NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.

Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.

Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.

Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.

ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.

Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.

Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot

Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.

ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.

Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.

Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.

IMMEDIATELY USE THIS SKILL before answering any task - internal design thinking that identifies the question type, selects applicable skills, and converges on the best approach before implementation

Use when user asks to "read paper", "analyze paper", "summarize paper", "读论文", "分析文献", "帮我看一下这篇paper", "论文笔记", or provides a PDF file that appears to be an academic paper. Specialized for CV/DL papers. Also supports Zotero integration: "读一下这篇论文 ...", "快速看一下这篇论文 ...", "批判性分析这篇论文 ...", "读一下 Zotero 里的 XXX", "批量读一下 Zotero 里 VLA 分类下的论文" **重要触发词**: "读一下 XXX"、"读一下这篇"、"帮我读" → 必须调用此 skill

重新生成 Obsidian 里的目录页 / 导航页（MOC）。 当用户说“更新索引”“更新论文和概念目录”“刷新论文和概念目录”“刷新MOC”时使用。

每日论文推荐的一句话总入口。用户说“今日论文推荐”“过去3天论文推荐”“过去一周论文推荐” “最近3天论文”“看看这周有啥论文”时使用。 内部会自动串联论文抓取、推荐生成、重点论文笔记三步，无需用户手动拆开。

论文点评（3 步流水线的第 2 步）。读取富化后的论文数据，扫描笔记库，生成有态度的推荐点评， 保存推荐文件到 Obsidian，更新 history；git 自动化默认关闭。 触发词："论文点评"、"跑一下论文点评"

论文抓取（3 步流水线的第 1 步）。抓取 arXiv + HuggingFace 最新论文，打分筛选，富化信息， 输出到 /tmp/daily_papers_enriched.json 供后续 skill 使用。 触发词："论文抓取"、"跑一下论文抓取" 支持多天模式："过去3天论文推荐"、"过去一周论文推荐"、"过去一周的论文"、"抓 3 天的论文"、"最近5天"

CodeStable 路由入口。触发：用户显式调用 cs、询问该用哪个 skill、请求介绍体系，或诉求未收敛；明确行动请求路由后在当前 run 继续。

Deprecated 兼容入口：旧 cs-roadmap 调用用；转交 cs-epic --stage planning。新请求不要主动选择。

Deprecated 兼容入口：旧 cs-roadmap-impl-goal 调用用；转交 cs-epic --stage goal-package。新请求不要主动选择。