Prompt Guard

650+ pattern AI agent security defense covering prompt injection, supply chain injection, memory poisoning, action gate bypass, unicode steganography, cascad...

supply-chain-risk-auditor

Installable GitHub library of 1,400+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.

Openclaw Sentinel

Supply chain security for agent skills. Pre-install inspection, post-install scanning, obfuscation detection, and known-bad signature matching. Verify skills are safe before they touch your workspace. Free alert layer — upgrade to openclaw-sentinel-pro for quarantine, blocking, and community threat feeds.

supply-chain-risk-auditor

Installable GitHub library of 1,400+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.

Supply Chain Risk Monitor

Analyze supplier risks, map dependencies, score vulnerabilities, and generate data-driven mitigation plans with risk dashboards and scenario modeling.

supply-chain-risk-auditor

Installable GitHub library of 1,400+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.

Logistics Operations Optimizer

Provides detailed optimization frameworks for supply chain, shipping, warehouse, and transportation costs with actionable savings and KPI monitoring.

analyzing-sbom-for-supply-chain-vulnerabilities

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

🦒 Giraffe Guard — 长颈鹿卫士

Scan OpenClaw skill directories for 22 supply chain attack patterns with context-aware detection, colored output, JSON reports, and whitelist support.

detecting-supply-chain-attacks-in-ci-cd

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

ChipChain

Semiconductor supply chain intelligence.

implementing-supply-chain-security-with-in-toto

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

ClawSentinel

Pure local 2026 ClawHub/OpenClaw skill scanner. Detects ClawHavoc malware, MCP backdoors, obfuscated payloads, and supply-chain attacks. 100% read-only analy...

performing-supply-chain-attack-simulation

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

Sustainability Playbook

World-Class Sustainability & Social Responsibility Playbook. Use for: ESG strategy, carbon footprint (Scope 1/2/3), ethical sourcing, supply chain due dilige...

analyzing-supply-chain-malware-artifacts

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

CCDB Factor Search

CCDB碳因子查询与匹配。Find and select the best-fit CCDB carbon / emission factor for PCF, LCA, carbon accounting, ESG, and supply-chain work — not just a raw search r...

hunting-for-supply-chain-compromise

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

alon-github-security-audit

USE WHEN user wants to audit a GitHub repository or local directory for malicious code, backdoors, suspicious behavior, or supply-chain risk before trusting...

binance-tokenized-securities-info

Query Ondo tokenized US stock data on Binance Web3. Covers: supported stock token list, RWA metadata (company info, attestation reports), market and per-asset trading status (with corporate action codes for earnings, dividends, splits), real-time on-chain data (token price, holders, circulating supply, market cap), US stock fundamentals (P/E, dividend yield, 52-week range), and token K-Line/candlestick charts. Use this skill when users ask about: - Tokenized stock price, holders, or on-chain data for specific tickers - Whether a stock token is tradable, paused, or halted - Ondo RWA token list or which US stocks are available on-chain - Corporate actions affecting a token (dividends, stock splits, earnings halt) - Stock token K-Line or candlestick chart data - Comparing on-chain token price vs US stock price NOT for general crypto tokens (BTC, ETH, SOL, etc.) — use query-token-info for those.

SkillChain

Supply chain intelligence for OpenClaw skills. Use when analyzing the local skill ecosystem, understanding tool and package dependencies, discovering skill c...

Skill Mcp Security Audit

Perform a security audit of MCP servers to detect data exfiltration, command injection, permission escalation, and supply chain vulnerabilities before use.

Skill Risk Auditor

Comprehensive pre-install guard that audits third-party skills across nine risk areas — covering semantic integrity, supply chain, secrets, data exfiltration...

Self-Improving Supply Chain

Captures forecast errors, supplier risks, logistics delays, inventory mismatches, quality deviations, and demand signal shifts to enable continuous supply ch...

Hidden Truth Reveal Video Gen

Create vertical reveal shorts: polished product vs harsh origin, one-line verdict, timed English captions (WeryAI). Use for supply-chain shock, contrast edit...

Deps Mgmt

Deep dependency management workflow—inventory, upgrade policy, security patches, licensing, lockfiles, and supply-chain hygiene. Use when upgrading framework...

MCP Security Auditor Lite

Free version — scan your MCP configuration for the top 3 security risks. Tool description injection, permission sprawl, and supply chain trust.

Axios Security Check

Checks for the March 2026 axios supply chain attack — two malicious npm versions (axios@1.14.1 and axios@0.30.4) that injected a RAT dropper via a fake depen...

04 Supply Chain

社区团购供应链与采购管理全链路技能包。涵盖供应商开发、资质审核、评分卡、采购谈判、仓储管理、配送履约及配套工具。适用于平台采购负责人、供应链管理者。

DCL Provenance Tracker — Supply Chain & Version Drift Verifier

Verify the integrity and version history of any ClawHub skill after an update. After ClawHavoc incidents where thousands of skills silently changed behavior...

axios-supply-chain-attack-check

Provides a quick 1-minute script to detect and handle malicious axios versions and backdoor dependencies in front-end projects.

Supply Chain Optimization Tiktok

Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost...

Skill Security Scanner

Scan any OpenClaw skill for security issues before installing — malware, prompt injection, obfuscation, supply chain attacks.

Summon Translator Skill

Translate safety procedures, supplier documents, and Articulate Rise 360 eLearning content into 137+ languages using AI. Built for supply chain teams, HSE pr...

AutoDimension Report Skill En

Process PDF, DOCX, XLSX from supply chain document packages — conversion, image extraction, OCR, dimension verification, and review report generation. Invoke...

Supply Chain & Logistics Intelligencel

AI-powered global supply chain and logistics intelligence engine. Tracks ocean freight rates (Drewry/Freightos), port throughput (LA/LB, China ports), trade...

Ntriq Country Risk Monitor

Free country risk assessment API for supply chain, FDI, and trade compliance. Screen OFAC sanctions, World Bank economic indicators, disaster risk, and geopo...

in-toto

Go implementation of the in-toto (provides a framework to protect the integrity of the software supply chain) python reference implementation.

Zara Brand

Provides detailed insights into Zara's fast fashion strategy, business model, supply chain, and market impact with a focus on speed, vertical integration, an...

dole-food

Provides detailed information on Dole Food's history, global produce operations, supply chain, and market leadership in bananas and pineapples.

Old Navy

Old Navy offers affordable, trendy apparel across the US with a large store network, leveraging Gap's supply chain for cost-effective fashion retailing.

Seven Eleven

Analyze 7-Eleven's global retail model, franchise profit sharing, fresh food supply chain, and Japanese vs Western convenience store strategies.

Security Audit (Sona)

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or installing.

Inventory Supply Chain

Manage inventory, forecast demand, evaluate suppliers, optimize reorder points, and improve supply chain for businesses of all sizes.

Openclaw Security

Unified security suite for agent workspaces. Installs, configures, and orchestrates all 11 OpenClaw security tools in one command — integrity, secrets, permissions, network, audit trail, signing, supply chain, credentials, injection defense, compliance, and incident response.

Security Audit

Minimal helper to audit skill.md-style instructions for supply-chain risks.

skillnet

Search, download, create, evaluate, and analyze reusable agent skills via SkillNet — the open skill supply chain for AI agents. Use when: (1) Before any mult...

Vulnerability Scanner

Performs static analysis for OWASP 2025 risks, supply chain threats, secrets detection, code patterns, and prioritizes vulnerabilities by exploitability and...