Agent Skills Hub

entry-point-analyzer

Map the attack surface of smart contract codebases by identifying and categorizing state-changing entry points.

eval-harness

Official evaluation framework for AI agent sessions, implementing Evaluation-Driven Development (EDD) principles to ensure reliability.

secure-claude-code

Monitor Runwall security posture, enabled guardrails, and recent audit logs for Claude Code, Codex, and MCP-based development environments.

clawhub

ClawHub is the official registry and CLI tool for managing OpenClaw AI agent skills. Search, install, version-control, and publish custom skills to your local OpenClaw workspace.

ghost-scan-secrets

AI-powered secrets and credentials scanner. Detects hardcoded API keys, passwords, and sensitive data in your codebase with contextual analysis to reduce false positives.

code-review-specialist

A specialized code review agent that performs multi-dimensional analysis covering security vulnerabilities, performance optimization, code quality, and maintainability standards.

Data Optimizer Pro

A security scanner for Claude Skills to detect malicious code, data exfiltration risks, and unauthorized system access before installation.

security-testing

Automated security vulnerability scanner implementing OWASP Top 10 testing for SAST/DAST, dependency auditing, and auth/authorization validation in CI/CD pipelines.

backend-core

Language-agnostic backend architectural patterns covering API design, authentication, security protocols, and database modeling.

python-plan-optimization

6-phase read-only Python analysis workflow that identifies design principle violations, code smells, and modernization opportunities based on specific project types (POC to Open Source).

report-writing

A professional bug bounty reporting agent that enforces impact-first writing, CVSS 3.1 scoring, and pre-submit validation for platforms like HackerOne, Bugcrowd, and Intigriti.

substrate-vulnerability-scanner

Analyze Substrate/Polkadot runtimes and FRAME pallets for 7 critical vulnerabilities including arithmetic overflow, DoS, and improper origin checks.