Agent Skills Hub

xss-testing

Automated security skill for identifying and validating XSS vulnerabilities, including Reflected, Stored, and DOM-based attacks across various contexts.

commit-safe

A secure Git commit workflow agent that prevents accidental mass commits and promotes surgical, file-specific staging and semantic commits.

WordPress Penetration Testing

Conduct automated security assessments of WordPress sites using WPScan, enumeration techniques, and vulnerability scanning for themes, plugins, and users.

ghost-scan-secrets

AI-powered secrets and credentials scanner. Detects hardcoded API keys, passwords, and sensitive data in your codebase with contextual analysis to reduce false positives.

network-watcher

Audit outbound network requests and detect data exfiltration patterns in OpenClaw skills to ensure secure outbound communication.

n8n-security-testing

Automated security scanning for n8n workflows: detects credential exposure, validates OAuth flows, tests API key management, and checks data sanitization.

skill-vetter

Security-first vetting protocol for AI agent skills. Detects red flags like credential theft, obfuscated code, and unauthorized data exfiltration before installation.

backend-development

Build, optimize, and maintain production-ready backend systems using Node.js, Python, Go, and Rust. Includes API design, database management, security, and DevOps best practices.

configuring-firewalls

Configure host-based firewalls (UFW, nftables, iptables) and cloud security groups (AWS, GCP, Azure) with production-ready security rules.

owasp-mobile-security-checker

Automated security auditing for Flutter applications based on OWASP Mobile Top 10 (2024). Perform vulnerability scans for hardcoded secrets, insecure storage, dependency risks, and network configuration issues.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.

seatbelt-sandboxer

Generates minimal macOS Seatbelt sandbox configurations for application isolation and security profiling.