Agent Skills Hub

rt.safety.auditor

Analyze C++ code for real-time safety violations including heap allocations, locks, blocking calls, and non-deterministic operations in high-performance audio threads.

semgrep-rule-variant-creator

Port Semgrep rules to new languages using a strict, test-driven methodology. Includes applicability analysis, AST-based translation, and automated validation for each target language.

indirect-injection-detection

Detects indirect prompt injection and goal hijacking in AI agents by evaluating how they process external content like RAG, documents, and web data.

dojo-debug

Diagnose and resolve connection, sync, subscription, and type issues in Dojo.js applications. Use for troubleshooting Torii, entity queries, and state updates.

variant-analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, or performing systematic code audits.

swift-review

Expert Swift code review for macOS/iOS. Detects memory leaks, threading bugs, concurrency issues, and accessibility gaps using parallel analysis agents.

root-cause-tracing

Systematic debugging skill to trace errors backward through call stacks, identify original triggers, and implement layered defenses instead of patching symptoms.

codeql

Perform deep security analysis on codebases using CodeQL for interprocedural data flow, taint tracking, and automated vulnerability detection across multiple languages.

network-watcher

Audit outbound network requests and detect data exfiltration patterns in OpenClaw skills to ensure secure outbound communication.

otto

🛡️ GDPR & LGPD Privacy Guardian: Automated compliance scanner that detects PII exposure, insecure logging, and tracking violations in your codebase to prevent regulatory fines.

constant-time-testing

Detects timing side channels in cryptographic code to prevent secret data leakage. Essential for auditing sensitive implementations.

report-writing

A professional bug bounty reporting agent that enforces impact-first writing, CVSS 3.1 scoring, and pre-submit validation for platforms like HackerOne, Bugcrowd, and Intigriti.