Security & Auditing Skills

Alarm operations skill. List alerts, analyze alert rule context with datasource-enriched resource facts, and perform alert status operations with remediation guidance.

Approval workflow skill. View pending approvals and approve or reject service requests.

Expert knowledge for Azure Cost Management development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing budgets/alerts, exports, Cost Management APIs, reservations/savings plans, or Hybrid Benefit, and other Azure Cost Management related development tasks. Not for Azure Advisor (use azure-advisor), Azure Monitor (use azure-monitor), Azure Quotas (use azure-quotas), Azure Portal (use azure-portal).

Expert knowledge for Azure Policy development including troubleshooting, best practices, decision making, security, configuration, integrations & coding patterns, and deployment. Use when authoring Machine Configuration packages, deploying via ARM/Bicep/Terraform, enforcing security baselines, migrating from DSC, or querying compliance with Resource Graph, and other Azure Policy related development tasks. Not for Azure Blueprints (use azure-blueprints), Azure Role-based access control (use azure-rbac), Azure Resource Manager (use azure-resource-manager), Azure Security (use azure-security).

Expert knowledge for Azure Security development including troubleshooting, best practices, decision making, security, configuration, integrations & coding patterns, and deployment. Use when securing AKS workloads, SBOMs, Notation image signing, Key Vault/HSM keys, or Customer Lockbox access, and other Azure Security related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Firewall (use azure-firewall), Azure DDos Protection (use azure-ddos-protection), Azure Web Application Firewall (use azure-web-application-firewall).

Optimize cloud costs through resource rightsizing, tagging strategies, reserved instances, and spending analysis.

Create new AtlasClaw skills with proper structure, metadata, and documentation. Use when building executable skills, markdown skills, or provider skills for the AtlasClaw AI Agent.

Create new AtlasClaw providers with proper structure, documentation, and skills. Use when building integrations with external systems like APIs, ITSM, CRM, or custom services.

Discovery skill. Browse SmartCMP reference data such as service catalogs, business groups, tenant/租户/部门/BU/项目 scopes, applications, OS templates, images, and generic resource details before submitting a request. Standalone business-group discovery belongs here; standalone resource-pool and resource browsing still use their dedicated skills.

Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify security requirements, and provide actionable recommendations for IAM, network security, data protection, and operational security.

Remove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natural and human-written.

Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies.

Jira issue skill for CRUD. Trigger when user asks to create, get, update, or delete Jira issues.

Approval pre-review agent. Process webhook-driven approval items, analyze request reasonableness, and execute auditable approve/reject decisions.

Use when the user asks to "query Prometheus", "analyze Prometheus metrics", "check Prometheus alerts", "write PromQL", "interpret Prometheus data", "fetch metrics", or mentions Prometheus querying, alerting, or metrics analysis. Provides guidance for querying and interpreting Prometheus metrics for root cause analysis.

Request orchestration agent. Transform natural language infrastructure or application needs into structured, reviewable service request drafts.

SmartCMP resource browsing, detail inspection, and power operations skill. Use when the user asks to 查看云资源列表、查看云主机列表、查看云主机详情、分析云主机属性、启动云主机、停止云主机、开机、关机. Use /nodes/search for list browsing with visible status, PATCH /nodes/{id}/refresh-status for one-host detail inspection, and POST /nodes/resource-operations for start/stop power actions.

Resource compliance skill. Analyze one or more SmartCMP resources with componentType-driven cloud/software/OS analyzers.

Standalone SmartCMP resource-pool directory skill. Use when user says 查询可用的资源池, 查询资源池, 列出所有的资源池, list resource pools, or show all resource pools. This skill is read-only and should query the UI directory endpoint directly without asking for businessGroupId, sourceKey, or nodeType.

Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices.

Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.

Use when the user wants to create, generate, save, export, download, convert, format, clean, or localize plain text, TXT, Markdown/MD, or HTML file deliverables. This skill produces text-family artifacts such as .txt, .text, .md, .markdown, or .html files and exposes the final file for download.

Prometheus monitoring expert for PromQL, alerting rules, Grafana dashboards, and…