The ultimate, high-performance ZIP password cracking suite by Hx0 Team. Empowers the Agent with autonomous CTF-level cracking workflows, dynamic dictionary generation, mask attacks, and AES auto-resolution.
Use the we-promise/sure REST API with X-Api-Key auth. Covers accounts, transactions, categories, tags, merchants, imports, holdings, trades, valuations, chats, official docs URLs, self-update workflow from upstream OpenAPI, and ClawHub publish readiness.
Install, authenticate, and use Claude Code CLI as a native coding tool for any OpenClaw agent system.
Complete step-by-step installation guide for OpenClaw on Windows 10/11 with WSL2, includes common pitfalls and solutions from real installation experience.
Complete step-by-step installation guide for OpenClaw on Windows 10/11 with WSL2, includes common pitfalls and solutions from real installation experience.
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
Supply chain security for agent skills. Pre-install inspection, post-install scanning, obfuscation detection, and known-bad signature matching. Verify skills are safe before they touch your workspace. Free alert layer โ upgrade to openclaw-sentinel-pro for quarantine, blocking, and community threat feeds.
Cryptographic skill verification. Sign installed skills with SHA-256 content hashes and verify they haven't been tampered with. Detects modified, added, and removed files within skill directories. Free alert layer โ upgrade to openclaw-signet-pro for rejection, quarantine, and trust chain restoration.
ๆไพๆๅฃฐไนฆๅไฝไธ้ณ้ข่ฝๅ๏ผABS ่ฏปๅใ้ณๆ/้ณ้ขๆฃ็ดขใไบๅใ้ณ่ฒๆจ่ใ็ซ ่่ง่ฒๅๆ็ญ๏ผ๏ผ้่ฟ HTTP Streamable MCP ่ฐ็จใ
Ensures OpenClaw gateway auth consistency and can auto-prompt "continue" when a run error (Unhandled stop reason: error) appears in gateway logs. Use when checking or fixing gateway token/password mismatch, device_token_mismatch errors, or before delegating to sub-agents.
Runs VirusTotal-style security checks on OpenClaw/Cursor skills before install, including remote code execution (RCE) and malicious code (obfuscation, exfiltration, backdoors). Use when evaluating a skill from a registry (e.g. ClawHub), before granting OAuth/API credentials, or when the user asks for a security review of a skill.
Fail-safe policy gate for OpenClaw marketplace skills. Intercepts tool calls before execution and checks them against your Authensor policy. Low-risk actions run automatically. High-risk actions require your approval. Dangerous actions are blocked. Only action metadata is sent to the control plane โ never your files, API keys, or conversation content.
Spin up a one-time web UI for securely entering secret keys and env vars. Supports guided instructions, single-key mode, and cloudflared tunneling.
OpenClaw Agent ้่ฟไบๆๅกๅจไธๅคฉ็ซ็ฒพ็ตๅๅ้ไฟก็ๆ่ฝใ่งฆๅๆถๆบ๏ผ(1) ็จๆท่ฆๆฑไธๅคฉ็ซ็ฒพ็ต้ไฟกๆๆฅๆถๅคฉ็ซ็ฒพ็ตๆถๆฏๆถ (2) ้ ็ฝฎๅคฉ็ซ็ฒพ็ตไธ OpenClaw ็่ฟๆฅๆถ (3) ๅคฉ็ซ็ฒพ็ตๅ้ๆไปคๅฐ OpenClaw ้่ฆๅค็ๆถใ
Secure environment variable & secret management with AES-256 encryption, auto-redaction, permission control, prevent credential leakage
Deploy and configure CLIProxyAPI, expose its dashboard safely, connect OAuth providers like Claude Code, Gemini, Codex, Qwen, and iFlow, generate a reusable API endpoint and API key, and integrate it with OpenClaw or other OpenAI-compatible tools. Use when the user wants one API layer from subscription-based CLI or OAuth accounts, multi-account routing, or CLIProxy setup on a VPS or local machine.
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
ไธไผ ๆไปถๅฐๅ ้จ BS3 ๅญๅจ๏ผๅ ็ญพๅ๏ผใUse when user asks to upload files, images, documents to storage, or get a shareable URL for a file.
A strong, field-tested Guardian baseline for OpenClaw Guardian โ 56 deterministic rules protecting against credential theft, data exfiltration, network scanning, and infrastructure destruction. No LLM voting overhead. Pure regex enforcement at the tool layer.
