Browse 126 Security & Compliance — Agentic Skills

Security engineering workflow for OpenClaw privilege governance and hardening.

Evidence-first automation inventory and overlap audit workflow for ECC. Use when the user wants to know which jobs, hooks, connectors, MCP servers, or wrappers are live, broken, redundant, or missing before fixing anything.

Audit a skill collection before release or investigate installer omissions, archived/template leakage, duplicate identities, and manifest drift. Reconcile the intended public source set, distribution manifest, and actual discovery output for a specified consumer version. Includes a deterministic set-comparison helper.

Use when the user asks to "audit content quality", "EEAT score", "content quality check", "CORE-EEAT audit", "how.

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

Helps verify that skill signing events are recorded in an independently auditable transparency log — catching.

Minimal helper to audit skill.md-style instructions for supply-chain risks.

<!-- Skill Security Reviewer | Version 3.0.0 | Author: chris@zast.ai -->.

Set up an lnd remote signer container that holds private keys separately from the agent.

Comprehensive code security audit toolkit combining OWASP Top 10 vulnerability scanning, dependency analysis.

Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure.

Audit an iOS app repo.

SEO health check for any URL — analyzes meta tags, OG, JSON-LD, sitemap, robots.txt, SERP positions, and scores.

Harden Docker/container images and runtime deployments with secure base images, non-root users, CVE scanning, SBOM/signing, seccomp/AppArmor, and Kubernetes pod security controls. Use for Dockerfile security reviews, container CVEs, image scanning, distroless images, or production hardening.

Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls.

Audit your AI agent setup for performance, cost, and ROI.

Audit Homebrew installation — outdated packages, cleanup opportunities, and health checks.

Runtime security guardrails for OpenClaw agents.

Scan content and websites for SEO gaps, identify opportunities to outrank competitors.

Comprehensive security audit for an agent's full skill stack.

Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings. Use when hunting reportable, remotely reachable vulnerabilities in a repository.

Audit regulation freshness and update policy-driven controls without hardcoding.

Protect AI agents from email-based attacks including prompt injection, sender spoofing, malicious attachments.

Automatic security gate that checks packages against a vulnerability database before installation.