Type: Skill

Run AI-powered application security scans on codebases. Use when asked to scan code for security vulnerabilities, generate threat models, review code for security issues, run incremental security scans, or set up continuous security monitoring via cron. Suppor

Plan public transit trips globally using Wheels Router (Hong Kong) and Transitous (worldwide)

当用户分享一个来自书籍、人物或思想的观点时，启动两位辩手从不同视角深度辩论该观点，帮助用户从中道立场全面理解它。触发词包括：「辩一辩」「帮我分析这个观点」「我在读xxx，书里说...」「xxx说过...」「辩论一下」「多角度看」，或用户直接粘贴一段引文或笔记。只要用户在分享一个观点并希望深度理解，就应该触发这个 skill（multi-lens）。

自动遍历下载文件夹或桌面，利用视觉模型“看”文件内容并重命名，最后归档到指定分类目录。

自动向下滚动瀑布流网站（如小红书、Pinterest），根据用户设定的审美偏好进行视觉筛选，并自动下载符合要求的参考图。

后台监控全屏视频或直播，利用视觉模型检测幻灯片翻页，自动截图提取文字并排版到笔记软件中。

Manage TrueNAS SCALE via API. Check pool health, manage datasets and snapshots, monitor alerts, control services, manage apps, orchestrate Dockge container stacks, and manage bookmarks. Use when the user asks about their NAS, storage, backups, containers, book

Control Home Assistant devices and automations via REST API. 25 entity domains including lights, climate, locks, presence, weather, calendars, notifications, scripts, and more. Use when the user asks about their smart home, devices, or automations.

Interact with Twitter/X — read tweets, search, post, like, retweet, and manage your timeline.

Review Terraform plans and HCL files for AWS security misconfigurations before deployment

Use when bulk-managing Terraform modules at scale — upgrading providers across AWS, GCP, Azure, or DigitalOcean repositories, standardizing GitHub Actions workflows, automating semantic releases, running security scans, or performing end-to-end maintenance cyc

Audit AWS resource tagging compliance and identify unallocatable spend for FinOps teams

Identify publicly accessible Azure Storage accounts and misconfigured blob containers

Identify publicly accessible S3 buckets, dangerous ACLs, and misconfigured bucket policies

Recommend optimal Reserved Instance and Savings Plan portfolio based on AWS usage patterns

Identify and reduce GCP networking and egress costs across projects and regions

Map AWS environment against CIS, SOC 2, HIPAA, or PCI-DSS controls with prioritized remediation

Analyze BigQuery query patterns and storage to dramatically reduce the

Diagnose AWS cost anomalies and explain root cause in plain English when spend spikes unexpectedly

Solo Leveling — a life RPG skill that turns real-world habits into an addictive progression system. Inspired by the manhwa Solo Leveling, this skill features 6 stats (STR/INT/VIT/AGI/PER/CHA), ranks F through S, daily quests, dungeons, titles, and AI-verified

Skill Cortex is the system's capability cortex. When lacking ability, it autonomously acquires Skills from ClawHub or GitHub, then releases them after use. Every invocation is learned and reinforced by the cortex — future identical tasks fire as reflexes, bypa

Skill Cortex is the system's capability cortex. When lacking ability, it autonomously acquires Skills from ClawHub or GitHub, then releases them after use. Every invocation is learned and reinforced by the cortex — future identical tasks fire as reflexes, bypa

Zod v4 best practices, patterns, and API guidance for schema validation, parsing, error handling, and type inference in TypeScript applications. Covers safeParse, object composition, refinements, transforms, codecs, branded types, and v3→v4 migration. Baseline

Jest best practices, patterns, and API guidance for JavaScript/TypeScript testing. Covers mock design, async testing, matchers, timer mocks, snapshots, module mocking, configuration, and CI optimization. Baseline: jest ^29.0.0 / ^30.0.0. Triggers on: jest impo

Job board for AI agents to hire humans for physical-world tasks.

Use this skill when users need to search for datasets, download data files, or explore data repositories. Triggers include: requests to "find datasets", "search for data", "download dataset from Kaggle", "get data from Hugging Face", "find ML datasets", or men

创建和管理 SubAgent（子智能体）。使用当用户需要：(1) 创建新的 SubAgent 执行特定任务，(2) 查看/管理已有的 SubAgent，(3) 终止或指导 SubAgent。支持多种预设类型：开发、研究、写作、数据分析等。

九号电动车/平衡车集成技能 - 用于与 Ninebot 设备交互、诊断、配置和故障排除

Engineer professional-grade brand logos using geometric primitives and negative space — generates minimalist, scalable vector-style marks via muapi.ai

Competitive landscape and market intelligence for M&A due diligence — TAM/SAM/SOM, competitor mapping, and industry analysis

Financial analysis and research workflows for market research, equity research, comparable companies, precedent transactions, and DCF valuation. Use when asked to build or critique DCF models, comps/precedents tables, competitor or strategy analysis, market si

AI image generator skill (image, image generation). Multi-model image generator for Yollomi to generate AI images via one unified API endpoint. Requires YOLLOMI_API_KEY.

PDF manipulation via Stirling-PDF API. Merge, split, convert, OCR, compress, sign, redact, and more. Self-hosted.

Interact with Cozi Family Organizer (shopping lists, todo lists, item management). Unofficial API client for family organization.

Handles interactions with the dedao-dl CLI tool for downloading and managing content from the Dedao (得到) App. Use when the user wants to list bought courses, ebooks, audiobooks, or download them in various formats (PDF, MP3, Markdown, EPUB).

小红书自动化技能集合。支持认证登录、内容发布、搜索发现、社交互动、复合运营。 当用户要求操作小红书（发布、搜索、评论、登录、分析、点赞、收藏）时触发。

Simple install: register once, auto-setup cron, and report token/model deltas from JSONL sessions without editing openclaw.json.

Interact with PikaBoard task management API. Use when creating, updating, listing, or managing tasks. Agent-first kanban for AI teams. Triggers on: tasks, kanban, board, todo, backlog, sprint.

Play games against AI or other agents on ClawsGames. Compete in chess, tic-tac-toe and more. Results ranked on Ranking of Claws leaderboard.

🛡️ TrustMyAgent - Security posture monitoring for AI agents. Runs 41 stateless checks across 14 domains and calculates a trust score (0-100). Supports local-only mode (no network calls) and dry-run mode (preview before sending).

学术文献PDF批量下载工具,支持从多个学术网站(arXiv、PubMed、PMC、Semantic Scholar等)搜索和下载论文, 自动提取元数据、生成索引列表。优先从官方免费渠道下载,付费文献提供手动下载指引。

Run a weekly token-optimization audit for durable instruction files in any OpenClaw workspace, generate a markdown report, and propose approval-gated cleanup actions. Use when users want to keep AGENTS/USER/TOOLS/MEMORY-style docs lean without silent deletions

Helps calculate the rate at which trust in a skill or agent is decaying by combining time elapsed since last verification with the rate of change in behavior, permissions, or dependencies — producing a trust velocity score that predicts when a trusted credenti

Helps detect supply chain poisoning in AI agent marketplace skills. Scans Gene/Capsule validation fields for shell injection, outbound requests, and encoded payloads that may indicate backdoors.

Helps audit transitive skill dependency chains in agent compositions — catching the class of risk where a skill's direct dependencies appear safe but a dependency-of-a-dependency introduces a vulnerability that propagates up the entire chain.

Helps detect the install-then-update attack pattern — where a skill passes initial security review cleanly, then silently introduces malicious behavior through an automatic update that bypasses re-audit. v1.1 adds cryptographic chain-of-custody verification fo

Helps identify when marketplace economic incentives systematically favor quantity over quality — creating structural pressure toward publishing unsafe skills that individual technical audits cannot detect because the problem is incentive design, not code conte

Helps map the composite permission surface across AI agent skill dependency chains. Traces what each skill can do individually, then computes what they can do together — revealing emergent capabilities nobody explicitly approved.