** before execution. If the policy denies the call, the tool does not run. 2. **Signed as an Ed25519 receipt** after execution. R
audit-context-building
# Audit Context Building Build understanding, not verdicts. This runs before anyone hunts for bugs, and feeds that work. ## When to Use At the start of an audit, a threat model, or an architecture review, when the code is unfamiliar. Also when an earlier pass produced findings nobody could judge, because no one had mapped out how the system fits together. ## When NOT to Use Do not name vulnerabilities, suggest fixes, write proofs-of-concept, or rate severity. Those belong to the hunting phase, which runs ne
n8n workflow automation
Designs and outputs n8n workflow JSON with robust triggers, idempotency, error handling, logging, retries, and human-in-the-loop review queues. Use when you need an auditable automation that won’t silently fail.
Security Auditor
Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection prevention, XSS protection, or any security-related code review.