4,624 skills sorted by stars.
Context-appropriate safety guardrails across three dynamic operational levels (Default, Strict, Relaxed). Enforces PII r...
This skill provides mandatory safety guidelines for coding agents. It should be used at the start of any coding session...
Active security enforcement — scan for vulnerabilities (SAST), secrets (Gitleaks), insecure deps (SCA) before commit/dep...
Read and tune the scored safety report per token, apply the thresholds table, and mark blind checks blind instead of pas...
Run SageMath computations through the existing Anaconda environment named `sage`. Use when Codex needs Sage for CTF and...
Build a defensible weighted forecast — worst/likely/best scenarios, commit vs. upside, weighted total, and the gap-to-ta...
Domain expert in identifying vulnerabilities, mitigating OWASP Top 10 risks
SAML 2.0 enterprise SSO standard reference. Covers SP-initiated login flow, SP metadata XML, python3-saml and passport-s...
Deploy SAML SSO securely — assertion hardening, metadata management, and defense against signature and XML attacks.
Screen a client, counterparty, payer or corporate against the sanctions lists published by the designating authorities t...
Generate Docker sandbox configurations for safely running untrusted OpenClaw skills. Isolates filesystem, network, and p...
Use when asked about agent confinement on Linux. In icloneOS v0.0.3 it is not available: the same five activity classes...
Parse, analyze, and process SARIF (Static Analysis Results Interchange Format) files. Use when reading security scan res...
Reviews and tunes SAST tool configurations against OWASP ASVS 4.0.3 and CWE Top 25. Auto-invoked when reviewing Semgrep...
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Us...
Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive securit...
Analyze and fix a SAST finding — root cause, exploitability, and secure code alternative. Use when asked to "fix this SA...
Detect insecure JWT (JSON Web Token) implementations in a codebase using a two-phase approach: first map all JWT issuanc...
SAST — tool selection, CI integration, severity thresholds.
Audit existing application security tooling and code for OWASP Top 10 coverage. Use when asked to "audit our appsec tool...
Consolidate all SAST vulnerability results from the sast/ folder into a single final report ranked by severity and confi...
Perform static application security testing with tools like Semgrep, CodeQL, and SonarQube. Identify security vulnerabil...
Analyzes Software Bills of Materials (SBOMs) for completeness against NTIA minimum elements, interprets VEX status docum...
Generate Software Bill of Materials (SBOM) for compliance with NTIA, EU CRA, and other regulatory requirements. Use when...
CycloneDX/SPDX/SLSA kanıt yolu. Defense-only Security OS skill. Use for ASSESS-ONLY gap/control work.
Generate, sign, and verify SBOMs and provenance attestations to secure the software supply chain. Use when implementing...
Expert routing agent for Software Composition Analysis (SCA). Covers open source vulnerability management, CVE/CVSS scor...
Review Strong Customer Authentication and 3-D Secure challenge, exemption, liability, fallback, accessibility, and state...
Describe what this skill helps an agent do.
Scan project dependencies for known vulnerabilities (CVEs). Use when reviewing dependency files (package.json, requireme...
Scans a Power Pages site project for security issues in source code and dependencies. Runs static analysis and dependenc...
Runs a security scan on a deployed Power Pages site, fetches the latest scan report, and produces a plain-language summa...
Scan project dependencies for vulnerabilities, license issues, and supply chain risks. Use when auditing third-party pac...
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "asses...
Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wirel...
Maintains the ansible/roles/scap_compliance Ansible role that runs oscap against a chosen OpenSCAP profile (default cis)...
Implement and operate Spiralverse intent-authenticated communication for HYDRA/SCBE using six sacred tongues, governance...
Guides implementation of EU Standard Contractual Clauses under Commission Decision 2021/914 across all four modules (C2C...
Use this skill when an individual taxpayer needs to claim the Child Tax Credit (CTC), the refundable Additional Child Ta...
Implement priority preemptive, Completely Fair Scheduler (CFS), round-robin, and rate-monotonic CPU schedulers.
This skill should be used when the user asks about 'schema drift', 'schema evolution', 'evolve schema', 'schema sync', '...
Review and maintain research project assets without losing evidence metadata, including cleanup candidates, cold archive...
Use when researchers need Chinese academic prose translated into publication-oriented English or English manuscript para...
Use when preparing a submission, when a reviewer asks for CONSORT/PRISMA/STROBE/ARRIVE/TRIPOD items, when the journal de...
Hard-block edits outside declared frozen directories via PreToolUse hook.
Build ServiceNow scoped applications (x_vendor_app) — scope naming, x_-prefixed tables, cross-scope script include acces...