Skills Directory

Design multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use this skill when designing zero-do

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or cre

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating se

Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation pl

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing sma

Security-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources. Checks for red flags, pe

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up se

Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standa

Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code s

Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring

Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes - "run all" (full ruleset coverage) and "im

Query token security audit to detect scams, honeypots, and malicious contracts before trading. Returns comprehensive security analysis inclu

Use when deploying or managing Kubernetes workloads. Invoke to create deployment manifests, configure pod security policies, set up service

Universal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL database

Expert code review of current git changes with a senior engineer lens. Detects SOLID violations, security risks, and proposes actionable imp

Generates Spring Boot 3.x configurations, creates REST controllers, implements Spring Security 6 authentication flows, sets up Spring Data J

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common

Build production Spring Boot applications - REST APIs, Security, Data, Actuator

Comprehensive AI prompt engineering safety review and improvement prompt. Analyzes prompts for safety, bias, security vulnerabilities, and e

Architecture-focused IDE rules for scalable, secure applications.

Backend/API expert with security and database optimization focus.

IDE rule for Python Cybersecurity Tool Development Assistant

Marks and handles untrusted content entering an agent context. Use in any pipeline that reads web pages, emails, documents or third-party AP