Skill Scanner

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.

Self-Evolve

Autonomous self-evolution skill: grants the agent full authority to modify its own configuration, skills, prompts, AGENTS.md, SOUL.md, memory files, and any workspace file WITHOUT asking for user confirmation. The agent should proactively identify weaknesses, fix them, write new skills, and continuously improve itself.

AI Skill Scanner

Scan OpenBot/Clawdbot skills for security vulnerabilities, malicious code, and suspicious patterns before installing them. Use when a user wants to audit a skill, check if a ClawHub skill is safe, scan for credential exfiltration, detect prompt injection, or review skill security. Triggers on security audit, skill safety check, malware scan, or trust verification.

Feishu Common

Provides shared Feishu authentication, tenant token caching, retry handling, and authenticated API request support for dependent Feishu skills.

Security Audit

Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...

Skill

Security audit tool for ClawHub skills. Scans a skill directory with 65 detection patterns, anti-obfuscation analysis, and dual rating system (Security + Com...

LobsterGuard

Bilingual security auditor for OpenClaw. 68 checks across 6 categories, 11 auto-fixes, OWASP Agentic AI Top 10 coverage, forensic detection, real-time threat...

Htpasswd

Generate htpasswd entries for Apache/Nginx basic auth password management. Use when creating credentials, managing password files, or verifying users.

Skill-Scanner-Pro

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data...

Secure Gmail

Secure Gmail skill using Composio brokered OAuth — no raw tokens stored locally. Reads, searches, and drafts emails with least-privilege enforcement. Blocks...

Workspace Main

Multi search engine integration with 17 engines (8 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra...

AI Company CTO Skill Builder

AI Company CTO Skill Builder module. Handles the technical aspects of the skill learning workflow: directory initialization, SKILL.md authoring, script devel...

Private Chat

Private Chat Mode - Trigger encrypted conversations via codeword. Sensitive information is automatically encrypted using AES-256-CBC for maximum security.

Host Security Audit

Comprehensive security audit and hardening for OpenClaw host machines. Checks firewall, disk encryption, open ports, auto-updates, brew outdated, OpenClaw ve...

Kansodata Databricks Authoring

Skill para generar y refactorizar SQL y notebooks Databricks como texto revisable, sin ejecución ni integración con APIs o persistencia.

Cyberlens Skill

Scan websites and GitHub repositories for practical security issues using CyberLens cloud analysis and local web fallback checks.

AI Breathing

AI领域高质量信息聚合与过滤 skill。当用户要求获取AI领域最新动态、前沿论文、热门工具、行业趋势时触发。覆盖AIGC（文本/图像/视频生成）、虚拟数字人、AI短视频/短剧制作工具、智能传播/舆情/新闻学AI应用四大领域。自动从 arXiv、GitHub、Hacker News、Hugging Face 四大...

fboc

CLI tool to manage Facebook Pages: list, create, read, hide, delete posts; list, create, delete comments; and get page info via the Graph API.

Binance Spot

Binance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet, mainnet, and demo.

Plugin

End-to-end encrypted memory for AI agents — portable, yours forever. XChaCha20-Poly1305 E2EE: server never sees plaintext.

Binance Algo

Binance Algo request using the Binance API. Authentication requires API key and secret key.

Aqara Home Skills

Official Aqara Home skill for natural-language control and query of real smart-home devices, rooms, states, logs, and hardware via authenticated API access.

Plyometric Training Video — Client Education and Authority Marketing Videos for Plyometric Training Professionals

Creates short educational and marketing videos for plyometric trainers to showcase expertise, build trust, and attract qualified clients.

ClawMemory

Sovereign agent memory engine — self-hosted, privacy-first SQLite store with LLM-based fact extraction (GLM-4.7), hybrid BM25+vector search, contradiction re...

Memelord

Memelord API integration with managed authentication. Generate AI-powered memes and video memes with text overlays. Use this skill when users want to create...

Unifiedto

Unified.to integration. Manage data, records, and automate workflows. Use when the user wants to interact with Unified.to data.

Neonomics

Neonomics integration. Manage data, records, and automate workflows. Use when the user wants to interact with Neonomics data.

Bags

Bags - The Solana launchpad for humans and AI agents. Authenticate, manage wallets, claim fees, trade tokens, and launch tokens for yourself, other agents, or humans.

Botmaker

Botmaker integration. Manage Organizations. Use when the user wants to interact with Botmaker data.

Gusto

Gusto integration. Manage hris data, records, and workflows. Use when the user wants to interact with Gusto data.

Fireberry

Fireberry integration. Manage Organizations, Pipelines, Users, Goals, Filters. Use when the user wants to interact with Fireberry data.

Yoco

Yoco integration. Manage data, records, and automate workflows. Use when the user wants to interact with Yoco data.

Nexus Security Auditor

Red/Blue team security audit with CVE scanning, OWASP analysis, and penetration testing recommendations.

Openclaw Twitter Post Engage

Search X/Twitter profiles, tweets, trends, and approved engagement actions through the AISA relay. Use when: the user asks for Twitter/X research, posting, l...

Placekey

Placekey integration. Manage data, records, and automate workflows. Use when the user wants to interact with Placekey data.

Printavo

Printavo integration. Manage Organizations, Leads, Projects, Users, Goals, Filters. Use when the user wants to interact with Printavo data.

Zephyr Squad Legacy

Zephyr Squad (Legacy) integration. Manage Projects. Use when the user wants to interact with Zephyr Squad (Legacy) data.

Promptmateio

Promptmate.io integration. Manage Prompts, PromptSets, Variables, Templates, Models, Users and more. Use when the user wants to interact with Promptmate.io d...

Chaser

Chaser integration. Manage Organizations, Users, Projects. Use when the user wants to interact with Chaser data.

Mockaroo

Mockaroo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Mockaroo data.

TCB Harness

Full-lifecycle CloudBase (TCB) development harness for WeChat Mini Programs, Web apps, or both. Drives structured Spec to Design to Coding (TDD) to Testing t...

Api Gateway 1.0.31

API gateway for calling third-party APIs with managed OAuth connections, provided by Maton (https://maton.ai). Use this skill when users want to interact wit...

Firebase Auth Setup

Configures Firebase Authentication — providers, security rules, custom claims, and React auth hooks

Surveysparrow

SurveySparrow integration. Manage Surveys, Contacts, Responses, Reports, Users, Workspaces. Use when the user wants to interact with SurveySparrow data.

Proton Mail

Manage ProtonMail emails via Playwright browser automation. Login, read, send, and manage your encrypted inbox.

Tailscale VPN

Tailscale安全组网工具 - 基于WireGuard的虚拟组网，安全内网穿透，不暴露公网IP，点对点加密连接。适用于远程访问、居家办公、服务器管理。

MiniMax Image Generation

MiniMax 图片生成技能。集成文生图和图生图功能，支持从文本描述生成图片，也可基于参考图生成新图片。触发场景：(1) 用户请求生成图片，(2) 用户提供描述并要求生成图片，(3) 用户上传参考图并要求基于该图生成新图，(4) 用户想要生成指定风格的图片。支持的风格：漫画、元气、中世纪、水彩（仅 image-0...

OpenClaw Security Audit

Scan your OpenClaw configuration for security risks and harden it with guided fixes. Supports three hardening levels. Use when asked to "security check", "安全...