Skill UI

Enables Claude to run a security-focused code review via the security-agent plugin, flagging SQL injection, XSS, authentication flaws, and unsafe dependencies with severity, location, impact, and remediation guidance for requested audits.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

This comprehensive checklist is designed for ensuring flawless deployments to Vercel's production environment. It guides users through every critical stage: pre-deployment verification (environment variables, testing), secure promotion and API deployment, domain configuration, post-deployment health checks, and immediate rollback procedures. Use this guide whenever preparing for a major launch or implementing go-live procedures to minimize production risks.

Systematic Windows privilege escalation guide covering enumeration, credential harvesting, service abuse, token impersonation, kernel exploits and configuration flaws to elevate from standard user to Administrator/SYSTEM during pentests.

Assess web apps for client-side injection flaws, covering stored, reflected, and DOM XSS plus HTML injection, demonstrate session hijacking payloads, and guide validation and sanitization checks.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

Guides installing, deploying, configuring, and using the OpenClaw personal AI assistant with diagnostics, Gateway and Channel setup, Agent creation, automation, and troubleshooting commands and practices.

This skill provides a comprehensive audit framework and optimization strategy for local SEO, specifically tailored for law firms, attorneys, and legal/professional service providers. It focuses on maximizing local visibility by optimizing Google Business Profiles (GBP), establishing critical E-E-A-T signals, and ensuring directory consistency. Use this when aiming to improve ranking in local Google packs, maps, and specialized legal directories.

A specialized assistant designed to act as a senior software architect. It critiques code generated by AI tools or rapidly prototyped code, moving beyond simple syntax checks. The auditor identifies deep structural flaws, technical debt, architectural weaknesses, and production risks (e.g., security vulnerabilities, poor error handling, tight coupling) that make code fragile or unsuitable for deployment.