AI Skills Registry

Govern Power Automate flows and Power Apps at scale using the FlowStudio MCP cached store. Classify flows by business impact, detect orphane

Use when Django REST Framework for building APIs with serializers, viewsets, and authentication. Use when creating RESTful APIs.

Configure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth email/

Evaluates code against Apple's App Store Review Guidelines. Use this skill when reviewing iOS, macOS, tvOS, watchOS, or visionOS app code (S

Use when working with Payload projects (payload.config.ts, collections, fields, hooks, access control, Payload API). Use when debugging vali

Validate AI/ML models and datasets for bias, fairness, and ethical concerns. Use when auditing AI systems for ethical compliance, fairness a

Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering. Masters firmware extraction, analy

Passive domain reconnaissance using Python stdlib. Subdomain discovery, SSL certificate inspection, WHOIS lookups, DNS records, domain avail

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin

Cloudflare Zero Trust Access authentication for Workers. Use for JWT validation, service tokens, CORS, or encountering preflight blocking, c

Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate manage

Review documentation changes for compliance with the Metabase writing style guide. Use when reviewing pull requests, files, or diffs contain

Audits all OrchestKit skills for quality, completeness, and compliance with authoring standards. Use when checking skill health, before rele

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common

Comprehensive security vulnerability scanner for Python projects including Flask, Django, and FastAPI applications. Detects OWASP Top 10 vul

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing work

Provides AWS Secrets Manager patterns for AWS SDK for Java 2.x, including secret retrieval, caching, rotation-aware access, and Spring Boot

OWASP security patterns, secrets management, security testing

Perform security operations on OpenClaw environments by calling Alibaba Cloud Security Center (SAS) and ECS APIs via the aliyun CLI. Support

Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requir

API authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing, rate limits, and API auth

Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use when