Agent Skills Hub

n8n-security-testing

Automated security scanning for n8n workflows: detects credential exposure, validates OAuth flows, tests API key management, and checks data sanitization.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.

rt.safety.auditor

Analyze C++ code for real-time safety violations including heap allocations, locks, blocking calls, and non-deterministic operations in high-performance audio threads.

code-auditing

A systematic code auditing framework for identifying technical debt, security vulnerabilities, dead code, and code quality issues in software projects.

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

codeql

Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.

seatbelt-sandboxer

Generates minimal macOS Seatbelt sandbox configurations for application isolation and security profiling.

cofounder-im

Pull validated startup project data and AI-generated build specifications from CoFounder.im to autonomously orchestrate development in OpenClaw.

startup-business-analyst-business-case

Generate comprehensive, investor-ready business cases for startups, including market analysis, financial modeling, competitive positioning, and funding strategies.

dojo-debug

Diagnose and resolve connection, sync, subscription, and type issues in Dojo.js applications. Use for troubleshooting Torii, entity queries, and state updates.

fabric

Intelligent pattern selection for Fabric CLI, automatically choosing from 242+ specialized prompts for threat modeling, data analysis, summarization, and content creation.

command-executor

Safely execute, test, and verify commands discovered in documentation with real output capture, performance tracking, and git-aware safety protocols.