发现优质的 AI Agent 技能

- Full outage, data loss risk, security exploit in progress - Action: immediate containment + hotfix lane, comms every 15 min

Security scanner for third-party OpenClaw skills. Analyses source code, dependencies, and metadata before installation using tree-sitter AST parsing and regex pattern matching.

Static analysis security scanner for OpenClaw skills. Analyses code before installation to detect common threats.

Security audit for your OpenClaw deployment powered by Trent AppSec Advisor.

Automated code review for GitHub pull requests. Analyzes diffs for security issues, error handling gaps, style problems, and test coverage.

> Quick reference checklists for security audits. Use alongside vulnerability-scanner principles.

Advanced vulnerability analysis for OWASP 2025, supply chain security, attack surface mapping, and risk prioritization.

Expert in threat modeling methodologies, security architecture review, and risk assessment using STRIDE, PASTA, attack trees, and security requirement extraction.

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities.

⚠️ **Privacy & Security Notice:** - This skill sends color data to an external service (colormind.io) - The API uses **unencrypted HTTP** (HTTPS has a self-signed certificate) - When using `image_to_palette.sh`, derived color data from your images is sent externally - **Do not use with sensitive/private images** unless you accept this data sharing

来自 openclaw/skills 技能

**One layer in a multi-layer security stack for OpenClaw agents.**