Skill UI

Enables an OpenClaw agent to place managed outbound phone calls for alerts, briefings, reminders, and urgent notifications without Twilio, combining REST-triggered dialing with transcription and TTS so conversations feel like chat.

This framework provides a systematic methodology for engineering virality, moving beyond luck to design shareable products, ideas, and content. It utilizes the STEPPS model (Social Currency, Triggers, Emotion, Public, Practical Value, Stories) to systematically increase the likelihood of organic sharing and word-of-mouth marketing. Use it when optimizing for shareability or predicting user adoption patterns.

This framework outlines the 'Hook Model' (Trigger, Action, Variable Reward, Investment) for building deeply engaging, habit-forming product loops. It guides designers in optimizing user retention, understanding behavioral psychology, and structuring product features to move users from deliberate usage to automatic, routine behavior. Use it for onboarding, feature design, and improving long-term user stickiness.

This methodology converts verbose, natural language system instructions into an atomic, structured-label format (e.g., trigger:, action:). By structuring rules, it bypasses the limitations of natural language processing, ensuring LLMs allocate full attention to every constraint, thereby maximizing compliance, improving reliability, and reducing token usage.

Guides GTM leaders through expansion and retention systems that reduce churn, automate customer success, and optimize net revenue retention via usage triggers, health scoring, and land-and-expand playbooks.

This skill automatically drafts professional email replies for multiple corporate accounts. It handles various communication intents, including intro acceptances, scheduling follow-ups, acknowledgments, and positive replies. It operates strictly in draft-only mode, ensuring drafts are ready for user review but never sent automatically. It is ideal for automating responses triggered by new emails, webhooks, or action item follow-ups.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.

This tool deploys decoy canary files in critical system directories to provide early warning against ransomware attacks. Utilizing Python's watchdog library, it monitors for any read, modify, rename, or delete operations on these decoy files. Detection triggers immediate alerts via multiple channels (Email, Slack, Syslog), helping security teams identify and respond to malicious activity before full data encryption occurs. It serves as a crucial detection layer in a layered security defense.

Build automated pipelines to respond to AWS GuardDuty findings. This solution uses EventBridge to detect high-severity threats and triggers a Lambda function. The function automatically quarantines compromised resources (e.g., EC2 instances), creates forensic EBS snapshots, and sends detailed notifications via SNS, drastically reducing Mean Time To Respond (MTTR). Ideal for proactive cloud security posture management.

This method targets fileless and trigger-based persistence mechanisms on Windows hosts by monitoring WMI event subscriptions (MITRE T1546.003). It hunts for suspicious activity involving WMI Event Filters, Consumers, and Bindings, which are critical indicators during advanced threat hunting and incident response when standard persistence locations are clean.

This guide details the deployment of deception technologies, including canary files and honeypot shares, to detect ransomware activity at its earliest stages. It outlines configuring file integrity monitoring (FIM) and using specialized tokens to trigger alerts when ransomware attempts encryption or performs lateral movement, significantly enhancing security posture beyond standard EDR.

This skill guides the deployment of canary tokens and honeytokens across critical systems, such as fake AWS credentials, DNS records, and document beacons. These decoys are designed to trigger immediate alerts via webhooks when accessed by attackers, serving as a powerful early warning system for breach detection and intrusion detection.