MCP App StoreMCP App Store
from openclaw-master-skills2,013
Pre-execution safety protocol that detects and blocks dangerous shell commands and sensitive file reads, and guides the agent through safe alternatives.
This skill implements a mandatory pre-execution safety protocol for agents that run shell commands or read files. It defines instant-block patterns (dangerous commands and reads), risk categories (SAFE / RISKY / DANGEROUS), and step-by-step workflows for handling blocked commands, confirmations, and bypasses. The goal is to prevent accidental destructive operations and credential exfiltration while giving safe alternatives and explicit user approval flows.
Use this skill whenever an agent is about to execute shell commands, read potentially sensitive files, or evaluate user-provided command snippets. Triggers include questions like 'is this command safe?', pre-execution checks, CI hooks, or any automation that may run system-level commands.
/hs skip behavior. The skill enumerates cloud/OS/package-manager red flags and offers recommended safer alternatives.Designed for agent runtimes that can execute shell commands or be extended with hooks (Claude Code, Claude Desktop integrations, CLI-based agents). It complements deterministic Hardstop plugins and LLM-based safety layers.
This skill has not been reviewed by our automated audit pipeline yet.
Prompt Engineering Patterns
A practical collection of prompt engineering techniques and patterns for building reliable, controllable LLM prompts: CoT, few-shot, structured outputs, templat
Popup CRO
Design and optimize popups, modals, banners, and slide-ins to increase conversions without harming user experience or SEO.
Bagman — Secure Key Management
Secure key-management patterns and operational guardrails for AI agents that need to handle private keys, session keys, and secrets safely.
Atlassian Confluence Expert
Manage Confluence spaces, templates, permissions, and documentation workflows; create page hierarchies, macros, and templates for knowledge bases.
Superfluid Protocol Knowledge Base
Comprehensive developer-oriented reference for Superfluid Protocol: ABIs, forwarders, SDKs, automation, and common gotchas for building streaming-money apps.
JACS Cryptographic Provenance
Post-quantum cryptographic signing and verification for agents: sign documents, verify provenance, claim HAI.ai usernames, and send/receive signed email.
KIPRIS CLI
CLI wrapper around KIPRIS Plus OpenAPI to fetch Korean patents, trademarks, and designs and return normalized JSONL for agent consumption.
Video Call Agent
Initiate real-time video calls with a custom AI avatar (Runway Characters) that opens the conversation and returns a transcript and recording for follow-up.
listenhub
Explain anything — turn ideas into podcasts, explainer videos, or voice narration. Use when the user wants to "make a podcast", "create an explainer video", ...
InkOS - Autonomous Novel Writer
CLI agent for end-to-end fiction writing: draft, audit (33-dimension), revise, import/export and multi-genre support (English & Chinese).
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Tmux Bridge
Give an agent controlled access to a local tmux terminal bridge so it can run shell commands, capture output, and manage sessions on the user's machine.
Spring Boot Migration
Guided, phased migration for existing Spring Boot apps to Boot 4 / Java 25 (including Modulith 2 and Testcontainers 2), with scanners and reference guides.
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
ArcKit Architecture Conformance
Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy
Replit — Advanced Troubleshooting
Step-by-step diagnostics and debugging techniques for deep Replit issues: Nix build failures, container crash loops, memory leaks, and platform vs app isolation