全部能力

Identify security vulnerabilities through SAST, DAST, penetration testing, and dependency scanning. Use for security test, vulnerability scanning, OWASP, SQL injection, XSS, CSRF, and penetration testing.

Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement. Use when: authentication implementation, authorization logic, payment processing, user data handling, API endpoint creation, file upload handling, database queries, external API integration. Skip when: read-only operations on public data, internal development tooling, static documentation, styling changes.

Runtime security monitor for active OpenClaw skills. Watches file access, network calls, and shell commands.

Create, read, and manage calendar events and reminders using EventKit and EventKitUI. Use when adding events to the user's calendar, creating reminders,…

Microsoft 365 tenant administration for Global Administrators. Automate M365 tenant setup, Office 365 admin tasks, Azure AD user management, Exchange Online…

通过原始 ADB 命令控制 Android 设备。用于设备/模拟器发现、USB 或 Wi-Fi 连接、应用启动/强制停止、点击/滑动/按键事件/文本输入等操作。

Integrate Apple Music playback, catalog search, and Now Playing metadata using MusicKit and MediaPlayer. Use when adding music search, Apple Music subscription…

将生成的 CLI 发布到 printing-press-library 仓库

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.…

Skill for working with the BlueHammer vulnerability proof-of-concept repository, covering build, usage, and code patterns.

Expert in Supabase backend development with authentication and database patterns

Integrate Apple Pay payments and Wallet passes using PassKit. Use when adding Apple Pay buttons, creating payment requests, handling payment authorization,…

从目录中浏览并安装适用于热门 API 的预构建 Go CLI

Build with Aurora DSQL — manage schemas, execute queries, handle migrations, diagnose query plans, and develop applications with a serverless, distributed SQL…

实现安全 API 设计模式，包括认证、授权、输入验证、速率限制以及针对常见 API 漏洞的防护

Teaches the Higher-Order Component (HOC) pattern for logic reuse. Use when you need to share cross-cutting concerns like authentication, logging, or data…

当用户想要创建、优化或审核 API 介绍/概览页面时。当用户提到"API 页面"、"API 落地页"、"/api…"时也适用。

Monday integration. Manage project management data, records, and workflows. Use when the user wants to interact with Monday data.

飞书多维表格（Bitable/Base）操作。底层使用 base/v3 新 API，支持视图完整配置写入、 记录 upsert、记录修改历史、角色 CRUD、高级权限开关、数据聚合查询等。 当用户请求"创建多维表格"、"操作数据表"、"添加记录"、"查询记录"、"管理字段"、 "多维表格"、"base"、"bitable"、"数据表"、"视图排序"、"视图过滤"、"视图分组"、 "角色"、"role"、"高级权限"、"advperm"、"数据聚合"、"data query"、 "复制多维表格"时使用。

项目状态仪表盘 — 未解决的问题、近期提交、活跃分支/工作树、内存状态和暂存区。当用户请求状态报告时使用，…