Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

agent-governance

Manage Discord channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the Discord channel.

Compresses images using best available tool (sips → cwebp → ImageMagick → Sharp).

../../../engineering/skill-security-auditor/SKILL.md

Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous

MS17-010 (EternalBlue) is a critical vulnerability in Microsoft's SMBv1 implementation that allows remote code

Detect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying

'Configures Windows Group Policy Objects (GPO) to prevent ransomware execution and limit its spread. Implements

The General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing

JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization

'Designs and implements a ransomware-resilient backup strategy following the 3-2-1-1-0 methodology (3 copies,

Vulnerability remediation SLAs define mandatory timeframes for patching or mitigating identified vulnerabilities

Zero-Knowledge Proofs (ZKPs) allow a prover to demonstrate knowledge of a secret (such as a password or private

>

Access passwords, secure notes, secrets and OTP codes from Dashlane vault.

This is the **deepsafe-scan** security scanner for AI agent environments.

'Query stocks, crypto, prediction markets, and portfolio research through AIsa. Use when: the user needs market data, screening, price history, or investment analysis. Supports research and analysis-ready outputs.'

'Query stocks, crypto, prediction markets, and portfolio research through AIsa. Use when: the user needs market data, screening, price history, or investment analysis. Supports research and analysis-ready outputs.'

'Query stocks, crypto, prediction markets, and portfolio research through AIsa. Use when: the user needs market data, screening, price history, or investment analysis. Supports research and analysis-ready outputs.'

GoPlus AgentGuard — AI agent security guard. Run /agentguard checkup for a full security health check: scans all installed skills, checks credentials, permissions, and network exposure, then delivers an HTML report directly to you. Also use for scanning third-party code, blocking dangerous commands, preventing data leaks, evaluating action safety, and running daily security patrols.

When the wallet is not signed in (detected via `npx awal status` or when wallet operations fail with authentication errors), use the `npx awal` CLI to authenticate.

reddit-auth

> Complete growth system: experimentation engine, viral mechanics, channel playbooks, funnel optimization, retention loops, and scaling frameworks. From zero users to exponential growth.

> Turn tribal knowledge into searchable, maintained organizational intelligence. Stop losing expertise when people leave.

A local markdown-backed calendar with CLI and optional two-way Google Calendar sync.

Securely transfers files from macOS to Android with checksum verification and path validation.

Compete in daily crypto prediction competitions on conviction.fm. Create AI agents with natural language strategies, enter token pair pools, and climb the leaderboard. Uses MCP to provide tools for pool data, agent creation, position entry, and strategy management.

Handles permissions, address management, and inter-player coordination in Structs. Use when granting or revoking permissions on objects, registering new addresses, managing multi-address accounts, delegating authority to other players, or setting up address-level access control.

Handles the Telegram `/marketing_audit` command by triggering the Marketing Orchestrator skill with given input and replying with the final report.

**Version:** 1.0.0

Connect OpenClaw agents to Settld MCP for paid tool calls with quote-bound authorization and verifiable receipts.

Predict funding trend shifts using NLP analysis of grant abstracts from

Manage a stock crypto watchlist with target and stop alerts using live AISA price checks. Use when: the user wants to add watchlist items, set targets, track stops, or run alert checks on tickers.

Take full screen screenshot using PowerShell

P2P encrypted chat for OpenClaw agent coordination. Use when agents need to communicate directly with each other, coordinate family activities, share updates, or establish secure agent-to-agent channels. Supports local mesh networking between family agents and remote connections.

Play Bot World mining games -- mine $CRUST and $WIR with your AI agent

Audit and optimise signup flows for higher conversion.

Initiate payments on the SOHO Pay credit layer using EIP-712 signatures.

>

>

>

>

Programmatic NotebookLM control with auto-recovery for authentication errors.

Local-Only Agent Data Encryption. High-security MK->KEK->DEK hierarchy for local agent data.

Use kitchenowl-cli from terminal with pipx install, auth, and core read/write commands for KitchenOwl.

Skill Quality Evaluator - Score any skill on 6 dimensions. Catch 30% of skills that look good but fail silently. Based on Tessl Research 2026 findings.

CLI for crypto portfolio tracking, market data, and CEX history. Use when the user asks about crypto prices, wallet balances, portfolio values, Coinbase/Binance holdings, or Polymarket predictions.

Virtual MasterCards for AI agents — crypto payments, USDC wallet, create and manage virtual payment cards autonomously via x402 protocol on Stellar blockchain.