MCP App StoreMCP App Store
from OpenClaw Master Skills2,085
Secure key-management patterns and operational guardrails for AI agents that need to handle private keys, session keys, and secrets safely.
Provides practical patterns and tools for agents that need to access private keys or API secrets. Covers session-key architectures, 1Password integration, output sanitization, pre-commit secret checks, and incident response playbooks. Concrete code snippets and pre-commit hooks are included.
Use Bagman when an agent requires any cryptographic keys, API credentials, or wallet access at runtime — e.g., trading bots, on-chain agents, automation that signs transactions, or any skill that might store credentials. Apply it when you want to avoid key leakage, enforce rotation, or delegate limited session permissions.
Best used with agent runtimes that can call CLIs or shell commands (OpenClaw agents using 1Password CLI, Claude Code, Cursor, or local Python/Node agents).
Bagman is a security-focused skill providing key management patterns for AI agents. It promotes 1Password-based secret retrieval, session keys over raw private keys, output sanitization, and prompt injection defense. No scripts to run — purely a reference/guide skill. Well-structured with clear DO/DON'T examples and incident response procedures.
op (1Password CLI)Solid security guidance skill. The subprocess.run usage for 1Password CLI is safe. Pre-commit hook in bash is straightforward. No executable scripts bundled — this is a reference/guide skill. The referenced documents in references/ directory aren't included in the fetched data, so their quality can't be assessed.
Prompt Engineering Patterns
A practical collection of prompt engineering techniques and patterns for building reliable, controllable LLM prompts: CoT, few-shot, structured outputs, templat
Popup CRO
Design and optimize popups, modals, banners, and slide-ins to increase conversions without harming user experience or SEO.
Atlassian Confluence Expert
Manage Confluence spaces, templates, permissions, and documentation workflows; create page hierarchies, macros, and templates for knowledge bases.
Superfluid Protocol Knowledge Base
Comprehensive developer-oriented reference for Superfluid Protocol: ABIs, forwarders, SDKs, automation, and common gotchas for building streaming-money apps.
JACS Cryptographic Provenance
Post-quantum cryptographic signing and verification for agents: sign documents, verify provenance, claim HAI.ai usernames, and send/receive signed email.
KIPRIS CLI
CLI wrapper around KIPRIS Plus OpenAPI to fetch Korean patents, trademarks, and designs and return normalized JSONL for agent consumption.
Video Call Agent
Initiate real-time video calls with a custom AI avatar (Runway Characters) that opens the conversation and returns a transcript and recording for follow-up.
listenhub
Explain anything — turn ideas into podcasts, explainer videos, or voice narration. Use when the user wants to "make a podcast", "create an explainer video", ...
InkOS - Autonomous Novel Writer
CLI agent for end-to-end fiction writing: draft, audit (33-dimension), revise, import/export and multi-genre support (English & Chinese).
ATXP — Agent Infrastructure & Paid Tools
Provides agents a funded identity (wallet, email) plus paid API tools: web search, image/video/music generation, SMS/voice, email, and an LLM gateway — useful w
AWP (Agent Work Protocol)
Tooling and scripts for onboarding, staking, allocation, and managing agents on the AWP network (Base/Ethereum/Arbitrum/BSC). Includes safe, opt-in daemon and r
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf