4,624 skills sorted by stars.
Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practi...
Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure dev...
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compl...
Security engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing....
STRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design. Use when conducting threat...
Sentence-by-sentence precision pass for paper prose, divide a paragraph into sentences, test each against the first-time...
Add a Content Security Policy for Senternet marketing sites.
Analyzing code statically for security flaws: hardcoded secrets, SQL injection, input validation, security headers, depe...
Audit securite smart contracts SENTINEL
Manage sensitive data properly in Sentry. Use when configuring PII scrubbing, data retention, GDPR compliance, or data s...
Otimize para visibilidade e ranking em mecanismos de busca. Use quando solicitado a "melhorar SEO", "otimizar para busca...
Use when auditing whether an AI agent can safely understand and complete a web task through the rendered interface, DOM,...
Use when a site needs a bounded multi-lane SEO assessment with explicit scope, evidence capture, findings, ownership, an...
Full website SEO audit with parallel subagent delegation. Crawls up to 500 pages, detects business type, delegates to 6...
Audit and optimize WordPress SEO (Yoast/Rank Math) - checks focus keywords, meta descriptions, featured images. Uses Uns...
Seo Reporting — Skill especializada para gerar, analisar e apresentar relatórios de desempenho SEO, fornecendo insights...
Comprehensive server security hardening workflows based on CIS Benchmarks. Use when securing new servers, improving secu...
Isolate MCP servers by deployment pattern — sandboxing, TEEs, transport and session hardening, SSRF and DNS-rebinding de...
服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用
Define, discover, invoke, and harden tools with a valid schema and human consent. This skill
Detect and exploit session fixation (WSTG-SESS-01, WSTG-SESS-03) and session exposure (WSTG-SESS-04) by testing whether...
Explicit-invocation Skill that creates a sanitized continuation brief tailored to the next-session goal, referencing spe...
セッション管理（Session Management）機能の開発・修正を行う際に使用。OPSession, ClientSession, SSO, RP-Initiated Logout, Back-Channel Logout実装時に役立...
Expert skill for implementing session management in SSG (Static Site Generation) and SSR (Server-Side Rendering) context...
Session state anomaly scanner: finds every session-generation, session-id usage, post-auth session-regeneration, post-lo...
Experimental compression of the settle skill. Same principles, roughly a fifth of the words, single file, no references....
Audit your OpenClaw environment for credential leaks, unsafe defaults, and missing sandbox configuration. Wizard-style:...
Use when the user asks to "set up authentication", "add login", "add logout", "add sign in", "enable auth", "add role-ba...
Data-driven severity classification for smart contract audit findings with statistical breakdowns and 30 representative...
Building, previewing, testing and shipping Agentforce agents from a source-tracked SFDX project - authoring bundles and...
Salesforce Code Analyzer v5 and the rest of the local quality gate - sf code-analyzer run/rules/config with --workspace,...
Standing security audit of a Salesforce org and its source - who holds ModifyAllData, ViewAllData, AuthorApex and ViewEn...
Manage and audit Salesforce permissions: Permission Sets, Profiles, Permission Set Groups, object/field-level security (...
Audit Apex code for CRUD/FLS violations, sharing rule compliance, SOQL injection risks, and PII exposure. Scans entire c...
Cancel an active governed Story, preserve all generated artifacts and approvals, record the human reason and identity, c...
Explain one change, clause, test, line, gap or generation from cited, deterministic records.
Inspect and render the approved phase-artifact inputs configured for the active Singularity Flow phase.
Autonomous AI security pen testing. Executes real exploits against web applications to find SQL injection, XSS, SSRF, au...
Security output format, core refusal policy, and purpose statement shared across all platforms.
Use when access must reach past the record owner's role hierarchy. Trigger keywords: sharing rule, criteria-based sharin...
User-invoked reverse-engineering + enhancement protocol for any source artifact: repos, codebases, docs, PDFs, screensho...
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when revie...
Identify error-prone APIs and dangerous configurations
Review APIs and configuration for dangerous defaults, misuse-prone interfaces, cryptographic footguns, and security clif...
sharp-edges
Security scanner for code, addresses, and transactions