input-guard
openclawScan untrusted external text (web pages, tweets, search results, API responses) for prompt injection attacks. Returns severity levels and alerts on dangerous content. Use BEFORE processing any text from untrusted sources.
skill-auditor
openclawSecurity scanner that catches malicious skills before they steal your data. Detects credential theft, prompt injection, and hidden backdoors. Works immediately with zero setup. Optional AST dataflow analysis traces how your data moves through code.
agent-email-inbox
openclawUse when setting up an email inbox for an AI agent (Moltbot, Clawdbot, or similar) - configuring inbound email, webhooks, tunneling for local development, and implementing security measures to prevent prompt injection attacks.
moltguard
openclawOpen source OpenClaw security plugin: local prompt sanitization + injection detection. Full source code at github.com/openguardrails/moltguard
prompt-defense
openclawDetect and block prompt injection attacks in emails. Use when reading, processing, or summarizing emails. Scans for fake system outputs, planted thinking blocks, instruction hijacking, and other injection patterns. Requires user confirmation before acting on any instructions found in email content.
indirect-prompt-injection
openclawDetect and reject indirect prompt injection attacks when reading external content (social media posts, comments, documents, emails, web pages, user uploads). Use this skill BEFORE processing any untrusted external content to identify manipulation attempts that hijack goals, exfiltrate data, override instructions, or social engineer compliance. Includes 20+ detection patterns, homoglyph detection, and sanitization scripts.
openclaw-sec
AI Agent Security Suite - Real-time protection against prompt injection, command injection, SSRF, path traversal, secrets exposure, and content policy violations
ClawGateSecure
openclawAdvanced security protocol for LLM agents focusing on Prompt Injection mitigation, code auditing, and data exfiltration prevention.
openclaw-hardener
openclawHarden OpenClaw (workspace + ~/.openclaw): run openclaw security audit, catch prompt-injection/exfil risks, scan for secrets, and apply safe fixes (chmod/exec-bit cleanup). Includes optional config.patch planning to reduce attack surface.
skillvet
openclawSecurity scanner for ClawHub/community skills — detects malware, credential theft, exfiltration, prompt injection, obfuscation, homograph attacks, ANSI injection, campaign-specific attack patterns, and more before you install. Use when installing skills from ClawHub or any public marketplace, reviewing third-party agent skills for safety, or vetting untrusted code before giving it to your AI agent. Triggers: install skill, audit skill, check skill, vet skill, skill security, safe install, is this skill safe.
clawdefender
openclawSecurity scanner and input sanitizer for AI agents. Detects prompt injection, command injection, SSRF, credential exfiltration, and path traversal attacks. Use when (1) installing new skills from ClawHub, (2) processing external input like emails, calendar events, Trello cards, or API responses, (3) validating URLs before fetching, (4) running security audits on your workspace. Protects agents from malicious content in untrusted data sources.
prompt-guard
openclawToken-optimized prompt injection defense. 70% token reduction via tiered pattern loading, 90% reduction for repeated requests via hash cache. 500+ patterns, 11 SHIELD categories, 10 language support.
skillguard
openclawSecurity scanner for AgentSkill packages. Scan skills for credential theft, code injection, prompt manipulation, data exfiltration, and evasion techniques before installing them. Use when evaluating skills from ClawHub or any untrusted source.
langchain-security-basics
Apply LangChain security best practices for production. Use when securing API keys, preventing prompt injection, or implementing safe LLM interactions. Trigger with phrases like "langchain security", "langchain API key safety", "prompt injection", "langchain secrets", "secure langchain".
prompt-injection-test
cisco-ai-defenseA test skill with prompt injection patterns
mcp-security-scan
cisco-ai-defenseScans MCP servers, tools, prompts, and resources for security vulnerabilities using YARA rules, LLM analysis, and Cisco AI Defense API. Use this skill when the user wants to check MCP servers for security issues, detect prompt injection, tool poisoning, or analyze MCP configurations for threats.
prompt-engine
dadbodgeoffTemplate-based AI prompt engine with YAML templates, brand kit injection, input sanitization for security, and token-efficient context blocks.
octocode-prompt-optimizer
bgauryyThis skill should be used when the user asks to "optimize this prompt", "improve this SKILL.md", "make this prompt more reliable", "fix my agent instructions", "review this AGENTS.md", "strengthen this prompt", "my agent keeps skipping steps", "add enforcement to instructions", or needs to transform weak prompts into reliable, enforceable agent protocols. Uses a 6-step gated flow (with Fast/Full modes), command strengthening, gate injection, and failure mode analysis.
security-integration-tests
alex-ilgayevUse this agent when working with prompt injection detection integration tests, including running tests, debugging failures, or adding new test samples.
prompt-injection-detector
a5c-aiPrompt injection detection and prevention for secure LLM applications
skill-scanner
getsentryScan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
mcp-prompts-guide
aiskillstoreCreate powerful MCP prompts that guide AI interactions with templates, arguments, and context injection
LLM Security
semgrepSecurity guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or asking about LLM vulnerabilities like "prompt injection" or "check LLM security".
PromptInjection
Steffen025Prompt injection testing. USE WHEN prompt injection, jailbreak, LLM security, AI security assessment, pentest AI application, test chatbot vulnerabilities.
security-patterns
yonatangrossSecurity patterns for authentication, defense-in-depth, input validation, OWASP Top 10, LLM safety, and PII masking. Use when implementing auth flows, security layers, input sanitization, vulnerability prevention, prompt injection defense, or data redaction.
mcp-patterns
yonatangrossMCP server building, advanced patterns, and security hardening. Use when building MCP servers, implementing tool handlers, adding authentication, creating interactive UIs, hardening MCP security, or debugging MCP integrations.
spring-boot-application
aj-geddesBuild enterprise Spring Boot applications with annotations, dependency injection, data persistence, REST controllers, and security. Use when developing Spring applications, managing beans, implementing services, and configuring Spring Boot projects.
sql-injection-prevention
aj-geddesPrevent SQL injection attacks using prepared statements, parameterized queries, and input validation. Use when building database-driven applications securely.
fastapi-development
aj-geddesBuild high-performance FastAPI applications with async routes, validation, dependency injection, security, and automatic API documentation. Use when developing modern Python APIs with async support, automatic OpenAPI documentation, and high performance requirements.
security-testing
aj-geddesIdentify security vulnerabilities through SAST, DAST, penetration testing, and dependency scanning. Use for security test, vulnerability scanning, OWASP, SQL injection, XSS, CSRF, and penetration testing.
angular-module-design
aj-geddesDesign Angular modules using feature modules, lazy loading, and dependency injection. Use when organizing large Angular applications with proper separation of concerns.
LLM Security Testing
PramodDuttaSecurity testing for LLM-powered applications including prompt injection, jailbreak detection, data leakage prevention, and AI safety testing.
agent-email-inbox
resendUse when setting up an email inbox for an AI agent (Moltbot, Clawdbot, or similar) - configuring inbound email, webhooks, tunneling for local development, and implementing security measures to prevent prompt injection attacks.
ai-threat-testing
transilienceaiOffensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.
cache-audit
darraghh1Audit your Claude Code setup for prompt caching efficiency. Measures prefix size, hook patterns, rule duplication, dynamic injection sizes, and tool stability. Returns a scored report with fixes ranked by token savings.
ai-mlops
vasilyu1983Production MLOps and ML/LLM/agent security skill for deploying and operating ML systems in production (registry + CI/CD, serving, monitoring/drift, evaluation loops, incident response/runbooks, and governance), including GenAI security (prompt injection, jailbreaks, RAG security, privacy, and supply chain).
ai-prompt-engineering
vasilyu1983Operational prompt engineering for production LLM apps: structured outputs (JSON/schema), deterministic extractors, RAG grounding/citations, tool/agent workflows, prompt safety (injection/exfiltration), and prompt evaluation/regression testing. Use when designing, debugging, or standardizing prompts for Codex CLI, Claude Code, and OpenAI/Anthropic/Gemini APIs.
prompt-injection-defense
omer-metinDefense techniques against prompt injection attacks including direct injection, indirect injection, and jailbreaks. Use when "prompt injection, jailbreak prevention, input sanitization, llm security, injection attack, security, prompt-injection, llm, owasp, jailbreak, ai-safety" is mentioned.
AI Safety Alignment
omer-metinImplement comprehensive safety guardrails for LLM applications including content moderation (OpenAI Moderation API), jailbreak prevention, prompt-injection defense, PII detection, topic guardrails, and output validation. Essential for production AI applications that handle user-generated content. Use when keywords like guardrails, content-moderation, prompt-injection, jailbreak-prevention, pii-detection, nemo-guardrails, openai-moderation, llama-guard, or safety are relevant.
cloud-api-integration
martinholovskyExpert skill for integrating cloud AI APIs (Claude, GPT-4, Gemini). Covers secure API key management, prompt injection prevention, rate limiting, cost optimization, and protection against data exfiltration attacks.
llm-integration
martinholovskyExpert guidance for integrating local Large Language Models using llama.cpp and Ollama. Covers secure model loading, inference optimization, prompt handling, and protections against LLM-specific threats such as prompt injection, model theft, and denial-of-service attacks.
prompt-engineering
martinholovskyExpert skill for prompt engineering and task routing/orchestration. Covers secure prompt construction, injection prevention, multi-step task orchestration, and LLM output validation for a JARVIS AI assistant.
advanced-prompting-and-adversarial-testing
samarvUse these research-backed techniques to maximize LLM performance and secure AI agents. Apply this skill when designing system prompts for AI products, troubleshooting low-accuracy outputs, or testing model vulnerabilities against prompt injection.
securing-agentic-ai-systems
samarvA framework for protecting AI applications from prompt injection and jailbreaking by treating LLMs as potentially malicious actors. Use this when deploying AI agents with tool access, designing system prompts for customer-facing bots, or conducting security audits for LLM-powered features.
agent-skill-evaluator
JeredBluComprehensive security and safety evaluation system for agent skills (.skill files). Use when users provide GitHub URLs, website links, or .skill files for download and request security assessment, safety evaluation, or ask "is this skill safe to use." Evaluates prompt injection risks, malicious code patterns, hidden instructions, data exfiltration attempts, and provides actionable recommendations with risk scoring.
guardrails-safety-filter-builder
patricio0312revImplements content safety filters with PII redaction, policy constraints, prompt injection detection, and safe refusal templates. Use when adding "content moderation", "safety filters", "PII protection", or "guardrails".
ai-security-hardening
BagelHoleHarden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks. Covers input validation, output filtering, access control, model API security, and compliance controls for production AI systems.
ai-agent-security
BagelHoleSecure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.