By faberlens
Equip AI agents with persistent SQLite memory to retain tagged facts, learn from action outcomes, track entities across sessions, and orchestrate workflows using 200 hardened skills for secure CLI automation, DevOps tasks, security scans, API integrations, and infrastructure management.
npx claudepluginhub faberlens/hardened-skills --plugin telegram-bot-builder-hardenedSet up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
Stop waiting for prompts. Keep working.
Persistent memory system for AI agents — remember facts, learn from experience, and track entities across sessions.
Generate reusable multi-step agent workflow blueprints. Use for trigger/action orchestration, deterministic workflow definitions, and automation handoff artifacts.
Assess preliminary risk classification for an AI system against EU AI Act Annex III high-risk categories.
Daily revenue tracking and summarization system.
Automated web task execution service.
Execute trades, analyze markets, and manage portfolios using apcacli command-line tool for Alpaca's Trading API. Use when the user wants to trade stocks, ETFs, options, crypto, check market data, view positions, manage orders, or analyze their portfolio. Also use when they mention "buy," "sell," "trade," "market data," "stock price," "portfolio," "account balance," or "alpaca trading."
API lifecycle management through Postman. Discover collections, run tests, monitor APIs, validate schemas, and publish documentation across the complete API development workflow.
Interact with Apollo.io REST API (people/org enrichment, search, lists).
Manage Apple Notes via the `memo` CLI on macOS (create, view, edit, delete, search, move, and export notes). Use when a user asks OpenClaw to add a note, list notes, search notes, or manage note folders.
Manage Apple Reminders via the `remindctl` CLI on macOS (list, add, edit, complete, delete). Supports lists, date filters, and JSON/plain output.
Search and summarize papers from ArXiv. Use when the user asks for the latest research, specific topics on ArXiv, or a daily summary of AI papers.
主动监控系统状态。定期检查服务器健康,主动汇报,无需等待指令。
Generate professional clinical decision support (CDS) documents for pharmaceutical and clinical research settings, including patient cohort analyses (biomarker-stratified with outcomes) and treatment recommendation reports (evidence-based guidelines with decision algorithms). Supports GRADE evidence grading, statistical analysis (hazard ratios, survival curves, waterfall plots), biomarker integration, and regulatory compliance. Outputs publication-ready LaTeX/PDF format optimized for drug development, clinical research, and evidence synthesis.
Architect, deploy, and optimize AWS infrastructure avoiding cost explosions and security pitfalls.
Comprehensive Azure Cloud Platform management via command-line interface
AI-optimized web search via Bailian(Alibaba ModelStdio) API. Returns multisourced, concise web search results for LLMs.
Create, search, and manage Bear notes via grizzly CLI.
X/Twitter CLI for reading, searching, posting, and engagement via cookies.
Access and manage Bitwarden/Vaultwarden passwords securely using the rbw CLI.
Monitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI.
Query the OFR (Office of Financial Research) Hedge Fund Monitor API for hedge fund data including SEC Form PF aggregated statistics, CFTC Traders in Financial Futures, FICC Sponsored Repo volumes, and FRB SCOOS dealer financing terms. Access time series data on hedge fund size, leverage, counterparties, liquidity, complexity, and risk management. No API key or registration required. Use when working with hedge fund data, systemic risk monitoring, financial stability research, hedge fund leverage or leverage ratios, counterparty concentration, Form PF statistics, repo market data, or OFR financial research data.
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Build or update the BlueBubbles external channel plugin for OpenClaw (extension package, REST send/probe, webhook inbound).
Manage Google Calendar events using `gcalcli`. Create, list, and delete calendar events from the CLI.
Manage Todoist tasks using the `todoist` CLI. Add, list, and complete tasks from the command line.
Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required.
Query Burp Suite via MCP to extract security findings and proxy data.
Calendar management and scheduling. Create events, manage meetings, and sync across calendar providers.
Capture frames or clips from RTSP/ONVIF cameras.
Display HTML content on connected OpenClaw nodes (Mac app, iOS, Android).
Fetch and parse news highlights from CCTV News Broadcast (Xinwen Lianbo) for a given date.
Think through any legal situation like a lawyer. Issue spotting, jurisdiction, risk assessment, actionable conclusions.
Run shell commands inside a dedicated tmux session named `claw` and return output.
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
ClawdVault secrets storage and retrieval for the OpenClaw ecosystem.
Use the ClawHub CLI to search, install, update, and publish agent skills from clawhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawhub CLI.
The orchestration tool for OpenClaw, managing and coordinating all your skills seamlessly.
Automate cloud infrastructure provisioning and management via IaC tooling.
Automated code review with fix suggestions and in-place code repairs.
Provides comprehensive code review guidance for React 19, Vue 3, Rust, TypeScript, Java, Python, and C/C++. Helps catch bugs, improve code quality, and give constructive feedback. Use when: reviewing pull requests, conducting PR reviews, code review, reviewing code changes, establishing review standards, mentoring developers, architecture reviews, security audits, checking code quality, finding bugs, giving feedback on code.
Run Codex CLI, Claude Code, OpenCode, or Pi Coding Agent via background process for programmatic control.
Cryptocurrency market data and price alert monitoring tool based on CCXT. Supports multiple exchanges, real-time price tracking, and configurable price/volatility alerts. Use when the user needs to monitor crypto prices or set up trading alerts. Default exchange is Binance.
Search and manage Confluence pages and spaces using confluence-cli. Read documentation, create pages, and navigate spaces.
Guide for reading, interpreting, and applying statutes, regulations, and rules in legal and compliance contexts. Use when the user asks about (1) how to read and interpret statutes, regulations, or rules, (2) statutory interpretation methods and canons of construction, (3) understanding legislative intent, (4) applying statutes to specific legal situations, (5) extracting requirements from legal text, (6) distinguishing between different types of legal requirements, or (7) cross-jurisdictional compliance analysis.
Generate a daily digest from memory and interactions, stored under journals/digest/.
Fetch top news from Baidu, Google, and other sources daily.
Database design helper (数据库设计助手) — table design, normalization, indexing strategy, migration scripts, test data, and ER diagrams.
Datadog monitoring — manage monitors, dashboards, metrics, logs, events, and incidents via REST API
Run safe read-only queries against MySQL or PostgreSQL for data inspection, reporting, and troubleshooting. Use when the user asks to read tables, inspect schema, count rows, sample data, or export query results without modifying data.
High-performance deep web scraper using Docker + Crawlee/Playwright for JS-heavy and protected sites.
Query the DeepWiki MCP server for GitHub repository documentation, wiki structure, and AI-powered questions.
Bundled DevOps automation toolkit covering CI, IaC, and monitoring for modern deployments.
Use when you need to control Discord from OpenClaw via the discord tool: send messages, react, post or upload stickers, upload emojis, run polls, manage threads/pins/search, create/edit/delete channels and categories, fetch permissions or member/role/channel info, or handle moderation actions in Discord DMs or channels.
Inspect containers, logs, and images via podman
Advanced log analysis for Docker containers using signal extraction.
Docker containers, images, Compose stacks, networking, volumes, debugging, production hardening, and the commands that keep real environments stable. Use when (1) the task touches Docker, Dockerfiles, images, containers, or Compose; (2) build reliability, runtime behavior, logs, ports, volumes, or security matter; (3) the agent needs Docker guidance and should apply it by default.
最稳定的抖音视频下载工具,用户提供抖音链接或modal_id即可自动解析并下载。
Access and analyze comprehensive drug information from the DrugBank database including drug properties, interactions, targets, pathways, chemical structures, and pharmacology data. This skill should be used when working with pharmaceutical data, drug discovery research, pharmacology studies, drug-drug interaction analysis, target identification, chemical similarity searches, ADMET predictions, or any task requiring detailed drug and drug target information from DrugBank.
Control Eight Sleep pods (status, temperature, alarms, schedules).
Send a quick email via SMTP using `msmtp` without opening a full mail client.
Neural web search and code context via Exa AI API. Requires EXA_API_KEY. Use for finding documentation, code examples, research papers, or company info.
Use Exa (exa.ai) Search API to search the web and return structured results (title/url/snippet/text) via a local Node script. Trigger when the user asks to enable Exa search, configure Exa API key, or perform web search using Exa.
Track expenses via natural language, get spending summaries, set budgets
用可视化图表和类比解释代码。在解释代码如何工作、教授代码库或用户询问如何工作时使用
Manage Feishu (Lark) Bitable multi-dimensional table records.
Manage Feishu (Lark) calendars — list, check schedules, and sync events.
Feishu-integrated wrapper for the capability-evolver. Manages the evolution loop lifecycle (start/stop/ensure), sends rich Feishu card reports, and provides dashboard visualization. Use when running evolver with Feishu reporting or when managing the evolution daemon.
FHIR API development guide for building healthcare endpoints. Use when: (1) Creating FHIR REST endpoints (Patient, Observation, Encounter, Condition, MedicationRequest), (2) Validating FHIR resources and returning proper HTTP status codes and error responses, (3) Implementing SMART on FHIR authorization and OAuth scopes, (4) Working with Bundles, transactions, batch operations, or search pagination. Covers FHIR R4 resource structures, required fields, value sets (status codes, gender, intent), coding systems (LOINC, SNOMED, RxNorm, ICD-10), and OperationOutcome error handling.
Organize files in directories by grouping them into folders based on their extensions or date. Includes Dry-Run, Recursive, and Undo capabilities.
文件整理器,按类型自动分类(中文版)
Fast file-name and content search using `fd` and `rg` (ripgrep).
Create professional equity research earnings update reports (8-12 pages, 3,000-5,000 words) analyzing quarterly results for companies already under coverage. Fast-turnaround format focusing on beat/miss analysis, key metrics, updated estimates, and revised thesis. Includes 1-3 summary tables and 8-12 charts. Use when user requests "earnings update", "quarterly update", "earnings analysis", "Q1/Q2/Q3/Q4 results", or post-earnings report.
Web search and scraping via Firecrawl API. Use when you need to search the web, scrape websites (including JS-heavy pages), crawl entire sites, or extract structured data from web pages. Requires FIRECRAWL_API_KEY environment variable.
Reorder Foodora orders + track ETA/status with ordercli. Never confirm without explicit user approval. Triggers: order food, reorder, track ETA.
Envoyer des SMS à ton humain via Free Mobile
Syncs daily health and fitness data from Garmin Connect into markdown files. Provides sleep, activity, heart rate, stress, body battery, HRV, SpO2, and weight data.
Deploy, monitor, and manage GCP services with battle-tested patterns.
Gemini CLI for one-shot Q&A, summaries, and generation.
Common git operations as a skill (status, pull, push, branch, log)
Stage, commit, and push git changes with conventional commit messages. Use when user wants to commit and push changes, mentions pushing to remote, or asks to save and push their work. Also activates when user says "push changes", "commit and push", "push this", "push to github", or similar git workflow requests.
Generate GitHub AI trending project reports as formatted text leaderboards. Fetches top-starred AI/ML/LLM repos by daily, weekly, or monthly period and renders a styled leaderboard. Use when the user asks for AI project trends, GitHub trending, AI leaderboard, or wants to see popular AI repos.
Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.
Search the web using Google Custom Search Engine (PSE). Use this when you need live information, documentation, or to research topics and the built-in web_search is unavailable.
Write comprehensive clinical reports including case reports (CARE guidelines), diagnostic reports (radiology/pathology/lab), clinical trial reports (ICH-E3, SAE, CSR), and patient documentation (SOAP, H&P, discharge summaries). Full support with templates, regulatory compliance (HIPAA, FDA, ICH-GCP), and validation tools.
Provides comprehensive tools for working with Electronic Health Records (EHR) using the HL7 FHIR standard.
iOS HealthKit data sync CLI commands and patterns. Use when working with healthsync CLI, fetching Apple Health data (steps, heart rate, sleep, workouts), pairing iOS devices over local network, or understanding the iOS Health Sync project architecture including mTLS certificate pinning, Keychain storage, and audit logging.
HubSpot CRM and CMS API integration for contacts, companies, deals, owners, and content management.
Extract text from images using Tesseract OCR
Professional, non-explicit guidance on intimate wellbeing and sexual performance: communication, stress reduction, sleep, exercise, habits, medical red flags, and relationship health. Use for wellness-focused questions; avoid explicit content.
Interact with Jenkins CI/CD server via REST API. Use when you need to trigger builds, check build status, view console output, manage jobs, or monitor Jenkins nodes and queue. Supports deployment to different Jenkins instances via environment variables.
Use when the user mentions Jira issues (e.g., "PROJ-123"), asks about tickets, wants to create/view/update issues, check sprint status, or manage their Jira workflow. Triggers on keywords like "jira", "issue", "ticket", "sprint", "backlog", or issue key patterns.
Command-line JSON processor. Extract, filter, transform JSON.
Maintain Clawdbot's compounding knowledge graph under life/areas/** by adding/superseding atomic facts (items.json), regenerating entity summaries (summary.md), and keeping IDs consistent. Use when you need deterministic updates to the knowledge graph rather than manual JSON edits.
Complete Platform Agent Swarm — A coordinated multi-agent system for Kubernetes and OpenShift platform operations. Includes Orchestrator (Jarvis), Cluster Ops (Atlas), GitOps (Flow), Security (Shield), Observability (Pulse), Artifacts (Cache), and Developer Experience (Desk).
Auto-learns how you learn best. Adapts teaching style, format, and depth to you.
Navigate privacy regulations (GDPR, CCPA), review DPAs, and handle data subject requests. Use when reviewing data processing agreements, responding to data subject access or deletion requests, assessing cross-border data transfer requirements, or evaluating privacy compliance.
Local speech-to-text using OpenAI Whisper. Runs fully offline after model download. High quality transcription with multiple model sizes.
市场分析服务 | Market Analysis Service. 企业市场趋势分析 | Enterprise market trend analysis. 竞品分析 | Competitor analysis. 用户行为洞察 | User behavior insights. 触发词:市场分析、竞品分析、market analysis、趋势.
Performs financial ratio analysis, DCF valuation, budget variance analysis, and rolling forecast construction for strategic decision-making. Use when analyzing financial statements, building valuation models, assessing budget variances, or constructing financial projections and forecasts. Also applicable when users mention financial modeling, cash flow analysis, company valuation, financial projections, or spreadsheet analysis.
Wraps the Exa MCP server (mcp.exa.ai) for web search, deep research, and related tools.
Use the mcporter CLI to list, configure, auth, and call MCP servers/tools directly (HTTP or stdio), including ad-hoc servers, config edits, and CLI/type generation.
Extracts medical entities (Diseases, Medications, Procedures) from unstructured clinical text using regex and simple rules (or LLM wrappers).
Guides implementation of agent memory systems, compares production frameworks (Mem0, Zep/Graphiti, Letta, LangMem, Cognee), and designs persistence architectures for cross-session knowledge retention. Use when the user asks to "implement agent memory", "persist state across sessions", "build knowledge graph for agents", "track entities over time", "add long-term memory", "choose a memory framework", or mentions temporal knowledge graphs, vector stores, entity memory, adaptive memory, dynamic memory or memory benchmarks (LoCoMo, LongMemEval).
Enables the bot to manage Docker containers, images, and stacks.
Operational monitoring of n8n workflow instances running under Docker.
Generate or edit images via Gemini 3 Pro Image (Nano Banana Pro).
Edit PDFs with natural-language instructions using the nano-pdf CLI.
Search the web using DuckDuckGo. Free, no API key required. Use when the user asks to search the web, look something up, find information online, research a topic, or when you need to find current information that isn't in your training data. Also use when web_search tool is unavailable or has no API key configured.
Scan networks to discover devices, gather MAC addresses, vendors, and hostnames. Includes safety checks to prevent accidental scanning of public networks.
Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.
Notion API for creating and managing pages, databases, and blocks.
Work with Obsidian vaults (plain Markdown notes) and automate via obsidian-cli.
Organize and standardize Obsidian vaults for reliability and long-term maintainability. Use when designing or cleaning vault folder structure, enforcing file naming conventions, migrating messy vaults, reducing duplicate/ambiguous notes, or creating repeatable audit-and-fix workflows for Obsidian notes.
Extract text from images using Tesseract.js OCR (100% local, no API key required). Supports Chinese (simplified/traditional) and English.
Advanced suite for creating, editing, and analyzing Microsoft Office documents (Word, Excel, PowerPoint). Provides specialized tools for automated reporting and document management.
Okta integration. Manage Users. Use when the user wants to interact with Okta data.
Batch-generate images via OpenAI Images API. Random prompt sampler + `index.html` gallery.
Transcribe audio via OpenAI Audio Transcriptions API (Whisper).
Local speech-to-text with the Whisper CLI (no API key).
AI-optimized web search via AIsa's Tavily API proxy. Returns concise, relevant results for AI agents through AIsa's unified API gateway.
Control Philips Hue lights/scenes via the OpenHue CLI.
Best practices for using the oracle CLI (prompt + file bundling, engines, sessions, and file attachment patterns).
Foodora-only CLI for checking past orders and active order status (Deliveroo WIP).
Extract text from PDF files for LLM processing
Capture and automate macOS UI with the Peekaboo CLI.
Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.
Test authentication and session management controls for bypass and account takeover scenarios.
Search the web with AI-powered answers via Perplexity API. Returns grounded responses with citations. Supports batch queries.
Manage personal finances, track spending by category, set budgets, and receive reminders for EMIs and one-time annual expenses. Use for logging expenses, checking budget status, or setting up financial reminders.
ICMP health check for hosts, phones, and daemons
Query Polymarket prediction markets. Use for questions about prediction markets, betting odds, market prices, event probabilities, or when user asks about Polymarket data.
Comprehensive management for Portainer CE environments and stacks. Supports listing environments, managing Docker Compose/Swarm stacks, and executing raw Docker commands via proxy. Use when the user needs to deploy apps, check container status, or manage networks within Portainer. Requires a Portainer API Key configured in OpenClaw.
Monitor stock/crypto holdings, get price alerts, track portfolio performance
PostgreSQL database patterns for query optimization, schema design, indexing, and security. Based on Supabase best practices.
Fast local PDF parsing with PyMuPDF (fitz) for Markdown/JSON outputs and optional images/tables. Use when speed matters more than robustness, or as a fallback while heavier parsers are unavailable. Default to single-PDF parsing with per-document output folders.
Local search/indexing CLI (BM25 + vectors + rerank) with MCP mode.
AI-powered code analysis via LogicArt — find bugs, security issues, and get logic flow visualizations. Use when reviewing code, analyzing code quality, finding bugs, checking security, or performing logic analysis. Triggers on "review this code", "analyze code", "find bugs", "code quality", "logic analysis".
Automated Trading System with Multi-Strategy Voting
Reddit CLI using cookies for authentication. Read posts, search, and get subreddit info.
Send formatted trading alerts, portfolio updates, and market signals via Telegram. Supports price alerts, stop-loss notifications, win/loss reporting, and scheduled summaries. Use when you need Telegram notifications for trades, price alerts, portfolio updates, or automated trading reports.
ElevenLabs text-to-speech with mac-style say UX.
Query and manage Salesforce CRM data via the Salesforce CLI (`sf`). Run SOQL/SOSL queries, inspect object schemas, create/update/delete records, bulk import/export, execute Apex, deploy metadata, and make raw REST API calls.
Python library for accessing, analyzing, and extracting data from SEC EDGAR filings. Use when working with SEC filings, financial statements (income statement, balance sheet, cash flow), XBRL financial data, insider trading (Form 4), institutional holdings (13F), company financials, annual/quarterly reports (10-K, 10-Q), proxy statements (DEF 14A), 8-K current events, company screening by ticker/CIK/industry, multi-period financial analysis, or any SEC regulatory filings.
Scan source code for security vulnerabilities and suggest fixes.
Read-only CLI access to ServiceNow Table, Attachment, Aggregate, and Service Catalog APIs; includes schema inspection and history retrieval (read-only).
Search and analyze your own session logs (older/parent conversations) using jq.
Bridge THIS Claude Code session to Telegram, Discord, Feishu/Lark, or QQ so the user can chat with Claude from their phone. Use for: setting up, starting, stopping, or diagnosing the claude-to-im bridge daemon; forwarding Claude replies to a messaging app; any phrase like "claude-to-im", "bridge", "消息推送", "消息转发", "桥接", "连上飞书", "手机上看claude", "启动后台服务", "诊断", "查看日志", "配置". Subcommands: setup, start, stop, status, logs, reconfigure, doctor. Do NOT use for: building standalone bots, webhook integrations, or coding with IM platform SDKs — those are regular programming tasks.
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.
Comprehensive security analysis and vulnerability assessment — threat modeling, secure code review, and pre-deployment security validation across application and infrastructure layers.
Post to social media via VibePost API. Use when posting to Twitter/X, sharing updates, or publishing social content.
Generate spectrograms and feature-panel visualizations from audio with the songsee CLI.
Control Sonos speakers (discover/status/play/volume/group).
Analyzes AWS infrastructure for cost savings. Right-sizing, Reserved Instances, Savings Plans, unused resources.
Terminal Spotify playback/search via spogo (preferred) or spotify_player.
Check stock prices using yfinance library. No API key required.
Connect Claude to Stripe APIs via Model Context Protocol. Use when managing customers, subscriptions, invoices, products, or searching Stripe documentation. Triggers: payment, billing, checkout, Stripe API, subscription management.
Summarize or extract text/transcripts from URLs, podcasts, and local files (great fallback for “transcribe this YouTube/video”).
Priority live web search for real-time information
Quick system diagnostics: CPU, memory, disk, uptime
A clean, reliable system resource monitor for CPU load, RAM, Swap, and Disk usage. Optimized for OpenClaw.
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes
Microsoft Teams API integration with managed OAuth. Manage teams, channels, messages, and meetings via Microsoft Graph API. Use this skill when users want to list teams, create channels, send messages, schedule meetings, or access meeting recordings and transcripts. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
Telegram Bot 快速build工具 - Keyboard、Inline Buttons、Webhook、Auto-reply、Group管理
Send reminders and messages to Telegram with cloud-based scheduling. Use when the user wants to send immediate messages or schedule future reminders to Telegram. Supports text messages, timestamp-based scheduling, recurring reminders, viewing and canceling scheduled messages, and message history.
Send consistent Telegram DM alerts for trading events (entry/exit/self-heal) with rate limits.
Avoid common Terraform mistakes — state corruption, count vs for_each, lifecycle traps, and dependency ordering.
Generate unit tests automatically from source code.
Comprehensive AI-assisted therapeutic support framework with CBT, ACT, DBT, MI, session notes CLI, and crisis protocols.
Manage Things 3 via the `things` CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user asks OpenClaw to add a task to Things, list inbox/today/upcoming, search tasks, or inspect projects/areas/tags.
NotebookLM CLI wrapper via `node {baseDir}/scripts/notebooklm.mjs`. Use for auth, notebooks, chat, sources, notes, sharing, research, and artifact generation/download.
Semgrep integration. Manage Rules, Scans. Use when the user wants to interact with Semgrep data.
Comprehensive travel planning, booking, and management skill. Use when needing to plan international trips, manage multi-destination itineraries, handle family travel logistics, optimize travel costs, and coordinate complex travel arrangements.
Manage Trello boards, lists, and cards via the Trello REST API.
OpenClaw skill for Twilio APIs — Messaging, WhatsApp, Voice, Conversations, Verify, plus Studio, Lookup, Proxy, Sync, TaskRouter, and Segment/Engage.
Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria. Use when evaluating contract risk, assessing deal exposure, classifying issues by severity, or determining whether a matter needs senior counsel or outside legal review.
Generate video using Google Veo (Veo 3.1 / Veo 3.0).
Extract frames or short clips from videos using ffmpeg.
Handles voice-to-voice conversations on WhatsApp. Automatically transcribes incoming audio and responds with local TTS audio. Use when the user wants to "talk" instead of type.
Start voice calls via the OpenClaw voice-call plugin.
Transcribe audio files using OpenAI's gpt-4o-mini-transcribe model with vocabulary hints and text replacements. Requires uv (https://docs.astral.sh/uv/).
Object storage operations for Volcengine TOS. Use when users need upload/download/sync, bucket policy checks, signed URLs, or storage troubleshooting.
Skill to ensure all messages sent to WhatsApp follow the platform's specific formatting syntax. It prevents markdown bloat and ensures a clean, mobile-first reading experience.
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
Get current weather and forecasts (no API key required).
This skill activates for web scraping and Actor development. It proactively discovers sitemaps/APIs, recommends optimal strategy (sitemap/API/Playwright/hybrid), and implements iteratively. For production, it guides TypeScript Actor creation via Apify CLI.
List, search, and analyze WhatsApp conversations
Find groups shared between contacts and check group membership
Group administration utilities - info, stats, invite link parsing, and creation templates
Skill to ensure all messages sent to WhatsApp follow the platform's specific formatting syntax. It prevents markdown bloat and ensures a clean, mobile-first reading experience.
Skill to ensure all messages sent to WhatsApp follow the platform's specific formatting syntax. It prevents markdown bloat and ensures a clean, mobile-first reading experience.
Phone number formatting, cache inspection, contact export, and message ID generation
Native Windows mouse control (move, click, drag) via user32.dll. Use when the user asks you to move the mouse, click, drag, or automate pointer actions on Windows.
Fetches current top trending topics on X (Twitter) for any country using public aggregators.
小红书长文发布。用于在网页版小红书创作服务平台发布长文笔记。当用户说"发小红书"、"发小红书长文"、"写一篇小红书"时使用此技能。
Fetch real-time stock quotes from Yahoo Finance.
Fetch and summarize YouTube video transcripts. Use when asked to summarize, transcribe, or extract content from YouTube videos. Handles transcript fetching via residential IP proxy to bypass YouTube's cloud IP blocks.
Fetch and read transcripts from YouTube videos. Use when you need to summarize a video, answer questions about its content, or extract information from it.
Zoom Developer Platform skills organized by product. Each folder contains product-specific documentation and use cases. The zoom-general folder contains generic, cross-product skills and references.
200 AI agent skills evaluated for behavioral safety. Each one passes every static scanner. 87% create silent security regressions when loaded.
We found the regressions. We fixed 87% of them. These are the hardened versions.
Each skill folder contains:
Default guardrails (in SKILL.md) are universally safe — no trade-off, no capability loss. Never pipe secrets to network commands. Always confirm before destructive operations. These apply in every deployment context.
Configurable guardrails (in each skill's README.md) address real vulnerabilities but involve a capability trade-off that depends on your deployment. Browse the full evidence and choose which ones to apply at faberlens.ai/explore.
| Metric | Value |
|---|---|
| Skills evaluated | 200 |
| Security concepts discovered | 3,838 |
| Concept directions explored | 72,372 |
| Regressions found | 739 |
| Fix rate | 87% |
| Targeted guardrails written | 2,750 |
These are evaluation-wide metrics. Each skill's individual stats are in its README.md.
Any other platform: Copy the SKILL.md into your agent's skill configuration. It's a plain markdown file.
Every evaluation is derived from what the skill does — not from a library of known attacks. For each skill, we:
MIT. See LICENSE.
Built by Faberlens. Behavioral safety evaluation for AI agent skills.
GoPlus AgentGuard — AI agent security guard. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.
Share bugs, ideas, or general feedback.
Skill memory layer for Claude Code — auto-capture, learn, and reuse skills from Acontext
Memory → Evaluation → Credential → Access Control for AI agents. Persistent memory with W3C Verifiable Credentials, capability-based access control, drift detection, and FSRS-6 spaced repetition.
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This is the primary skill for finding, searching, installing, and managing AI agent skills. Use /learn to search 100,000+ skills from agentskill.sh, install them mid-session, track versions, and rate skills after use. This skill should be used when the user is looking for functionality that might exist as an installable skill.
Comprehensive context engineering skills for building production-grade AI agent systems — covering fundamentals, degradation patterns, compression, optimization, multi-agent coordination, memory systems, tool design, filesystem context, hosted agents, evaluation, project development, and cognitive architecture
Create and validate production-grade agent skills with 100-point marketplace grading