Skill UI

Secure OpenClaw deployments with preflight hardening checks, CI/CD guardrails, container runtime restrictions, and post-deploy verification. This skill provides a repeatable security workflow for build pipelines, container runtime lockdown, production promotion gates, data protection, and incident-ready rollback patterns.

Implement policy as code using OPA, Kyverno, and Sentinel to automate compliance enforcement in CI/CD pipelines. Define security rules for infrastructure and Kubernetes resources, preventing violations before production deployment. Ideal for DevSecOps teams ensuring consistent governance across cloud environments.

This skill runs a read-only audit to assess production deployment readiness. It reviews release artifacts, migration changes, configuration gaps, and potential risks (including rollback feasibility and launch blockers) before actual deployment or merging. It helps reduce coordination failures and ensures a safe release cycle.

This skill autonomously deep-scans entire codebases line-by-line to identify security vulnerabilities, performance bottlenecks, and architectural flaws. It systematically refactors code to meet enterprise-grade production standards, including adding logging, monitoring, CI/CD pipelines, and security hardening. Ideal for preparing software for deployment.

This skill certifies deployed services by verifying source code, CI status, deployment identity, database migrations, runtime health, readiness, and critical routes. It ensures a release is truly production-ready beyond just a green pipeline. Use it before declaring a release to prevent false positives.

Configure Prometheus and Grafana for comprehensive metrics collection, visualization, and alerting. This skill covers Docker and Kubernetes deployment, PromQL query writing for analysis, and setting up alerting rules for system performance monitoring. Ideal for DevOps engineers managing infrastructure observability.

An end-to-end workflow for building robust, production-ready Python backend APIs. This guide covers all stages, including project scaffolding, SQLAlchemy database integration, Pydantic validation, implementing JWT/OAuth2 authentication, comprehensive error handling, unit testing, and Docker deployment for modern microservices.

This comprehensive workflow guides the development of modern, scalable full-stack applications using Next.js 14+, React, and TypeScript. It covers all phases, from project setup and component architecture to advanced data fetching (Server Components, React Query), styling with Tailwind CSS, robust testing (E2E via Playwright), and deployment optimization. Ideal for building complex, production-grade web interfaces.

This skill provides a comprehensive security hardening checklist for reviewing scoped architectures. It covers network security, authentication, API safety, data protection, secrets management, supply chain dependencies, and incident response protocols. It ensures compliance with standards like GDPR, PCI-DSS, and HIPAA where applicable. Use this to validate controls against evidence-based practices before production deployment.

This skill provides comprehensive guidance on implementing observability patterns for service mesh deployments like Istio and Linkerd. It covers metrics, tracing, logging, and dashboard configuration using Prometheus, Grafana, and Jaeger to monitor latency, errors, and traffic effectively.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

Squirrel is an advanced, full-cycle AI coding skill designed to guide software development from concept to production. It automatically detects the current project state (greenfield, in-progress, or mature) and adapts an 8-phase engineering pipeline. This comprehensive workflow covers planning, building, rigorous testing, bug hunting, code polishing, documentation, and deployment readiness, ensuring high-quality, maintainable results.