OpenClaw AI 技能

扫描本机是否被 axios 1.14.1/0.30.4 供应链木马（通过 plain-crypto-js@4.2.1 植入）感染，快速定位文件、进程、定时任务等入侵痕迹。

Audits local network infrastructure, identifies active hosts, and scans the gateway/public IP for exposed ports and vulnerabilities.

perform 12-Factor App compliance analysis on a codebase

当任务涉及添加、升级、移除或审查软件依赖时使用，代理在更改 package.json 或锁文件前会执行基于 Socket 的供应链安全检查。优先使用 MCP depscore，否则使用捆绑的 Socket CLI 辅助脚本。当风险信号较弱时停止并建议替代方案或人工审查。

Provides dependency management strategies for Golang projects including go.mod management, installing/upgrading packages, semantic versioning, Minimal

WhiteSource（现 Mend）集成技能，用于管理软件开源组件的安全性和合规性。支持数据管理、记录操作和工作流自动化。通过 Membrane CLI 代理请求并管理认证，实现漏洞识别和修复流程。适用于需要与 WhiteSource 数据交互的场景。

Strategic market intelligence with competitive analysis, market sizing, and opportunity identification.

Cardano原生的AI服务，可根据自然语言描述自动生成生产就绪的正则表达式，支持命名捕获组、测试用例和边界情况警告，覆盖Python、JavaScript、Go、Java等语言。

Scan AI-generated code for hallucinated packages, stale APIs, security anti-patterns, and over-engineering. Use when: (1) reviewing PRs with AI-genera

Security analysis and vulnerability detection. Scans code for security issues, checks dependencies, and provides remediation advice.

SonarQube 集成工具，用于代码质量管理和安全工作流自动化。支持25+编程语言的代码缺陷、漏洞和代码气味检测，可通过 Membrane CLI 与 SonarQube 项目、质量门、问题、规则和质量配置进行交互。

通过 Membrane 代理与 Checkmarx API 对接，实现扫描任务管理、数据记录与自动化工作流，一键触发代码安全检测并获取结果。

接口 (free, no auth required)

接口 (free, no auth)

Free SEC EDGAR API alternative to Bloomberg ($25K-$100K/yr). Get XBRL financial data, quarterly & annual filings, insider transactions, peer benchmark

generate text or images into ready-to-share videos with this skill. Works with MP4, MOV, JPG, PNG files up to 200MB. TikTok creators use it for genera

edit raw video footage into edited video clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators and marketers use i

Advanced handling for agent-changelog requests (history, diffs, restores, rollbacks, snapshots) using git and OpenClaw scripts with clear, user-focuse

Generate structured, blame-free incident postmortem reports from logs, timeline data, and incident metadata. Produces root cause analysis, impact asse

AI开发者发布助手 — 自动化 GitHub 项目发布全流程。 采集竞品信息 → AI生成项目封面图 → 一键发布公众号深度分析文。 当用户需要"发布开源项目"、"写发布公告"、"做产品介绍"、"生成项目封面"时激活。