Self-hosting OpenClaw on a cloud server can expose a powerful control plane. This skill guides private deployment with SSH tunneling, Podman, token auth, sandboxing, and firewall checks.

Manual image review is slow and inconsistent. This skill compresses image batches, submits them to an MCP moderation service, and summarizes pass, blocked, and failed results.

Smart contract defects can be expensive and hard to reproduce. This skill guides structured Hardhat and Foundry tests, fork tests, fuzzing, gas checks, and coverage.

Security reviews often miss threats when teams rely on informal checklists. This skill gives Claude, Codex, and Claude Code structured STRIDE templates for consistent threat identification.

Teams often struggle to turn threat analysis into clear implementation work. This skill converts threats and business context into traceable requirements, user stories, tests, and compliance mappings.

CI/CD pipelines often expose credentials through logs, state files, and copied configuration. This skill helps teams choose safer secret stores, rotation patterns, and scanning workflows.

Teams need repeatable security scans before code reaches production. This skill guides SAST setup, rule tuning, and CI gate configuration.

Payment systems can expand PCI scope when cardholder data is handled without clear controls. This skill helps Claude, Codex, and Claude Code design safer payment flows with PCI DSS practices.

Teams need consistent mTLS configuration across service meshes and certificate tooling. This skill provides practical templates, checks, and troubleshooting steps for secure service-to-service communication.

Incident teams need clear steps before outages happen. This skill provides structured runbook templates for triage, mitigation, recovery, escalation, and updates.

Authentication code often fails through weak token, session, or role checks. This skill gives practical patterns for secure access control design.

Security teams need a clear way to compare attack paths and defense gaps. This skill structures attack trees, scoring, diagrams, and mitigation priorities.

Breach results are difficult to verify, interpret, and handle without exposing sensitive data. This skill provides a structured workflow for authorized analysis and reporting.

Online investigations can expose researchers through accounts, networks, browser fingerprints, timing, and metadata. This skill provides threat modeling, compartmentation, persona controls, and exposure logging.

Installing unreviewed skills can expose projects to unsafe permissions, hidden instructions, or typosquat risk. This skill provides a structured checklist for manual pre-install security review.

AI skills can contain risky scripts, network calls, or unsafe install behavior. SkillScan checks packages and installed skills through a cloud scanner before use.

RouterOS packet capture setup is hard to remember during network debugging. This skill guides TZSP streaming, pcap saving, and receiver setup.

RouterOS firewall syntax is easy to misorder and duplicate. This skill gives focused guidance for filters, NAT, mangle routing, lists, and DoS rules.

CloudBase apps often fail because auth, database, RLS, and storage rules are easy to misapply. This skill applies CloudBase-specific review checks before users ship or submit code.

Web teams need reliable CloudBase auth flows without stale SDK patterns. This skill guides provider checks, session guards, and Web SDK v3 integration.