Agent Skills Hub

constant-time-testing

Detects timing side channels in cryptographic code to prevent secret data leakage. Essential for auditing sensitive implementations.

network-watcher

Audit outbound network requests and detect data exfiltration patterns in OpenClaw skills to ensure secure outbound communication.

code-auditing

A systematic code auditing framework for identifying technical debt, security vulnerabilities, dead code, and code quality issues in software projects.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.

wycheproof

Validates cryptographic implementations using the Google Wycheproof test vector suite to detect security edge cases and known vulnerabilities.

protocol-reverse-engineering

Perform network protocol reverse engineering, including packet capture, traffic analysis, protocol dissection, and custom format documentation.

technical-audit

Technical SEO audit skill for crawlability, indexability, and Core Web Vitals analysis. Use to audit webpages, validate schema, and fix technical performance issues.

audit-skills

Audit AI skills for security vulnerabilities including prompt injection, hidden instructions, tool misuse, and data exfiltration risks.

substrate-vulnerability-scanner

Analyze Substrate/Polkadot runtimes and FRAME pallets for 7 critical vulnerabilities including arithmetic overflow, DoS, and improper origin checks.

webapp-testing

Toolkit for testing local web applications using Playwright, featuring server lifecycle management, automated DOM inspection, and browser automation workflows.

owasp-mobile-security-checker

Automated security auditing for Flutter applications based on OWASP Mobile Top 10 (2024). Perform vulnerability scans for hardcoded secrets, insecure storage, dependency risks, and network configuration issues.

ossfuzz

Streamline continuous fuzzing for open-source projects using the OSS-Fuzz CLI framework to build harnesses, manage configurations, and generate coverage reports.