Computer profession

Multi-agent task allocation and scheduling capabilities

Clawdtributor is a built-in multi-agent scheduling core component of OpenClaw. It automatically breaks down complex tasks and creates batches of sub-agents for parallel execution. Supporting various load-balancing strategies and consolidating the verification of all sub-task results, it significantly boosts processing efficiency in scenarios such as bulk research, code auditing, and distributed data collection.

ClawSweeper: Automated Warehouse Work Order Cleanup and Inspection Capability

ClawSweeper is an intelligent DevOps agent skill designed for OpenClaw to automate issue management in GitHub projects. It automatically scans repository issues and pull requests (PRs) to identify invalid items—such as those that are stale, unreproducible, or already resolved—and uses AI to generate standardized closing comments for batch archiving, thereby reducing manual maintenance effort. It features built-in safety safeguards to prevent the accidental closure of issues marked with protected labels, linked to active PRs, or created by administrators. Additionally, it supports scheduled polling, manual trigger commands, issue status queries, and the automatic submission of fix PRs.

Skills in Drafting and Reviewing Technical and Governance Documentation

"Technical Documentation" is a skill dedicated to creating and reviewing high-quality technical documentation and agent instruction files—ranging from contributor governance documents (e.g., AGENTS.md, CONTRIBUTING.md) to product documentation (e.g., docs/, README, framework source files). Applicable to both "brownfield" scenarios (existing products or codebases) and "evergreen" contexts (ensuring long-term accuracy and reusability), this skill employs systematic inventory checks, multi-language scope analysis, sub-agent orchestration, and proactive issue scanning to ensure documentation remains clear, actionable, and maintainable for both humans and agents.

Skills for comprehensive verification of release integrity

"Verify Release" is a read-only verification tool designed to confirm whether an OpenClaw release has been fully deployed across GitHub, npm, the plugin ecosystem, ClawHub, package smoke tests, and Live Gateway proxy calls. It does not perform any actual release operations (which are handled by `release-openclaw-maintainer`); instead, it simply answers questions such as "Has a specific version been fully released, deployed, and cleared for smoke and Live testing?" and provides a "yes" or "no" conclusion based on an evidence-driven checklist.

Parallels Discord Roundtrip Skill

Parallels Discord Roundtrip is a skill designed for the OpenClaw personal AI assistant, enabling seamless message round-tripping and task coordination between Discord and the Parallels desktop environment. This skill leverages Discord's real-time communication capabilities to interact with Parallels virtualization environments, supporting cross-platform command execution, file synchronization, and status monitoring. It is ideal for developers and operations personnel who need to manage multiple virtual machines and Discord collaboration scenarios simultaneously, with the AI agent automatically handling message routing and task scheduling to significantly boost productivity.

OpenClaw Testing Skill

The OpenClaw Testing Skill is an example skill within the OpenClaw personal AI assistant ecosystem, designed to demonstrate how to create, organize, and deploy agent skills. Located in the .agents/skills/openclaw-testing directory of the openclaw repository, it includes SKILL.md and other supporting files. This skill showcases the standard structure and best practices for skill development, making it ideal for developers to learn and reference, enabling them to quickly get started in creating their own AI Agent skills.

OpenClaw Secret Scanning Maintainer

OpenClaw Secret Scanning Maintainer is an AI assistant skill designed for the OpenClaw project, aimed at automatically detecting, scanning, and maintaining sensitive information (such as keys, tokens, passwords) in code. Based on scripts and configurations in the GitHub repository, it helps developers prevent sensitive data leaks and ensure code security. This skill is suitable for CI/CD environments, can be integrated into development workflows, and provides real-time scanning and alerting to enhance project security.

Control UI E2E

This is an Agent skill for end-to-end UI control, developed as part of the OpenClaw project. It enables AI assistants to directly manipulate graphical user interface elements via command line or scripts, enabling automated testing, interface operations, and workflow control. Core features include: simulating mouse clicks, keyboard input, window management, element locating, and state detection. It is suitable for cross-platform, cross-OS UI automation scenarios such as software testing, data entry, and repetitive interface task automation. The skill emphasizes safety and controllability, supports custom script extensions, and is ideal for developers and test engineers integrating into their workflows.

Heap Leaks Detection Skill

Heap Leaks Detection Skill is a professional tool provided by the OpenClaw platform, designed to automatically detect and diagnose heap memory leaks in applications. It analyzes memory allocation and deallocation patterns to identify unreleased memory blocks, helping developers quickly locate memory leak sources and optimize program performance. Suitable for C/C++, Rust and other languages requiring manual memory management, as well as large long-running server applications. Key features include: automatic heap memory operation scanning, leak report generation, custom detection rules, and CI/CD pipeline integration. Use cases include code review, performance tuning, and stability testing.

Discrawl — Discord Offline Archiving and Smart Search

Discrawl 是 OpenClaw 生态系统中的一个技能模块，用于将 Discord 服务器数据（频道、线程、消息、成员资料）离线同步到本地 SQLite 数据库，并提供全文搜索、成员目录、实时增量更新和 TUI 界面等功能。它优先使用本地归档数据回答 Discord 相关问题，仅在数据过时或范围不足时才回退调用 Discord API

Gitcrawl —— 本地GitHub归档搜索与PR状态同步技能

Gitcrawl is a tool designed for searching and interacting with GitHub issues and pull requests, prioritizing local archives. Its core philosophy is to utilize locally cached archive data before calling the live GitHub API, thereby improving search efficiency and reducing real-time dependency on the API. Built as a Go module, it can be installed using the command: `go install github.com/openclaw/gitcrawl/cmd/gitcrawl@latest`.

discord-clawd | OpenClaw Discord Interaction Gateway Skill

OpenClaw's official Discord bot interaction capabilities (natively integrated with Clawd) encapsulate the full Discord Bot API. This enables the OpenClaw AI agent to directly read, write, and manage Discord servers, channels, and direct messages, facilitating community automation, ChatOps, and intelligent message processing.

agent-transcript

Add a redacted agent transcript section to GitHub PR or issue bodies during OpenClaw agent-created PR/issue workflows.

Automated Code Review

"Autonomous Code Review" is a core AI code review agent capability built into OpenClaw, specifically designed to automate Git PR/MR code review workflows.

Laravel Security Skill

This is an Agent security skill designed specifically for the Laravel framework, aimed at helping developers identify, prevent, and fix common security vulnerabilities. The skill covers core security areas such as SQL injection, XSS attacks, CSRF protection, authentication authorization, encryption and decryption, and provides automated security scanning, code auditing, and best practice recommendations. It is suitable for development, testing, and production environments of Laravel projects, significantly enhancing application security and reliability.

OpenClaw QA Testing Skill

The OpenClaw QA Testing Skill is a professional testing skill within the OpenClaw personal AI assistant ecosystem, designed for quality assurance and automated testing scenarios. Based on the OpenClaw platform, it supports running on any operating system and platform, helping developers efficiently execute test cases, verify software quality, and generate test reports. Key features include cross-platform compatibility, flexible test framework integration, and automated test process management. Suitable for regression testing, functional testing, integration testing, and other scenarios in the software development lifecycle, significantly improving testing efficiency and accuracy.

Spring Boot Security Skill

Spring Boot Security is a security framework skill based on Spring Boot for building secure and robust applications. It provides core security features such as authentication, authorization, encryption, and session management, supporting multiple authentication methods (e.g., JWT, OAuth2, LDAP), and integrates best practices of Spring Security. This skill is suitable for web applications, microservices, or API gateways that need rapid implementation of user authentication and permission control, helping developers reduce security vulnerabilities and enhance system protection. Security policies can be flexibly customized through configuration files and annotations, reducing development complexity.

DeFi AMM Security Skill

The DeFi AMM Security Skill is a specialized module within the ECC system, focusing on security analysis and vulnerability detection for Decentralized Finance (DeFi) Automated Market Makers (AMMs). This skill covers core security concepts of AMM protocols, common attack vectors (such as flash loan attacks, price manipulation, slippage attacks), auditing methodologies, and best practices. It is suitable for blockchain security engineers, smart contract auditors, and DeFi developers to identify and mitigate security risks in AMMs, enhancing protocol security.

Security Bounty Hunter Skill

The Security Bounty Hunter skill is a specialized security skill within the ECC (Agent Harness Performance Optimization System), designed for security researchers and bounty hunters. It integrates multiple security testing tools and methodologies to help users efficiently discover vulnerabilities in web applications, APIs, mobile apps, and more. Core features include automated vulnerability scanning, intelligent payload generation, target reconnaissance and information gathering, and vulnerability report template generation. By leveraging advanced AI reasoning capabilities, this skill simulates attacker thinking, providing precise vulnerability verification steps and remediation suggestions. Suitable for penetration testing, bug bounty programs, security audits, and more, significantly improving security research efficiency.

Healthcare PHI Compliance Skill

This skill focuses on Protected Health Information (PHI) compliance in the healthcare domain, helping developers and organizations ensure their AI agents and automation systems adhere to privacy regulations like HIPAA when handling sensitive medical data. It provides best practices for secure PHI handling, data masking methods, access control policies, and audit logging capabilities, suitable for healthcare, health tech, insurance, and bioinformatics scenarios to ensure data security and compliance.

Perl Security Skill

The Perl Security Skill is a specialized skill within the ECC (Agent Harness Performance Optimization System), focusing on secure development and vulnerability protection for the Perl programming language. It provides core features such as Perl code security best practices, common vulnerability detection and remediation, input validation, output encoding, SQL injection protection, and XSS protection. Suitable for developers writing secure Perl scripts, security auditors, and teams looking to enhance the security of their Perl applications. By integrating this skill, you can automatically detect security risks in Perl code and receive remediation suggestions, ensuring the security of Perl applications in production environments.

Django Security Skill

The Django Security Skill is a specialized skill within the ECC project, focusing on helping developers ensure application security when using the Django framework. It covers common web security threat protections such as cross-site scripting (XSS), SQL injection, cross-site request forgery (CSRF), clickjacking, and provides best practice guidelines. Suitable for all development teams building web applications with Django, especially enterprise-level projects requiring enhanced security. By integrating this skill, developers can quickly identify and fix security vulnerabilities, improving overall application security.

HIPAA Compliance Skill

The HIPAA Compliance Skill is part of the ECC (Agent Harness Performance Optimization System), specifically designed to help AI agents and development tools meet the requirements of the Health Insurance Portability and Accountability Act (HIPAA). This skill provides guidelines, policies, and best practices for securely handling Protected Health Information (PHI), ensuring that AI applications developed in environments like Claude Code, Codex, Opencode, and Cursor comply with healthcare data privacy and security standards. Ideal for AI projects handling medical data, health tech applications, and healthcare IT systems.

Skills in end-to-end release verification and CI monitoring

Release OpenClaw CI is a capability designed to execute, monitor, debug, and summarize the full release CI process for OpenClaw. Working in conjunction with `release-openclaw-maintainer` and `openclaw-testing`, it is utilized when release candidates require comprehensive validation, proof of installation/updates, real-time provider checks, or CI recovery. It handles the initiation, monitoring, troubleshooting, and evidence logging of full-matrix release validation but does not perform actual release operations—such as version bumps, tagging, `npm publish`, or GitHub releases—which require explicit operator approval.

OC-Path Test Fixture

This directory stores "real-world" input/output samples (fixtures) used by the unit tests for the oc-path extension; these samples serve to verify the accuracy and robustness of the path resolution engine when handling complex, cross-platform paths that include environment variables or special characters.

Node.js Inspect Debugger

Node.js Inspect Debugger is a powerful tool for debugging Node.js applications. It allows developers to connect to running Node.js processes via Chrome DevTools or other compatible debugging clients for breakpoint setting, variable inspection, call stack analysis, and performance profiling. Built on Node.js's built-in inspect protocol, it supports remote debugging, multi-process debugging, memory snapshots, and more, making it suitable for troubleshooting and performance optimization in development, testing, and production environments.

Mastering Intelligent Grouping and Labeling for PRs/Issues

"Tag Duplicate PRs and Issues" is a GitHub workflow skill designed to assist maintainers with triage. It identifies duplicate PRs or issues by searching a local archive via `gitcrawl`, uses the `prtags` tool to create or reuse issue groupings, and synchronizes the maintainer's assessment back to GitHub. This skill focuses on determining whether a PR or issue duplicates existing work, rather than reviewing the quality of a PR's implementation.

Skills for Reading and Writing in Feishu Docs

Feishu Doc is a capability that enables comprehensive read and write operations on Feishu documents (Docx) using a single `feishu_doc` tool—with specific actions determined by the `action` parameter. It supports a wide range of functions, including document creation, reading, writing, and appending; table creation and data insertion; image and file uploads; and block-level management.

End-to-end release process management skills

The Release OpenClaw Maintainer is a tool designed for the end-to-end management of OpenClaw stable and beta releases. It handles version number management, changelog generation, release note drafting, the execution of release commands, and artifact verification. Operating in coordination with release-openclaw-ci (for CI verification) and openclaw-changelog-update (for changelog generation), it serves as the core control layer for the OpenClaw release process.

Visualizing differences and sharing skills

Diffs is a skill used to transform edited text into visual, shareable diffs. It takes the "before" and "after" text or unified patch string from the diffs tool and automatically generates human-readable rendered files (PNG/PDF) or interactive online preview links, avoiding the need to manually write tedious edit summaries.

GitHub Security Advisory Maintainer Skill

This skill is a component of the OpenClaw personal AI assistant ecosystem, specifically designed for maintaining GitHub Security Advisories (GHSA). It helps developers efficiently manage, create, and update security advisories, ensuring the security of open-source projects. By automating processes, it reduces manual errors and improves security response speed. Suitable for GitHub project maintainers who frequently handle security vulnerability reports, publish security patches, and coordinate security disclosures.

OpenClaw Test Performance Diagnostics

OpenClaw Test Performance is a specialized benchmarking, diagnostic, and optimization tool for OpenClaw test suites and plugin-suite runtimes. It helps developers quickly identify runtime hotspots, analyze CPU and RSS memory usage, detect heap growth trends, and uncover slow coverage paths. With one-click import into the Manus environment, developers can seamlessly integrate it into existing workflows for automated performance evaluation and tuning. This skill supports detailed metric collection, visual report generation, and intelligent optimization recommendations, making it ideal for continuous integration, performance regression testing, and code quality assurance scenarios.

Security Triage Skill

Security Triage is an Agent Skill from the OpenClaw project, designed to help AI assistants or users quickly perform initial classification and prioritization of security incidents, alerts, or potential threats. This skill uses a structured analysis process to identify the type of security issue (e.g., malware, network attack, data breach), assess its severity, and provide preliminary response recommendations. It is suitable for security operations personnel, incident response teams, and individuals or organizations looking to automate security classification workflows. Use cases include SOC (Security Operations Center) alert handling, penetration testing result classification, and preliminary vulnerability report analysis. This skill is based on an open-source project on GitHub and can be integrated into various AI platforms.

Techniques for batch-fixing high-certainty bugs within a limited scope

The "OpenClaw Small Bugfix Sweep" is a specialized workflow designed to batch-process issues and pull requests (PRs) in the OpenClaw repository by addressing minor, high-certainty bugs. Through in-depth code review, it targets only those bugs with clear root causes, unambiguous ownership, and minimal patch requirements. Upon fixing a bug, the system generates a "dirty diff" summary for manual review by Peter (the core maintainer); issues are submitted and closed only after his approval. Crucially, this process never involves pushing code, creating PRs, posting comments, closing issues, or applying tags during the review phase—all such actions are deferred until Peter grants explicit approval.

Alpha/Nightly Automated Release and Beta Triggering Capabilities

The OpenClaw Nightly release skill is an automated Alpha/Nightly release mechanism for OpenClaw/Tideclaw. It handles Alpha releases (triggered every 12 hours or manually), Beta release triggers, fixes on release branches, and forward-porting changes back to the `main` branch after a release. Working in tandem with the `release-private` skill, it utilizes the Tideclaw machine identity to execute releases on isolated branches, ensuring that a busy or broken state on the `main` branch does not impact the availability of Nightly builds.

Release a skill for automating changelog generation.

The OpenClaw Changelog Update is an automated utility designed to regenerate the OpenClaw release changelog from Git history. Prior to any beta or stable release (or re-release), it rewrites the relevant version section of `CHANGELOG.md` based on the complete history manifest, eliminating reliance on outdated draft notes. Used in conjunction with `release-openclaw-maintainer`, this utility manages changelog content, ordering, grouping, and attribution, serving as a mandatory step in the release process.

Maintainer Skills for Automated Review and Merging

OpenClaw PR Maintainer is a GitHub workflow automation tool designed for OpenClaw project maintainers to systematically review, triage, merge, and close issues and pull requests. It assists maintainers in efficiently managing external contributions while ensuring codebase quality and decision-making consistency through intelligent retrieval (prioritizing local archives), contributor identity analysis, deep code review (requiring an understanding of the full runtime context), and evidence-based merging criteria (mandating reproducible bug fixes).

Source-Audit-Driven Document Refactoring Skills

OpenClaw Refactor Docs is a skill designed for the source-audit-driven refactoring of existing OpenClaw documentation pages. Building upon the `openclaw-docs` skill—which handles style, page types, examples, and validation—it introduces a refactoring workflow that mandates the preservation and verification of all behavioral facts during rewriting, restructuring, splitting, or streamlining; this ensures that accurate descriptions of system behavior are not lost in the process. It requires source-based verification (against source code, tests, or schemas) for all behavior-sensitive information—such as configuration fields, commands, default values, and permission rules—rather than relying on inferences based on names or intent.

Skills for Mass-Producing Mergeable Bug-Fix PRs

OpenClaw Landable Bug Sweep is an automated, batch-oriented bug-fixing workflow designed for maintainers to generate high-quality, merge-ready (landable) bug-fix PRs from lists of issues or PRs. It employs strict candidate criteria—limiting scope to under 500 lines of code (LOC) and prohibiting new dependencies, configuration changes, or modifications to plugin SDK boundaries—alongside a systematic remediation loop and automated reviews ($autoreview). This process ensures that every generated PR is rebased onto the latest `main` branch, passes local tests and automated reviews, is successfully pushed, and clears GitHub CI checks. The workflow focuses exclusively on producing merge-ready PRs rather than generating analysis notes.

Telegram CrabBox E2E Proof Skill

The Telegram CrabBox E2E Proof Skill is a specialized skill within the OpenClaw personal AI assistant ecosystem, designed to automate end-to-end verification of CrabBox functionality through the Telegram messaging platform. Leveraging the agent capabilities of the OpenClaw framework, this skill automatically executes the complete verification flow from message reception, processing, to result feedback, ensuring the stability and correctness of CrabBox features in the Telegram environment. It is suitable for development testing, quality assurance, and automated operations, helping teams quickly identify and fix integration issues.

Skills in systematic debugging and problem localization

OpenClaw Debugging is a skill for systematically troubleshooting behavioral discrepancies in OpenClaw. When OpenClaw exhibits inconsistent performance across local testing, live models, different providers, code-mode, Tool Search, Crabbox, or CI environments, this skill enables you to pinpoint issues by selecting the appropriate logs, probing methods, and verification paths, rather than relying on blind guesswork.

Release OpenClaw Plugin Testing

This is a skill for publishing and testing OpenClaw plugins, designed to help developers quickly build, publish, and validate custom plugins within the OpenClaw ecosystem. With this skill, users can automate plugin packaging, version management, release workflows, and integration testing to ensure plugins run stably across multiple platforms. Core features include: one-click plugin source packaging, automatic release note generation, smoke and regression testing, and publishing to the OpenClaw plugin marketplace. Suitable for all OpenClaw plugin developers, especially teams that need frequent iteration and release of plugins.

Channel Message Flows Skill

Channel Message Flows Skill is a core skill within the OpenClaw AI assistant ecosystem, designed to manage and process multi-channel message flows. This skill enables AI agents to seamlessly route and respond to messages across different channels (such as Slack, Discord, Telegram, etc.), supporting message filtering, priority sorting, auto-replies, and context retention. It is ideal for scenarios requiring unified message management, automated customer service, team collaboration, and intelligent notification distribution, significantly improving message processing efficiency and response speed.

Security Review Skill

The Security Review skill is a core module within the ECC (Agent Harness Performance Optimization System), specifically designed for comprehensive security reviews of code, configurations, and system architectures. It automatically identifies potential security vulnerabilities, misconfigurations, and non-compliant coding practices, helping developers detect and fix security issues early in the development cycle. This skill supports multiple programming languages and frameworks, providing detailed review reports and remediation suggestions. It is suitable for CI/CD pipeline integration, code review processes, and daily development security checks. By automating security reviews, teams can significantly reduce security risks and improve software quality and compliance.

Security Bounty Hunter Skill

The Security Bounty Hunter skill is a professional module within the ECC (Agent Capability Optimization System), specifically designed for cybersecurity researchers and bug bounty hunters. This skill integrates vulnerability scanning, penetration testing assistance, security report generation, and more, supporting operation in mainstream AI coding environments such as Claude Code, Codex, Opencode, and Cursor. With this skill, users can efficiently discover security vulnerabilities in web applications, APIs, smart contracts, and other targets, and generate vulnerability reports that meet industry standards. The skill includes pre-configured detection scripts, reference documents, and intelligent agents to help users quickly get started with security testing workflows. It is suitable for security audits, bug bounty programs, compliance checks, and other scenarios, making it a powerful assistant for cybersecurity professionals.

Clawic Skills Home

Clawic Skills is a premium open-source skill collection developed by Clawic, focusing on enhancing productivity, development efficiency, and automation. This home page serves as the entry point for all skills, aggregating multiple sub-skills covering categories like development tools, productivity tools, and AI tools. Each skill comes with a detailed SKILL.md document including installation guides, usage instructions, and configuration files. Users can quickly install desired skills via package managers like bunx, npx, or pnpm, and run them in the AstronClaw environment. This collection is ideal for developers and tech enthusiasts to automate repetitive tasks and optimize workflows.

Code Cleanup Skill

This skill automates the cleanup of redundant files, temporary files, and unnecessary resources in a codebase. It helps developers quickly identify and remove unused imports, dead code, duplicate files, and test remnants, keeping the project tidy and efficient. Suitable for daily development maintenance, especially in large projects, it significantly improves code readability and build speed. By integrating into CI/CD pipelines, continuous cleanup can be achieved, reducing technical debt.