Results for “integrity”

Verify device legitimacy and app integrity using DeviceCheck (DCDevice per-device bits) and App Attest (DCAppAttestService key generation, attestation, and assertion flows). Use when implementing fraud prevention, detecting compromised devices, validating app authenticity with Apple's servers, protecting sensitive API endpoints with attested requests, or adding device verification to a backend architecture.

The English summary is being prepared. Showing the original description.

This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation from operators. It addresses PLC logic integrity monitoring, physics-based process anomaly detection, engineering workstation compromise indicators, USB-borne attack vectors, and multi-stage attack chain detection spanning IT-to-OT lateral movement through to process manipulation.

The English summary is being prepared. Showing the original description.

Detects rootkit presence on compromised systems by identifying hidden processes, hooked system calls, modified kernel structures, hidden files, and covert network connections using memory forensics, cross-view detection, and integrity checking techniques. Activates for requests involving rootkit detection, hidden process discovery, kernel integrity checking, or system call hook analysis.

The English summary is being prepared. Showing the original description.

Analyzes UEFI bootkit persistence mechanisms including firmware implants in SPI flash, EFI System Partition (ESP) modifications, Secure Boot bypass techniques, and UEFI variable manipulation. Covers detection of known bootkit families (BlackLotus, LoJax, MosaicRegressor, MoonBounce, CosmicStrand), ESP partition forensic inspection, chipsec-based firmware integrity verification, and Secure Boot configuration auditing. Activates for requests involving UEFI malware analysis, firmware persistence investigation, boot chain integrity verification, or Secure Boot bypass detection.

The English summary is being prepared. Showing the original description.

Plan and execute database migrations, data transformations, and system migrations safely with rollback strategies and data integrity validation. Use when migrating databases, transforming data schemas, moving between database systems, implementing versioned migrations, handling data transformations, ensuring data integrity, or planning zero-downtime migrations.

The English summary is being prepared. Showing the original description.

Defensive triage skill for OpenClaw, Hermes Agent, host integrity, and OpenClaw skill-supply-chain scanning. Detects prompt injection, session drift, context overflow, host anomalies, and unsafe skills while keeping actions bounded and auditable.

The English summary is being prepared. Showing the original description.

This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation from operators. It addresses PLC logic integrity monitoring, physics-based process anomaly detection, engineering workstation compromise indicators, USB-borne attack vectors, and multi-stage attack chain detection spanning IT-to-OT lateral movement through to process manipulation.

The English summary is being prepared. Showing the original description.

Detects rootkit presence on compromised systems by identifying hidden processes, hooked system calls, modified kernel structures, hidden files, and covert network connections using memory forensics, cross-view detection, and integrity checking techniques. Activates for requests involving rootkit detection, hidden process discovery, kernel integrity checking, or system call hook analysis.

The English summary is being prepared. Showing the original description.

Analyzes UEFI bootkit persistence mechanisms including firmware implants in SPI flash, EFI System Partition (ESP) modifications, Secure Boot bypass techniques, and UEFI variable manipulation. Covers detection of known bootkit families (BlackLotus, LoJax, MosaicRegressor, MoonBounce, CosmicStrand), ESP partition forensic inspection, chipsec-based firmware integrity verification, and Secure Boot configuration auditing. Activates for requests involving UEFI malware analysis, firmware persistence investigation, boot chain integrity verification, or Secure Boot bypass detection.

The English summary is being prepared. Showing the original description.

Route broad requests about project documentation to a suitable specialist skill. When requested, run a read-only audit of document roles, local links, architecture decision indexes, and evidence references, reporting failures and items needing review.

• Choose a workflow for organizing project documentation
• Identify existing documentation sources
• Audit local links and architecture decision indexes

Assess an application against OWASP Top 10:2025 risk categories using Strix. Get findings backed by working exploit examples, organized by category, with clear explanations of what was tested and what remains unassessed.

• Assessing an app against OWASP Top 10:2025
• Testing access controls across users and tenants
• Organizing proven vulnerabilities by risk category

Prepare Remotion Studio and Canvas Capture for a product demo recorded by the user. Import the original capture into packages/brand as an editable composition, preserve cursor metadata, and upload the verified recording to remotion.media.

• Prepare a Studio interaction demo for recording
• Frame a timeline demonstration
• Import a capture with editable cursor data

Keep development work aligned with the original request by recording requirements, protected behavior, and validation checks. Use phase reviews, deviation notices, and a final audit for tasks involving APIs, stored data, or changes that must preserve existing behavior.

• Keeping multi-part development requests on track
• Preserving existing behavior during API or database changes
• Checking that real behavior is not replaced with mocks

Set up AWS CloudTrail to record activity across accounts, protect audit logs, and alert on sensitive operations. Includes guidance for querying past events with Athena or CloudTrail Lake and checking log integrity during investigations.

• Set up audit logging across AWS accounts
• Investigate suspicious API activity
• Configure alerts for sensitive operations

Assess claims when a request pushes for agreement, invokes authority, or creates artificial urgency. The skill guides responses that separate evidence from persuasion, present strong counter-evidence first, and clearly state what remains uncertain.

• Evaluating claims under deadline pressure
• Reviewing requests that invoke authority
• Responding to demands to endorse unsupported claims

Assess software dependencies, build pipelines, and container images for security risks. Create a software component inventory, check vulnerabilities and license conflicts, verify artifact signatures, and prioritize fixes based on whether vulnerable code can actually be reached.

• Creating and auditing a software component inventory
• Prioritizing dependency vulnerabilities by actual exposure
• Auditing CI/CD pipelines and secret handling

Move reusable code and its tests from OpenHuman into the appropriate tiny* submodule. Separate host responsibilities, update module interfaces, verify the migration, and align release versions and integrity hashes when a loadable module changes.

• Extract reusable logic from the OpenHuman core
• Move implementation tests into the owning submodule
• Update TinyBus contracts and host adapters

Investigate security incidents using memory dumps, saved copies of RAM. The skill guides memory acquisition, process and network analysis, suspicious code detection, and evidence extraction with Volatility and related tools, including checks for capture integrity.

• Capturing RAM before shutting down a system under investigation
• Finding suspicious processes and network connections in memory
• Extracting executables and strings for malware analysis

Check spreadsheet formulas for errors, broken references, inconsistent calculations, and unit mismatches. Review a selected range, one sheet, or an entire financial model, then receive findings ranked by severity with suggested fixes.

• Checking formulas in a selected range
• Investigating a balance sheet that does not balance
• Reviewing a financial model before client delivery

Check security audit findings against code evidence and trace how untrusted input moves through a system. Guide a second review, document verification gaps, and assess draft reports against a minimum quality score before delivery.

• Verifying evidence behind security review findings
• Rechecking input flows after an initial analysis
• Assessing report quality before delivery

Investigate suspicious privilege increases, including Windows UAC approval bypasses and Linux sudo or setuid abuse. Use registry changes, process relationships, and permission changes to identify possible abuse and document affected hosts, methods, and risk levels.

• Investigating Windows UAC bypass activity
• Tracing how administrative access was obtained
• Monitoring Linux sudo and setuid abuse

Investigate malicious software delivered through trusted updates or dependencies. Compare suspect files with legitimate versions, examine signing anomalies and injected code, and organize evidence to assess the infection path and downstream impact.

• Comparing suspicious updates with legitimate versions
• Investigating software signatures and injected code
• Tracing infection through build artifacts

Investigate malware that survives OS reinstallation by checking UEFI firmware, boot files, and Secure Boot settings. Use chipsec and supporting tools to compare trusted baselines, identify bootkit indicators, and document findings.

• Investigating reinfection after OS reinstallation
• Checking unexpected Secure Boot changes
• Comparing firmware against a trusted vendor baseline

Create evaluation drafts for existing skills using actual conversations and user corrections. Produce criteria and repeatable test cases, distinguish evidence from specification assumptions, and prepare an anonymized draft for human review.

• Turn user corrections into repeatable test cases
• Compare promised behavior with actual usage
• Draft an evaluation from conversation history