Skill Scanner

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.

Self-Evolve

Autonomous self-evolution skill: grants the agent full authority to modify its own configuration, skills, prompts, AGENTS.md, SOUL.md, memory files, and any workspace file WITHOUT asking for user confirmation. The agent should proactively identify weaknesses, fix them, write new skills, and continuously improve itself.

AI Skill Scanner

Scan OpenBot/Clawdbot skills for security vulnerabilities, malicious code, and suspicious patterns before installing them. Use when a user wants to audit a skill, check if a ClawHub skill is safe, scan for credential exfiltration, detect prompt injection, or review skill security. Triggers on security audit, skill safety check, malware scan, or trust verification.

Feishu Common

Provides shared Feishu authentication, tenant token caching, retry handling, and authenticated API request support for dependent Feishu skills.

Security Audit

Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...

Skill

Security audit tool for ClawHub skills. Scans a skill directory with 65 detection patterns, anti-obfuscation analysis, and dual rating system (Security + Com...

LobsterGuard

Bilingual security auditor for OpenClaw. 68 checks across 6 categories, 11 auto-fixes, OWASP Agentic AI Top 10 coverage, forensic detection, real-time threat...

Htpasswd

Generate htpasswd entries for Apache/Nginx basic auth password management. Use when creating credentials, managing password files, or verifying users.

Skill-Scanner-Pro

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data...

Secure Gmail

Secure Gmail skill using Composio brokered OAuth — no raw tokens stored locally. Reads, searches, and drafts emails with least-privilege enforcement. Blocks...

Workspace Main

Multi search engine integration with 17 engines (8 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra...

AI Company CTO Skill Builder

AI Company CTO Skill Builder module. Handles the technical aspects of the skill learning workflow: directory initialization, SKILL.md authoring, script devel...

Private Chat

Private Chat Mode - Trigger encrypted conversations via codeword. Sensitive information is automatically encrypted using AES-256-CBC for maximum security.

Host Security Audit

Comprehensive security audit and hardening for OpenClaw host machines. Checks firewall, disk encryption, open ports, auto-updates, brew outdated, OpenClaw ve...

Kansodata Databricks Authoring

Skill para generar y refactorizar SQL y notebooks Databricks como texto revisable, sin ejecución ni integración con APIs o persistencia.

Cyberlens Skill

Scan websites and GitHub repositories for practical security issues using CyberLens cloud analysis and local web fallback checks.

AI Breathing

AI领域高质量信息聚合与过滤 skill。当用户要求获取AI领域最新动态、前沿论文、热门工具、行业趋势时触发。覆盖AIGC（文本/图像/视频生成）、虚拟数字人、AI短视频/短剧制作工具、智能传播/舆情/新闻学AI应用四大领域。自动从 arXiv、GitHub、Hacker News、Hugging Face 四大...

fboc

CLI tool to manage Facebook Pages: list, create, read, hide, delete posts; list, create, delete comments; and get page info via the Graph API.

Binance Spot

Binance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet, mainnet, and demo.

Plugin

End-to-end encrypted memory for AI agents — portable, yours forever. XChaCha20-Poly1305 E2EE: server never sees plaintext.

Binance Algo

Binance Algo request using the Binance API. Authentication requires API key and secret key.

Aqara Home Skills

Official Aqara Home skill for natural-language control and query of real smart-home devices, rooms, states, logs, and hardware via authenticated API access.

Plyometric Training Video — Client Education and Authority Marketing Videos for Plyometric Training Professionals

Creates short educational and marketing videos for plyometric trainers to showcase expertise, build trust, and attract qualified clients.

ClawMemory

Sovereign agent memory engine — self-hosted, privacy-first SQLite store with LLM-based fact extraction (GLM-4.7), hybrid BM25+vector search, contradiction re...

Memelord

Memelord API integration with managed authentication. Generate AI-powered memes and video memes with text overlays. Use this skill when users want to create...

echology-io/decompose

🐍 🏠 🍎 🪟 🐧 - Decompose text into classified semantic units with authority, risk, attention scores, and entity extraction. No LLM. Deterministic. Works as MCP server or CLI.

PrivacyGPT

Your guide through privacy legislation. GDPR, United States like CCPA & PIPEDA. by Mehmet Yilmaz

Pentest reporter

Assists in writing detailed security report. by Lucien Doustaly

Privacy Guardian AI

Expert in guiding GPT creation with a focus on privacy and security. by Pravesh Jain

Cyber Scraper: Seraphina (Web Crawler)

I'm a Python Web Scraping Expert, skilled in using advanced frameworks by lysonober.com

Pushover (Dify)

**Author:** langgenius **Version:** 0.0.1 **Type:** plugin Pushover Dify Plugin is a plugin for the Dify platform that allows users to send push notifications to devices via the Pushover service and retrieve the list of registered devices. This plugin is suitable for scenarios requiring automated notifications and message pushing.

peter-j-thompson/semanticapi-mcp

🐍 ☁️ - Natural language API discovery — search 700+ API capabilities, get endpoints, auth setup, and code snippets. Supports auto-discovery of new APIs.

CatEye

AI Cybersecurity Best Practices Advisor. An agent for C-Level executives concerned about their startup's security. by cateyecyber.com

CyberGuard

Cybersecurity advisor for home and small businesses. Ask any question or let cyber guard. by gptagentlist.com

Google Calendar (Dify)

**Author**: langgenius **Version**: 0.1.0 **Type**: tool This plugin integrates with Google Calendar, supporting operations such as managing events, calendars, and scheduling. It enables automated calendar management in platforms like Dify.

Cyber Mentor

Cybersecurity mentor teaching from the basics to advanced. by Huayu Qin

CyberGPT

It provides the latest CVE details. by Edward Prentice

thinkchainai/mcpbundles

MCP Bundles: Create custom bundles of tools and connect providers with OAuth or API keys. Use one MCP server across thousands of integrations, with programmatic tool calling and MCP UI for managing bundles and credentials.

MikkoParkkola/nab

[](https://glama.ai/mcp/servers/MikkoParkkola/nab) 🏎️ 🏠 🍎 🪟 🐧 - Ultra-fast web fetcher and MCP server with HTTP/3, JS rendering, anti-fingerprinting, browser cookie auth, and 1Password integration. Fetche

erithwik/mcp-hn

🐍 ☁️ - An MCP server to search Hacker News, get top stories, and more.

Web Hacking Wizard

Engagingly clarifies web security topics with interactive questions. by [Alexander Hagenah](https://www.linkedin.com/in/alexhagenah/)

sjwt

Simple jwt generator and parser.

scope

Easily Manage OAuth2 Scopes In Go.

GP(en)T(ester)

A cybersec assistant for pentesting guidance. by Roberto Montiel

Medium

Golang SDK for Medium's OAuth2 API.

sdns

A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy.

encid

Encode and decode encrypted integer IDs.

Hackernews (Dify)

**Author**: langgenius **Version**: 0.1.0 **Type**: tool This plugin provides seamless integration with Hacker News, enabling you to access stories, user information, and comments directly from your Dify applications. Retrieve trending stories, analyze user profiles, and get detailed story information without manual browsing.