Security

Real-time security audit skill scanning for OWASP Top 10 vulnerabilities and infrastructure misconfigurations.

Leverages AI-assisted debugging and multi-agent orchestration to systematically diagnose, resolve, and prevent production issues, reducing Mean Time To Recovery (MTTR).

Manage Apple Notes from the command line to create, view, edit, delete, search, move, and export notes.

Use the Gemini CLI for one-shot Q&A, summaries, and content generation directly from your terminal.

Display HTML content on connected OpenClaw nodes (Mac, iOS, Android) for games, visualizations, dashboards, and interactive demos.

Comprehensive techniques for escalating privileges on compromised Linux and Windows systems, essential for penetration testing and red team operations.

Understand and apply anti-reversing, obfuscation, and protection techniques for software analysis with authorization.

Comprehensive techniques for identifying and exploiting privilege escalation paths on Linux systems, enabling elevation to root access.

Create legally sound employment contracts, offer letters, and HR policy documents following legal best practices.

Comprehensive techniques for attacking Microsoft Active Directory environments, covering reconnaissance, credential harvesting, and privilege escalation.

Derive actionable security requirements from threat models and business context for user stories, test cases, and compliance.

Draft legal documents like privacy policies, terms of service, and disclaimers, ensuring regulatory compliance and clarity.

A comprehensive checklist for planning, executing, and following up on penetration tests, ensuring thorough preparation and effective remediation.

Construct attack trees to visualize threat paths, identify defense gaps, and communicate security risks effectively to stakeholders.

Comprehensive command reference for penetration testing tools, enabling quick lookup during security assessments.

Test for directory traversal vulnerabilities to read arbitrary files on the server, potentially including sensitive configuration files and credentials.

Expert in embedded systems and IoT security, specializing in firmware analysis, reverse engineering, and vulnerability research for various devices.

Analyze frontend code for XSS vulnerabilities, providing detailed reports, fix recommendations, and prevention checklists for React, Vue, Angular, and vanilla JavaScript.

Expert in secure frontend coding practices, specializing in XSS prevention, output sanitization, and client-side security patterns.

Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design for EU personal data processing.

A professional HR subagent for hiring, onboarding/offboarding, PTO, performance, compliant policies, and employee relations. Provides lawful templates.

Comprehensive skill for detecting, exploiting, and remediating Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls for comprehensive security.