Security
4,732 results
- Webapp To Capacitorcap-goPlans and executes turning an existing web app, PWA, or SPA into a store-ready Capacitor iOS and Android app. Use when the user wants to wrap a website or PWA as a mobile app, worries about Apple guideline 4.2 minimum functionality or thin-WebView rejection, needs a phased migration plan (static build, Capacitor shell, native UX, plugins, permissions, offline, account deletion, in-app purchase…
- Dependency Auditoruseai-proAudit npm, pip, and Go dependencies that OpenClaw skills try to install. Checks for known vulnerabilities, typosquatting, and malicious packages.
- Flywheel DiscordDicklesworthstoneSecurity rules and behavioral guidelines for operating as Clawdstein in The Agent Flywheel Hub Discord server. This is a PUBLIC community serverâapply strict data isolation.
- Permission Auditoruseai-proAnalyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privileged skills and suggests minimal permission sets.
- Skill Auditoruseai-proComprehensive security auditor for OpenClaw skills. Checks for typosquatting, dangerous permissions, prompt injection, supply chain risks, and data exfiltration patterns — before you install anything.
- Skill Guarduseai-proRuntime security monitor for active OpenClaw skills. Watches file access, network calls, and shell commands. Flags anomalous behavior and enforces permission boundaries.
- Skill Vetteruseai-proSecurity-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources.
- Decision RecordsFrancesco VadicamoCreates, supersedes and validates decision records (ADRs) against the convention a collection already follows, instead of imposing a published one. Use when the user wants to record a decision, write an ADR, supersede an existing decision, audit or lint a decisions folder, check that an ADR index is in sync, or asks "why did we decide X".
- Nextjs SEOlaguaguNext.js App Router SEO implementation and audits. Use for metadata and social images, sitemap/robots, canonicals and localization, structured data, Core Web Vitals evidence, AI crawler policy or search-indexing diagnosis. Not for general Next.js feature work unrelated to SEO.
- ReviewArchcoreThe pre-merge review of a branch in a project that records its specs, decisions, and rules in .archcore/. Run this first for 'review my branch', 'review the changes before merge', or 'review before merge': it checks the changed code against the project's recorded canon and the changed documents against the code, and reports which side is wrong — spec-wrong or code-wrong; on the default branch it…
- Blackhat GoplurigridGo-based security techniques from "Black Hat Go" extended with macOS, Cloud, Mobile, IoT, Supply Chain, API, Web3, AI/ML, Red Team, ATT&CK, and LLM chapters. 186 techniques, 36 tools, 33 defenses across 37 chapters. Includes adversarial bisimulation games with Ungar (order-dependent) and join-semilattice structures. AAIF-compatible multiplayer agent games for human-agent security exercises.
- Burp SuiteplurigridWeb application security testing with Burp Suite.
- Supabase Audit Auth ConfigyoanbernabeuAnalyze Supabase authentication configuration for security weaknesses and misconfigurations.
- Supabase Audit Auth SignupyoanbernabeuTest if user signup is open and identify potential abuse vectors in the registration process.
- Supabase Audit Auth UsersyoanbernabeuTest for user enumeration vulnerabilities through various authentication endpoints.
- Supabase Audit Buckets ListyoanbernabeuList all storage buckets and their configuration to identify the storage attack surface.
- Supabase Audit Buckets PublicyoanbernabeuIdentify storage buckets that are publicly accessible and may contain sensitive data.
- Supabase Audit Buckets ReadyoanbernabeuAttempt to list and read files from storage buckets to verify access controls.
- Supabase Audit FunctionsyoanbernabeuDiscover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
- Supabase Audit RealtimeyoanbernabeuTest Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.
- Supabase Audit RlsyoanbernabeuTest Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.
- Supabase Audit RpcyoanbernabeuList and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
- Supabase Audit Tables ListyoanbernabeuList all tables exposed via the Supabase PostgREST API to identify the attack surface.
- Supabase Audit Tables ReadyoanbernabeuAttempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.