George Carlin BS Detector. Auto-activates on: "BS", "bullshit", "jargon", "marketing speak", "what does this mean", "sounds fake", "corporate speak", "buzzwords", "overpromising", "skeptical about"

Use when creating animations that reassure users, reduce anxiety, or communicate protection and security.

Compliance expert for SOC 2, GDPR, HIPAA, PCI-DSS, and security frameworks

Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities.

[DROIDS-INTERNAL] Security review checklist for code analysis. Only activate when invoked by droids plugin agents (code-reviewer) or /droids:* commands. Do NOT auto-activate in regular conversations.

Assigns Linear issue points using Luca's complexity-only scale. Use when the user asks to grade, estimate, score, point, size, triage, compare, normalize, or audit Linear issues by complexity, especially when they mention points, estimates, acceptance criteria, issue sizing, or avoiding time estimates.

Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.

Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.

Google Workspace Admin Reports: Query admin activity and usage reports via the gws CLI. Use when the user asks to "check admin logs", "audit activity", "workspace usage report", or any admin reporting operation.

Understand how a team organizes work in Linear. Helps PMs onboarding to new teams learn conventions, see examples, and know what questions to ask.

Use for data migration between systems / schemas / regions. Plan + execute + verify + rollback. Memory captures the run for audit.

ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.

Pins or unpins a memory to protect it from pruning during dream consolidation. Use when a memory is critical and must never be removed, such as architecture decisions, security constraints, or immutable team conventions.

Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.

Security audit expert for OWASP Top 10, CVE analysis, code review, and penetration testing methodology

Four common skill archetypes with structure templates - CLI reference, methodology, safety/security, and orchestration. Use when creating new skills to select appropriate structure.

Identify, categorize, and prioritize technical debt. Trigger with "tech debt", "technical debt audit", "what should we refactor", "code health", or when the user asks about code quality, refactoring priorities, or maintenance backlog.

Index of vulnerability detection pattern skills. Routes to core patterns (universal) and language-specific patterns for security scanning.

Checks whether a set of options is well-constructed. Use this whenever the user presents options or choices to evaluate.

Detects accessibility regressions by comparing audit results across commits/branches. Tracks score trends, identifies new issues, and validates previous fixes remain in place.

Identify and clean up stale git branches locally and on remotes with safe, reversible steps. Use when asked to prune, list, or delete merged/old branches or audit branch hygiene.

Bub's canonical workflow for inbox/calendar triage escalation filtering (known contacts, money/security risk, high-signal AI changes).

Audit and clean up ~/code directory structure, archiving stale repos, fixing folder names, and removing dead worktrees

Review code for bugs, security vulnerabilities, performance issues, and maintainability. Trigger with "review this code", "check this PR", "look at this diff", "is this code safe?", or when the user shares code and asks for feedback.

Maps accessibility audit results to legal/regulatory frameworks — Section 508, EN 301 549, EAA, ADA, AODA. Generates VPAT 2.5 conformance tables and identifies non-WCAG requirements.

Audit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.

Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.

Creates response procedures for security incidents with containment steps, communication templates, and evidence collection. Use for "incident response", "security playbook", "breach response", or "IR plan".

Creates repeatable security review checklist for PRs with required checks, common pitfalls, and automated gating. Use for "security review", "PR checklist", "code review", or "security gates".

A general skill for performing security reviews and auditing codebases for vulnerabilities. ALWAYS run this at the end of each task.

A general skill for performing security reviews and auditing codebases for vulnerabilities. ALWAYS run this at the end of each task.

Conduct a comprehensive accessibility audit against WCAG guidelines with severity ratings and remediation steps.

Use to audit test quality with SRE scrutiny - identifies weak tests, missing cases, and creates task docs for improvements

Analyze spending patterns and find savings. 50/30/20 rule, subscription audit, debt payoff strategies, emergency fund roadmap.

Code review specialist focused on patterns, bugs, security, and performance

Act as an IT administrator using Google Workspace. Use when the user asks to "manage workspace users", "check admin reports", "audit activity", or needs IT administration workflows.

Audit and fix invalid PatternFly import paths across packages. Use when imports fail, modules are unresolved, or after upgrading PatternFly versions.

Security audits and secure coding. Use for vulnerability detection or auth implementation.

A general skill for performing security reviews and auditing codebases for vulnerabilities. ALWAYS run this at the end of each task.

A general skill for performing security reviews and auditing codebases for vulnerabilities. ALWAYS run this at the end of each task.

# splunk-security

Audit your OpenClaw setup for token waste, context bloat, and cost optimization opportunities

Review code for quality, security vulnerabilities, and best practices compliance

Audit dependencies for updates and vulnerabilities

Remove unneeded Composer packages and assets to improve boot time, memory, and security surface

Check code for common security vulnerabilities

Enforce web security and avoid security vulnerabilities

Used to run an audit via our auditing service.

Used to run an audit of a codebase.

Used to run an audit of a codebase.

# Secret Scanner