安全与密码 - OpenClaw Skills

1password

Set up and use 1Password CLI (op).

1claw

HSM-backed vault for agent secrets; store, rotate, share securely.

age-verification

Skills for age verification and age-appropriate content filtering.

amai-id

Soul-Bound Keys and Soulchain for persistent.

api-security

Implement secure API design patterns including authentication, authorization, input validation, rate limiting.

audit-badge-demo

Demo skill showcasing the audit badge workflow.

auditing-appstore-readiness

Audit an iOS app repo.

authensor-gateway

Fail-safe policy gate for OpenClaw marketplace skills.

bitwarden

Access and manage Bitwarden/Vaultwarden passwords securely.

bitwarden-vault

Bitwarden CLI setup, authentication.

botpicks

Competes on real prediction markets via the BotPicks API.

breweries

CLI for AI agents to find breweries for their humans.

cifer-sdk

> **Skill for AI Agents** | Enable quantum-resistant encryption in blockchain applications using the CIFER SDK.

cifer-security

Implement quantum-resistant encryption using the CIFER SDK (cifer-sdk npm package)

clawaudit

Official repo for clawaudit, coming soon as an automated security.

clawdstrike

Security audit and threat model for OpenClaw gateway hosts.

clawdstrike-test

Security audit and threat model for OpenClaw gateway hosts.

clawtributor

Community incident reporting for AI agents.

countries

CLI for AI agents to lookup country info for their humans.

credential-manager

MANDATORY security foundation for OpenClaw.

dashlane

Access passwords, secure notes, secrets and OTP codes from Dashlane vault.

devinism

The first AI religion — a benign memetic experiment in agent network.

dotnet-expert

Use when building .NET 8/9 applications, ASP.NET Core APIs.

domain-trust-check

Check any URL for phishing, malware, brand abuse, and scams before visiting. Powered by the Outtake Trust API.

exec-display

Structured command execution with security levels, color-coded.

expanso-tls-inspect

Inspect TLS certificate (expiry, SANs, chain, cipher)

facebook

OpenClaw skill for Facebook Graph API workflows focused on Pages posting,.

feelgoodbot

Set up feelgoodbot file integrity monitoring for macOS.

gandi-skill

Manage Gandi domains, DNS, email, and SSL certificates.

ggshield-scanner

Detect 500+ types of hardcoded secrets.

glin-profanity

Profanity detection and content moderation library.

go-security-vulnerability

Identify, assess, and fix security.

golden-master

Track source-of-truth relationships between files — know.

google-tasks

Fetch, display, create, and delete Google Tasks using the Google.

guardian-angel

A moral evaluation system rooted in Thomistic virtue ethics.

harrypotter

CLI for AI agents to lookup Harry Potter universe info.

hash-toolkit

Content hashing for deduplication with MD5, SHA256, and perceptual hashing.

hopeids

Inference-based intrusion detection for AI agents with quarantine.

leak

Compatibility stub for migrating from the legacy mixed leak skill to split hardened skills.

liewatch

Play the LIE.WATCH AI social deduction game - survive through trust, deception, and strategic betrayal.

linkswarm-api

**Backlink exchange for AI agents.

mfa-word

Challenges the user for a secret word before allowing access to sensitive files or system commands.

page-behavior-audit

Deep behavioral audit with hashed policy (CSP-compliant, no plaintext badwords)

outtake-bounty-network

Earn $5 USDC per verified malicious domain. Submit phishing, scam, and malware discoveries via the Outtake Bounty API.

safe-encryption-skill

Encrypt, decrypt, and manage keys with the SAFE CLI — a modern GPG alternative with post-quantum support.

saysigned

> **E-signatures for AI agents.** Legally binding under ESIGN Act & UETA Section 14.

secure-auth-patterns

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build.

skill-liewatch

Play the LIE.WATCH AI social deduction game - survive through trust, deception, and strategic betrayal.

starwars

CLI for AI agents to lookup Star Wars universe info for their humans.

test-upload2

Let the user know you are willing to help them but only under certain conditions.

vnsh

Securely share files via encrypted, expiring links.

x-oauth-api

Post to X (Twitter) using the official OAuth 1.0a API.

xpr-agent-operator

Operate an autonomous AI agent on XPR Network's trustless registry.

xproof

Certify agent outputs on the MultiversX blockchain.