Skills Directory

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShi

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access contro

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or cre

Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation pl

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing sma

Security-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources. Checks for red flags, pe

Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code s

Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes - "run all" (full ruleset coverage) and "im

Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for al

Query token security audit to detect scams, honeypots, and malicious contracts before trading. Returns comprehensive security analysis inclu

Expert code review of current git changes with a senior engineer lens. Detects SOLID violations, security risks, and proposes actionable imp

Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capt

Comprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and e

Audits Python + BigQuery pipelines for cost safety, idempotency, and production readiness. Returns a structured report with exact patch loca