- 📁 examples/
- 📁 references/
- 📄 SKILL.md
This skill should be used when the user asks about compliance frameworks, security controls, control families, document requirements, FedRAMP, NIST 800-53, NIST 800-171, CMMC, STIGs, CCIs, vendor inheritance, compliance campaigns, policy/scope questionnaires, or wants to perform a compliance gap analysis, generate compliance artifacts, map controls across frameworks, run bulk compliance workflows, manage vendor responsibility, scan for STIG compliance, or check what documents are needed for certification. Trigger phrases include "list frameworks", "show controls", "what documents do I need", "compliance check", "control requirements", "gap analysis", "audit my code", "run campaign", "vendor inheritance", "STIG rules", "CCI chain", and "scan compliance".
Automated code review analyzing diffs for test coverage, code quality, architecture conformance, and security. Produces structured findings and optionally creates beads for issues found. Use when user says "review code", "code review", "review my changes", "check this branch", "/code-review", or wants automated quality analysis before merging.
Investigates login and authentication activity on Splunk instances using the _audit index. Use when analyzing user access patterns, session behavior, authentication anomalies, login failures, token usage, API access patterns, or any security-related access questions on a Splunk deployment.
Spawns an auditor sub-agent to verify every factual claim in an incident report against evidence in the repo. Use after drafting or substantially editing a report.
Build, deploy, and manage monday code apps with multi-region, cron, alerts, and security scanning. Use when user says "deploy my app", "push to monday-code", "deploy to monday", "check deployment status", "set environment variables", "push my app", "deploy backend", "deploy frontend", or wants to promote an app version.
- 📁 src/
- 📄 openclaw.plugin.json
- 📄 package.json
- 📄 SKILL.md
AgentLog Auto Logging Skill for OpenClaw agents. Automatically captures agent reasoning, tool calls, and responses, then logs them to the AgentLog MCP server for compliance and audit purposes.
- 📁 code-review/
- 📁 references/
- 📄 code-review.zip
- 📄 SKILL.md
- 📄 使用说明.md
Frontend-focused code review skill for React/TypeScript/Tailwind projects. Analyzes code quality, security vulnerabilities (XSS, CSRF), performance issues, accessibility (WCAG), React best practices, hooks usage, component architecture, responsive design, and SEO. Use when users request code review, want feedback on components, ask about frontend security, performance optimization, or accessibility compliance. Provides actionable feedback with severity levels and fix suggestions.
Build a production-quality Figma component from a frame, screenshot, URL, or description. Binds all values to design tokens, detects sub-components, audits token gaps, wires interaction states, and proposes variants. Ends by suggesting /fig-qa.
- 📁 .github/
- 📁 config/
- 📁 docs/
- 📄 .gitignore
- 📄 AUTHORS.md
- 📄 CHANGELOG.md
Enforces Universal Prompt Security Standard (UPSS) for every prompt interaction — detects and blocks prompt injection, jailbreaks, role confusion, privilege escalation, encoding exploits, and supply-chain tampering before any LLM execution.
- 📄 conflicts.md
- 📄 reference.md
- 📄 SKILL.md
Gebruik deze skill wanneer de gebruiker vraagt over 'API Design Rules', 'ADR', 'REST API standaard', 'API richtlijnen', 'NL GOV API', 'Spectral linter', 'API linter', 'OpenAPI validatie', 'API design', 'REST API naming', 'transport security', 'API signing', 'API encryption', 'geospatial API', 'api-linter', 'problem+json', 'error response format'.
漏洞赏金猎人专项技能包。当用户进行漏洞赏金测试、安全研究、挖洞时自动激活。包含：逻辑漏洞测试方法论、信息泄露检测技巧、WAF绕过策略、历史目标经验库、各技术栈漏洞特征。每次使用后自动学习成长。
Audit docs against repo reality before or after changes.
