IT運用・セキュリティのおすすめClaudeスキル2ページ目

Create, list, modify, and remove scheduled cron jobs to automate system tasks using simplified cron syntax and manage output logging.

Check Claude Code OAuth usage limits (session & weekly quotas). Use when user asks about Claude Code usage, remaining limits, rate limits, or how much Claude usage they have left. Includes automated monitoring to notify when quotas reset.

Manage Tailscale tailnet via CLI and API. Use when the user asks to "check tailscale status", "list tailscale devices", "ping a device", "send file via tailscale", "tailscale funnel", "create auth key", "check who's online", or mentions Tailscale network management.

Diagnose OpenClaw node connection and pairing failures for Android, iOS, and macOS companion apps. Use when QR/setup code/manual connect fails, local Wi-Fi w...

The definitive security scanner for OpenClaw skills. 18 security checks including prompt injection detection, download-and-execute, privilege escalation, cre...

MANDATORY security foundation for OpenClaw. Consolidate scattered API keys and credentials into a secure .env file with proper permissions. Use when setting up OpenClaw, migrating credentials, auditing security, or enforcing the .env standard. This is not optional — centralized credential management is a core requirement for secure OpenClaw deployments. Scans for credential files across common locations, backs up existing files, creates a unified .env with mode 600, validates security, and enforces best practices.

Chat-based AWS infrastructure assistance using AWS CLI and console context. Use for querying, auditing, and monitoring AWS resources (EC2, S3, IAM, Lambda, ECS/EKS, RDS, CloudWatch, billing, etc.), and for proposing safe changes with explicit confirmation before any write/destructive action.

安全管理体系应用指南，整合国际安全管理核心理念与实操方法。当涉及安全理念、体系、文化的解读与应用，企业安全管理体系建设与对标诊断，多基地安全标准化推进，过程安全管理与设备完整性评估，承包商安全管理，安全文化建设与行为审核，事故调查与经验反馈闭环、安全领导力与履职评价等场景时使用此技能。涵盖十大安全理念、22要素体系、安全文化成熟度模型、事故调查方法论、安全领导力等核心内容，并结合食品制造行业特点提供落地实施路径。触发关键词：安全管理体系、22要素、安全文化、行为安全审核、过程安全管理、设备完整性、安全理念落地、多基地安全标准化、事故调查、BBS、ISO 45001、安全诊断、合规审计、承包商管理、安全培训、安全领导力、履职评价。不知道如何使用时直接说\"安全管理体系怎么入手\"即可引导进入对应模块。

Backup agent brain (workspace) and body (state) to local folder and optionally sync to cloud via rclone.

Diagnoses common Linux service issues using logs, systemd/PM2, file permissions, Nginx reverse proxy checks, and DNS sanity checks. Use when a server app is failing, unreachable, or misconfigured.

Debugs and hardens Linux hosts: permissions, disk full, OOM kills, stuck processes, systemd units, cron, networking, SSH, and boot failures. Use when a service starts by hand but fails at boot, a process ignores kill -9, df and du disagree, a box runs out of memory or inodes, sudo or ACLs deny access, SELinux blocks a write, a job works in the shell but not in cron, sshd rejects a key, an upgrade leaves packages half-configured, load is high while the CPU sits idle, or a host needs firewall rules, users, LVM, journald, kernel tuning, or a security baseline. Also for setting up a fresh server, deciding what to alert on, backups whose restore has never been tested, a host that may be compromised, and desktop or laptop trouble — GPU drivers, Wayland, suspend, audio, Wi-Fi. Covers Debian/Ubuntu, RHEL/Fedora, Arch, Alpine, SUSE and WSL. Not for shell-script syntax (bash) or container build and runtime internals (docker).

Expert guidance on navigating, understanding, configuring, troubleshooting, and automating Clawdbot using official documentation and config snippets.

Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.

SSH tunneling, port forwarding, and remote access patterns. Use when setting up local/remote/dynamic port forwards, configuring jump hosts, managing SSH keys, multiplexing connections, transferring files with scp/rsync, or debugging SSH connection issues.

Scan a third-party Claude Code skill for security risks before enabling it. Use when user wants to audit, check, or verify the safety of a skill.

Start/stop/status for a ComfyUI instance.

Scan networks to discover devices, gather MAC addresses, vendors, and hostnames. Includes safety checks to prevent accidental scanning of public networks.

Deploy and manage Vercel projects, including linking repositories, env vars, and domains.

Manage Google Cloud Platform resources via gcloud CLI. Use for Compute Engine VMs, Cloud Run services, Firebase Hosting, Cloud Storage, and project management. Covers deployment, monitoring, logs, and SSH access.

Android APK 黑盒漏洞挖掘技能（单 skill 跑通）。对 APK 做攻击面分析、静态逆向（jadx/apktool）与可选动态验证（Frida/Objection/Burp/MobSF），系统性挖出组件导出、Deep Link/App Link、WebView/JSBridge、本地端口、硬编码密钥、弱加密、SSL Pinning 绕过等**可靠客户端漏洞**。当用户说'挖 APK 漏洞''测安卓客户端''逆向 app''黑盒挖 app''找 Android 客户端攻击面'时触发。用于测试你自己的/已授权的 APK。

別駭我！基本安全檢測 — Security self-check for Clawdbot/Moltbot. Run a quick audit of your clawdbot.json to catch dangerous misconfigurations — exposed gateway, missing auth, open DM policy, weak tokens, loose file permissions. Auto-fix included. Invoke: "run a security check" or "幫我做安全檢查".

Monitor web pages for content changes and get alerts. Track URLs, detect updates, view diffs. Use when asked to watch a website, track changes on a page, mon...

Command-line security analyzer for ClawHub skills. Run analyze-skill.sh to scan SKILL.md files for malicious patterns, credential leaks, and C2 infrastructure before installation. Includes threat intelligence database with 20+ detection patterns.

专业的网络工程师技能，覆盖路由交换、无线、网络安全、云计算/数据中心、光传输五大方向，用于解答各领域设备故障、技术原理、设计规划等问题。当用户提出网络故障排查、设备配置、协议解释、网络设计等问题时使用此技能。

Advanced Home Assistant control using the official hass-cli tool. Features auto-completion, event monitoring, history queries, and rich output formatting. Alternative to the curl-based homeassistant skill - choose this if you want a more interactive CLI experience with better discovery and formatting.

Create, debug, and manage CI/CD pipelines with GitHub Actions. Use when the user needs to set up automated testing, deployment, releases, or workflows. Covers workflow syntax, common patterns, secrets management, caching, matrix builds, and troubleshooting.

Configure notification channels and conditional alerts. Track what's being watched, log what's been sent.

电脑存储空间分析与清理技能（Windows + macOS 双平台自适应）。 当用户需要分析磁盘空间占用、清理C盘/D盘、释放存储空间、优化系统存储时使用此技能。 触发词：清理电脑、存储空间、磁盘满了、C盘满了、空间不足、清理缓存、释放空间、disk cleanup、storage analysis。 此技能执行完整的只读扫描→分析→报告→清理工作流，生成可视化HTML报告并可选择性执行清理。 自动检测操作系统（Windows/macOS），使用对应的扫描逻辑和清理命令。

WordPress site health audit, performance optimization, database cleanup, autoload tuning, slow query detection, wp-config management, image size control, frontend speed fixes, and server diagnostics. Combines 19 optimization and control modules into a single paid plugin (Pro $79/year single-site, $199/year or $499 lifetime unlimited). The diagnostic commands in this skill work on any WordPress 5.8+ site without the plugin.

Auto-retry failed cron jobs on connection recovery. Use when cron jobs fail due to network errors and should be retried when connectivity is restored. Integrates with heartbeat to detect failed jobs and re-run them automatically.

Windows 桌面控制工具 (仅Windows) - 截屏、窗口管理、鼠标键盘控制、进程管理、系统信息。当用户要求截屏、查看进程、关闭程序、桌面控制时使用此技能。

【做什么】纯 Windows 只读存储分析 — 扫描 12+ 组目标（含 Installer/ProgramData/回收站）→ 三灯分级(🟢可自动清/🟡需判断/🔴建议卸载)→ 交互式 HTML 报告 + 本地服务一键删。 【何时用】用户抱怨磁盘空间不足、要求清理/分析/查看空间占用、想知道什么东西吃硬盘。 【触发词】磁盘满了/C盘满了/D盘满了/空间不够/清理空间/清理磁盘/清理C盘/占空间/ 存储分析/磁盘分析/看一下存储/电脑空间/storage analysis/disk cleanup/清缓存/ 哪些东西占地方/看下内存/内存满了。 【反触发】用户明确指运行内存/RAM(如"哪个进程吃内存/内存占用高")→ 那是 RAM 不是存储，不触发本 skill。 【纯 Windows·零 macOS·零第三方依赖】Python 3.10+ 标准库即可。 node_name: 存储分析(Windows)

Use this skill for safe, read-only queries of VMware infrastructure — no destructive operations exist in the codebase; a test enforces it. Directly handles: a one-glance cross-cluster health summary, object-centered VM/host/datastore investigation drill-downs (correlating surrounding infrastructure + recent events), a cross-vCenter "what needs attention now?" rollup, list VMs/hosts/datastores/clusters, active alarms, recent events, VM details. Always use vmware-monitor when the user asks to "list VMs", "check vSphere alarms", "show host status", "is anything on fire", "what needs attention now", "what is happening around this VM/host/datastore", "investigate this VM" — or needs read-only VMware info before making changes. Do NOT use for any write operations — this skill is read-only and has no code path that creates, modifies, or deletes a vSphere resource. For VM modifications use vmware-aiops, for networking use vmware-nsx, for metrics/capacity use vmware-aria. For load balancing/AVI/AKO use vmware-avi.

AI Agent Security Suite - Real-time protection against prompt injection, command injection, SSRF, path traversal, secrets exposure, and content policy violations

电脑维修智能助手。用户描述电脑故障（无法开机、蓝屏、电脑卡顿、网络问题、硬件故障等），自动进行交互式故障诊断，给出紧急处理建议、维修方案对比（DIY/官方售后/第三方维修店）、费用估算、配件购买建议和预防措施，生成交互式HTML可视化维修报告。覆盖台式机/笔记本电脑，支持Windows/macOS/Linux系统...

OpenClaw operations dashboard for sessions, usage and cost, cron runs, gateway health, DGX Spark work, Local API Hub, and opt-in meeting Copilot. Use when installing, operating, auditing, or extending the dashboard backend, frontend tabs, security model, or OpenClaw-aligned design.

Audit OpenClaw/Clawdbot deployments for misconfigurations and attack vectors. Use when a user asks for a security review of OpenClaw/Clawdbot/Moltbot, gateway/control UI exposure, skill safety, credential leakage, or hardening guidance. Produces a terminal report with OK/VULNERABLE findings and fixes.

Debug DNS resolution and network connectivity. Use when troubleshooting DNS failures, testing port connectivity, diagnosing firewall rules, inspecting HTTP requests with curl verbose mode, configuring /etc/hosts, or debugging proxy and certificate issues.

Automatically monitor CI/CD pipeline status of new push across GitHub and GitLab in one place. Auto DevOps this is the way 🦞!

Use the Netlify CLI (netlify) to create/link Netlify sites and set up CI/CD (continuous deployment) from GitHub, especially for monorepos (multiple sites in one repo like Hugo sites under sites/<domain>). Use when Avery asks to deploy a new site, connect a repo to Netlify, configure build/publish settings, set environment variables, enable deploy previews, or automate Netlify site creation.

Homebrew package manager for macOS. Search, install, manage, and troubleshoot packages and casks.

Audit locally installed agent skills for security/policy issues using the SkillLens CLI (`skilllens scan`, `skilllens config`). Use when asked to scan a skills directory (Codex/Claude) and produce a risk-focused audit report based on each skill's `SKILL.md` and bundled resources.

C盘清理与数据迁移专家。当用户说"C盘满了"、"清理C盘"、"C盘转移"、"搬家到D盘"、"磁盘空间不足"、 "red disk"、"drive full"、"move to D drive" 时触发。 核心能力：扫描C盘大户目录 → robocopy搬移到D盘 → 创建NTFS Junction软链接实现零配置迁移。 不适用于：普通文件删除、系统优化、卸载软件（那些是别的领域）。

Dropbox API integration with managed OAuth. Files, folders, search, metadata, and cloud storage. Use this skill when users want to manage files and folders in Dropbox, search content, or work with file metadata. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key. Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Dropbox connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Dropbox action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Dropbox examples; they add no Dropbox capability - Dropbox is not an event source, a trigger cannot read Dropbox data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

AI runtime security monitoring — context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries. Use when the user mentions runtime monitoring, context graphs, lateral movement analysis, audit log correlation, or vulnerability analytics.

The unified, full-coverage skill for ALL Tencent Cloud operations via tccli CLI. This skill supersedes and replaces any single-product cloud skills (includin...

Debug running Docker containers and Compose services. Use when inspecting container logs, exec-ing into running containers, diagnosing networking issues, checking resource usage, debugging multi-stage builds, troubleshooting health checks, or fixing Compose service dependencies.

Headless-detection-resistant browser automation in Docker for authorized QA, compatibility testing, and defensive security research. Camoufox + OS-level input + persistent fingerprints. Use only with sites you own or have written authorization to test.

Advanced security validation for Clawdbot - pattern detection, command sanitization, and threat monitoring

Inspect containers, logs, and images via podman