Agent Skills Hub

code-security

Comprehensive secure coding guidelines for 15+ languages, covering OWASP Top 10, infrastructure security, and best practices to identify vulnerabilities in code, configurations, and cloud setups.

clawhub

ClawHub is the official registry and CLI tool for managing OpenClaw AI agent skills. Search, install, version-control, and publish custom skills to your local OpenClaw workspace.

vultisig

MPC-based multi-chain wallet SDK and CLI for AI agents and developers. Perform secure, threshold-signed crypto operations (send, swap, sign) across 40+ blockchains without seed phrases.

openclaw-release-maintainer

Manages the OpenClaw release lifecycle: prepares branches, updates versioning across multiple platforms, generates changelogs, and orchestrates npm and binary artifact publishing.

seatbelt-sandboxer

Generates minimal macOS Seatbelt sandbox configurations for application isolation and security profiling.

Security Code Review

Analyze source code for security vulnerabilities based on OWASP Top 10 guidelines and suggest remediation strategies.

releasing-software

A pre-flight release checklist system to verify build paths, tests, and CI status before tagging, preventing failed deployments and repetitive retagging cycles.

castella-packaging

Package Castella UI applications into cross-platform executables, macOS app bundles, or installers using ux, PyInstaller, or Nuitka. Includes code signing and notarization support.

secure-claude-code

Monitor Runwall security posture, enabled guardrails, and recent audit logs for Claude Code, Codex, and MCP-based development environments.

expo-dev-client

Build and manage custom Expo development clients for native module development using EAS Build and TestFlight.

code-auditing

A systematic code auditing framework for identifying technical debt, security vulnerabilities, dead code, and code quality issues in software projects.

Data Optimizer Pro

A security scanner for Claude Skills to detect malicious code, data exfiltration risks, and unauthorized system access before installation.