Security

Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection with agent-browser.

Core agent-browser usage guide.

Check secret handling, staged changes and push targets, destructive Git operations, Docker image hygiene, and new dependencies before consequential coding…

Audit an Anthropic Cookbook notebook based on a rubric.

Manage Google Security Operations (SecOps) SOAR cases throughout their lifecycle.

Author, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps.

Expert guidance for proactive threat hunting in Google SecOps.

Expert guidance for deep security incident and entity investigations in Google SecOps.

Expert guidance for security alert triage in Google SecOps.

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Detect hardcoded secrets in code or configuration accessible to the target agent.

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

Use to extend an existing agent project with memory, app integration, VPC, multi-agent, migration, model, browser, code interpreter, payments, or resource…

Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.

Scan any agent skill for security risks before you install or use it.

Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security.

The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab.

Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection…

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Django access control and IDOR security review.

GitHub Actions security review for workflow exploitation vulnerabilities.

Finds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump…

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Security code review for vulnerabilities.