security Skills

Secure credential management with headless vault operations.

This skill should be used when the user asks to "generate audit logs", "create HIPAA audit trail", "log healthcare event...

Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security aud...

Host security hardening and risk-tolerance configuration for OpenPaw deployments. Use when a user asks for security audi...

Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.

Audit/harden MarketingClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.

Generates structured hearing preparation briefings from case documents, evidence, authorities, and procedural details. U...

Assist with Hedera HBAR transactions, account creation, token service, and consensus features.

Generate Helmet.js security middleware configuration for Express applications. Triggers on "create helmet config", "gene...

Automate Hugging Face model/dataset/space publishing from PowerShell with one-time auth, README card generation, `hf upl...

Assess HIPAA compliance — Privacy Rule, Security Rule, Breach Notification, BAAs

Hipaa Audit Helper - Auto-activating skill for Security Advanced.Triggers on: hipaa audit helper, hipaa audit helperPart...

Drafts HIPAA/HITECH-compliant Business Associate Agreements governing PHI/ePHI handling between covered entities and bus...

Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare...

Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user healt...

Expert HIPAA compliance assistant for healthcare and software contexts. Use this skill whenever the user mentions HIPAA,...

This skill should be used when the user asks to "scan for PHI", "detect PII", "HIPAA compliance check", "audit for prote...

Performs a HIPAA Security Rule compliance review against all Administrative, Physical, and Technical Safeguards defined...

Implements HIPAA Security Rule technical safeguards under 45 CFR §164.312 for electronic protected health information. C...

Implements HITECH Act privacy and security requirements including breach notification expansion, four-tier penalty struc...

Assess HITRUST CSF readiness — control requirements, assessment methodology, certification path

Use when testing everything and finding the gaps.

Verify an HMAC-SHA256 signature given the message and key

AI CLI configuration auditing and optimization agent. Collects official best practices for Codex CLI (~/.codex/), Gemini...

This skill activates when writing Hono routes, handlers, middleware, or discussing Hono application architecture. It pro...

Audit the harness hooks (hooks/*.sh, scripts/hooks/*) and their settings.json wiring, and give each a verdict (hook の棚卸し...

Use when an S1 or S2 production defect requires an emergency fix with an audit trail and rollback plan.

HOTP (RFC 4226) HMAC-based one-time password reference. Counter- based OTP for hardware tokens. Covers algorithm step-by...

Maps security-sensitive code locations in a codebase to focus review effort. Use when the user asks to identify security...

Configure multi-node MPI compute jobs, Slurm job scheduling, OpenMP thread scaling, and GPU cluster workloads.

Use when auditing an ACM/IEEE HRI full-paper submission for PCS readiness — the mandatory abstract-then-paper two-step d...

Prepares Hart-Scott-Rodino Act premerger notification filings for FTC/DOJ submission under 15 U.S.C. § 18a and 16 C.F.R....

This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML i...

Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web appli...

Inspect HTTP/1.1 message framing, persistent keep-alive connections, chunked transfer encoding, and caching headers.

Use HTTP correctly with proper methods, status codes, headers, and caching.

Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques

Perform an HTTP GET request and return the response body

Http Header Security Audit - Auto-activating skill for Security Fundamentals.Triggers on: http header security audit, ht...

Perform an HTTP POST with JSON body and return the response

Grade the security headers in a saved HTTP response (HSTS, CSP, nosniff, frame protection, Referrer-Policy, Permissions-...

Hunt HTTP Request Smuggling (CL.TE, TE.CL, TE.TE, H2.CL, H2.TE, downgrade smuggling). Use when target is behind a revers...

Deploy modern HTTP/3 over UDP-based QUIC protocol, eliminating head-of-line blocking and speeding up connection migratio...

Https Certificate Checker - Auto-activating skill for Security Fundamentals.Triggers on: https certificate checker, http...

Hudu secure credential storage: the /api/v1/asset_passwords endpoint (the UI calls these "Passwords"), company scoping a...

Hudu website records: CRUD via /api/v1/websites, monitoring and pause/disable fields, SSL/TLS certificate tracking, emai...

Review AI agent systems for approval step circumvention, human-in-the-loop bypass patterns, deferred confirmation exploi...

Enforce traceability from natural-language intent to machine predicates, final observables, evidence, and owner-readable...