全部能力

Implement comprehensive cloud security across AWS, Azure, and GCP with IAM, encryption, network security, compliance, and threat detection.

Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to production-grade,…

Generate Docker sandbox configurations for safely running untrusted OpenClaw skills. Isolates filesystem, network,

Sets up security scanning for secrets and dependency vulnerabilities. Use when adding security infrastructure to a project.

Step-by-step incident response for OpenClaw security breaches. Guides you through containment, investigation,

Implement automated secrets rotation for API keys, credentials, certificates, and encryption keys. Use when managing secrets lifecycle, compliance requirements, or security hardening.

Build with Firebase Cloud Storage - file uploads, downloads, and secure access. Use when: uploading images/files, generating download URLs, implementing file pickers, setting up storage security rules, or troubleshooting storage/unauthorized, cors errors, quota exceeded, or upload failed errors. Prevents 9 documented errors.

Verify technical accuracy of JavaScript concept pages by checking code examples, MDN/ECMAScript compliance, and external resources to prevent misinformation

排查和调试 AWS Clean Rooms 协作问题，涉及 IAM 角色、S3 存储桶策略、KMS 密钥、Lake Formation 权限和 CloudWatch…

KMS 技能的最小化冒烟测试。验证认证和只读密钥列表路径。

Structured OSINT investigations — people lookup, company intel, investment due diligence, entity/threat intel, domain recon, organization research using public…

SLS 日志查询技能的极简冒烟测试。验证 SDK 认证和单次有界查询。

最小化验证爬取与技能工作流的就绪状态。

阿里云 DNS CLI 技能的最小化冒烟测试。验证 aliyun-cli 认证和 describe-subdomain 流程。

Create serverless functions on Azure with triggers, bindings, authentication, and monitoring. Use for event-driven computing without managing infrastructure.

Find, evaluate, and maintain high-quality external resources for JavaScript concept documentation, including auditing for broken and outdated links

Security-focused code review checklist and automated scanning patterns. Use when reviewing pull requests for security issues, auditing authentication/authorization code, checking for OWASP Top 10 vulnerabilities, or validating input sanitization. Covers SQL injection prevention, XSS protection, CSRF tokens, authentication flow review, secrets detection, dependency vulnerability scanning, and secure coding patterns for Python (FastAPI) and React. Does NOT cover deployment security (use docker-best-practices) or incident handling (use incident-response).

通过 OpenAPI/SDK 管理阿里云内容安全（Green）。当用户需要内容安全资源和策略操作时随时使用，包括…

通过 OpenAPI 管理阿里云 RDS Supabase（RDS AI Service 2025-05-07）。用于创建、启动/停止/重启实例、重置密码等操作。

通过 OpenAPI/SDK 管理阿里云密钥管理服务（KMS）。当用户需要密钥生命周期/资源操作、策略/配置变更等时使用。