Total 54,069 skills, Security & Compliance has 2122 skills
Showing 12 of 2122 skills
Run Checkov to scan Infrastructure as Code for misconfigurations. Supports Terraform, CloudFormation, Kubernetes, Helm, ARM, Ansible, and Dockerfiles.
Margin operations: Reg T initial margin, maintenance margin, portfolio margin, margin call procedures, liquidation waterfall, SBLOC, and margin risk management.
Red-team security review for code changes. Use when reviewing pending git changes, branch diffs, or new features for security vulnerabilities, permission gaps, injection risks, and attack vectors. Acts as a pen-tester analyzing code.
Performs requirement checks and compliance diagnostics for excellent electronic books. Activate with keywords such as "Excellent Electronic Books", "Compliance with Electronic Bookkeeping Law", "Requirement Confirmation for Electronic Books", "Preparation for Tax Audits", "Conditions for the 750,000 Yen Deduction", "Do the Books Meet Requirements?", or "e-bookkeeping compliance".
Design security testing solutions, including OWASP Top 10, penetration testing, and vulnerability scanning. Default output is Markdown, and Excel/CSV/JSON output is available upon request. Use for security testing or security-testing.
Proactively detect and respond to advanced cyber threats using forensic tools and analytics in enterprise environments.
Security scanner for OpenClaw skill packages. Scans skills for malicious code, evasion techniques, prompt injection, and misaligned behavior BEFORE installation. Use to audit any skill from ClawHub or local directories.
Java and Spring Boot security patterns. Covers Spring Security, dependency auditing, secure coding practices, and OWASP for Java ecosystem. USE WHEN: user works with "Java", "Spring Boot", "Spring Security", asks about "Java vulnerabilities", "Maven security", "Gradle security", "Java injection", "Java authentication" DO NOT USE FOR: general OWASP concepts - use `owasp` or `owasp-top-10` instead, Node.js/Python security - use language-specific skills
Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security incidents like failed logins.
Privacy review and testing: evaluate PII handling, data flows, tracking inventory, consent mechanisms, storage practices, and data leakage risks with browser-based validation against GDPR, CCPA, and industry best practices.
Guideline for designing, implementing, and verifying secure APIs following OWASP API Security Top 10 (2023) best practices. Use when the user wants to: (1) review API code or design for security vulnerabilities, (2) design a secure REST, GraphQL, or gRPC API architecture, (3) implement API authentication and authorization (OAuth2, JWT, API keys, mTLS), (4) configure rate limiting, input validation, or CORS, (5) audit API endpoints for BOLA, BFLA, or mass assignment vulnerabilities, (6) create API security checklists or verification plans, (7) fix API security bugs or harden existing APIs, (8) set up API security testing (OWASP ZAP, Schemathesis, Burp Suite), or (9) handle any API security concern including SSRF prevention, resource consumption limits, business flow protection, API inventory management, and secure third-party API consumption.
Check an Amazon product for compliance and safety requirements before and after listing. Covers required certifications, labeling and warning requirements, restricted-substance rules, documentation Amazon may demand, and category-specific safety rules. Use when a user asks about product compliance, safety requirements, certifications, required labels or warnings, a compliance document request from Amazon, or whether a product is allowed. Trigger phrases: "product compliance", "safety requirements", "certifications", "compliance documents", "required labels", "is this product allowed". Works with zero tools.