Agent Skills

Bagman — Secure Key Management

openclaw-master-skills

Secure key-management patterns and operational guardrails for AI agents that need to handle private keys, session keys, and secrets safely.

EODHD Bash CLI Wrapper

skills

Guides building a small, stateless Bash CLI (eodhd) that safely wraps the EODHD API with OpenClaw-compatible auth and redaction practices.

Skill Vetter

skill-vetter

Pre-install security gate that scans a skill for prompt-injection, secrets, and other vulnerabilities before installation.

Docker Patterns

claude-spellbook

Production-ready Dockerfile and Compose patterns for Python (FastAPI/uv) and Node.js (Next.js), focused on multi-stage builds, caching, health checks, secrets,

1Password CLI

solana-clawd

Instructions and guardrails for installing and using the 1Password CLI (`op`) safely inside a managed tmux session, with recommended workflows to avoid leaking

Cloak — .env Protection

cloak

Protects real .env secrets by replacing on-disk values with safe sandbox values and providing a secure vault and CLI for running processes with real secrets.

Kustomize Generators

han

Generate Kubernetes ConfigMaps and Secrets with Kustomize from literals, files, and envs to manage environment-specific configuration and trigger safe rollouts.

Spring Boot Security Review

awesome-claude-notes

A checklist and practical snippets for securing Spring Boot services: authentication, authorization, input validation, CSRF, secrets management, headers, rate l