Security & Testing Agent Skills

Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.

Verify code for security issues including hardcoded secrets, input validation, error exposure, and dependency vulnerabilities.

Seed reproducible local Langfuse data in ClickHouse and Postgres.

Use when about to claim work is done / verified / working — empirical verification is required, not model-based confidence.

Captures visible macOS app windows and verifies UI changes against explicitly approved baselines.

Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compiles with Clang.

Demonstrate self-hosted CI runner abuse (CICD-SEC-7, insecure system configuration) during an authorized assessment — abusing a…

Hunting skill for cache poison vulnerabilities.

Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management.

Senior ISMS Audit Expert for internal and external information security management system auditing.

Generates unit tests, integration tests, and E2E tests for React/Next.js applications.

Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies.

Senior Risk Management specialist for medical device companies implementing ISO 14971 risk management throughout product lifecycle.

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

Use when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when…

Secure SerpApi API keys and prevent credit abuse.

Audits Linux servers for configuration vulnerabilities, inspects exposed services, and applies safe, reversible hardening measures.

Set up an end-to-end test suite in any repo, following practices that make e2e a reliable per-PR gate: real flows over bypass, layered…