Security & Compliance skills

Identification of unauthorized privilege escalation attempts through dialogue testing.

Identification of malicious instructions embedded within retrieved or uploaded documents.

Identification of user-led attempts to override system instructions and core behavior.

Identification of data leakage and authorization gaps during cross-agent interactions.

Identification of command injection, eval abuse, and remote code loading risks in agents.

Standardized risk categorization for AI agent vulnerabilities and security findings.

Persistent instruction injection defense for agents with long-term memory capabilities.

Identification of plain-text API keys and passwords in source code and configuration files.

Identification of unsafe file write and extraction paths in user-controlled inputs.

Identification of error propagation and retry loops in multi-step agent architectures.

Tool Abuse Detection prevents unauthorized code, file access, and network requests.

Identification of security risks from malicious plugins, dependencies, and external models.

Identification of security risks through systematic interrogation of model responses.

Identification of social engineering attempts and deceptive safety reassurances in chat.

Conduct unauthorized-access simulations for AI agents and infrastructure.

Identification of data exfiltration attempts using malicious web navigation patterns.

AI infrastructure and agent security analysis for local or remote deployments.

Automated security audits and threat intelligence for your OpenClaw environment.

Kubernetes and KubeSphere audit event collection and storage configuration.

WordPress plugin Abilities API registrations validated for security and logic accuracy.

Verification of WordPress repository standards, GPL licensing, and plugin submission rules.

Standardized REST API audit reports for WordPress plugin capability planning.