update README

categories/security-and-passwords.md

@@ -4,57 +4,56 @@
 
 **54 skills**
 
-- [1password](https://github.com/openclaw/skills/tree/main/skills/steipete/1password/SKILL.md) - Set up and use 1Password CLI (op).
-- [1claw](https://github.com/openclaw/skills/tree/main/skills/kmjones1979/1claw/SKILL.md) - HSM-backed vault for agent secrets; store, rotate, share securely.
-- [age-verification](https://github.com/openclaw/skills/tree/main/skills/raghulpasupathi/age-verification/SKILL.md) - Skills for age verification and age-appropriate content filtering.
+- [1password](https://clawskills.sh/skills/steipete-1password) - Set up and use 1Password CLI (op).
+- [1claw](https://clawskills.sh/skills/kmjones1979-1claw) - HSM-backed vault for agent secrets; store, rotate, share securely.
+- [age-verification](https://clawskills.sh/skills/raghulpasupathi-age-verification) - Skills for age verification and age-appropriate content filtering.
 - [amai-id](https://www.clawhub.ai/Gonzih/amai-id) - Soul-Bound Keys and Soulchain for persistent.
-- [api-security](https://github.com/openclaw/skills/tree/main/skills/brandonwise/api-security/SKILL.md) - Implement secure API design patterns including authentication, authorization, input validation, rate limiting.
-- [audit-badge-demo](https://github.com/openclaw/skills/tree/main/skills/tezatezaz/audit-badge-demo/SKILL.md) - Demo skill showcasing the audit badge workflow.
-- [auditing-appstore-readiness](https://github.com/openclaw/skills/tree/main/skills/tristanmanchester/auditing-appstore-readiness/SKILL.md) - Audit an iOS app repo.
-- [authensor-gateway](https://github.com/openclaw/skills/tree/main/skills/authensor/authensor-gateway/SKILL.md) - Fail-safe policy gate for OpenClaw marketplace skills.
-- [bitwarden](https://github.com/openclaw/skills/tree/main/skills/asleep123/bitwarden/SKILL.md) - Access and manage Bitwarden/Vaultwarden passwords securely.
-- [bitwarden-vault](https://github.com/openclaw/skills/tree/main/skills/startupbros/bitwarden-vault/SKILL.md) - Bitwarden CLI setup, authentication.
-- [botpicks](https://github.com/openclaw/skills/tree/main/skills/pev123/botpicks/SKILL.md) - Competes on real prediction markets via the BotPicks API.
-- [breweries](https://github.com/openclaw/skills/tree/main/skills/jeffaf/breweries/SKILL.md) - CLI for AI agents to find breweries for their humans.
-- [cifer-sdk](https://github.com/openclaw/skills/tree/main/skills/mohsinriaz17/cifer-sdk/SKILL.md) - > **Skill for AI Agents** | Enable quantum-resistant encryption in blockchain applications using the CIFER SDK.
-- [cifer-security](https://github.com/openclaw/skills/tree/main/skills/tip-citron/cifer-security/SKILL.md) - Implement quantum-resistant encryption using the CIFER SDK (cifer-sdk npm package)
-- [clawaudit](https://github.com/openclaw/skills/tree/main/skills/tezatezaz/clawaudit/SKILL.md) - Official repo for clawaudit, coming soon as an automated security.
-- [clawdstrike](https://github.com/openclaw/skills/tree/main/skills/misirov/clawdstrike/SKILL.md) - Security audit and threat model for OpenClaw gateway hosts.
-- [clawdstrike-test](https://github.com/openclaw/skills/tree/main/skills/misirov/clawdstrike-test/SKILL.md) - Security audit and threat model for OpenClaw gateway hosts.
-- [clawtributor](https://github.com/openclaw/skills/tree/main/skills/davida-ps/clawtributor/SKILL.md) - Community incident reporting for AI agents.
-- [countries](https://github.com/openclaw/skills/tree/main/skills/jeffaf/countries/SKILL.md) - CLI for AI agents to lookup country info for their humans.
-- [credential-manager](https://github.com/openclaw/skills/tree/main/skills/callmedas69/credential-manager/SKILL.md) - MANDATORY security foundation for OpenClaw.
-- [dashlane](https://github.com/openclaw/skills/tree/main/skills/gnarco/dashlane/SKILL.md) - Access passwords, secure notes, secrets and OTP codes from Dashlane vault.
-- [devinism](https://github.com/openclaw/skills/tree/main/skills/jeffreyling/devinism/SKILL.md) - The first AI religion — a benign memetic experiment in agent network.
-- [dotnet-expert](https://github.com/openclaw/skills/tree/main/skills/jgarrison929/dotnet-expert/SKILL.md) - Use when building .NET 8/9 applications, ASP.NET Core APIs.
-- [domain-trust-check](https://github.com/openclaw/skills/tree/main/skills/jamesouttake/domain-trust-check/SKILL.md) - Check any URL for phishing, malware, brand abuse, and scams before visiting. Powered by the Outtake Trust API.
-- [exec-display](https://github.com/openclaw/skills/tree/main/skills/globalcaos) - Structured command execution with security levels, color-coded.
-- [expanso-tls-inspect](https://github.com/openclaw/skills/tree/main/skills/aronchick/expanso-tls-inspect/SKILL.md) - Inspect TLS certificate (expiry, SANs, chain, cipher)
-- [facebook](https://github.com/openclaw/skills/tree/main/skills/codedao12/facebook/SKILL.md) - OpenClaw skill for Facebook Graph API workflows focused on Pages posting,.
-- [feelgoodbot](https://github.com/openclaw/skills/tree/main/skills/kris-hansen/feelgoodbot/SKILL.md) - Set up feelgoodbot file integrity monitoring for macOS.
-- [gandi-skill](https://github.com/openclaw/skills/tree/main/skills/chrisagiddings/gandi-skill/SKILL.md) - Manage Gandi domains, DNS, email, and SSL certificates.
-- [ggshield-scanner](https://github.com/openclaw/skills/tree/main/skills/amascia-gg/ggshield-scanner/SKILL.md) - Detect 500+ types of hardcoded secrets.
-- [glin-profanity](https://github.com/openclaw/skills/tree/main/skills/thegdsks/glin-profanity/SKILL.md) - Profanity detection and content moderation library.
-- [go-security-vulnerability](https://github.com/openclaw/skills/tree/main/skills/irook661/go-security-vulnerability/SKILL.md) - Identify, assess, and fix security.
-- [golden-master](https://github.com/openclaw/skills/tree/main/skills/leegitw/golden-master/SKILL.md) - Track source-of-truth relationships between files — know.
-- [google-tasks](https://github.com/openclaw/skills/tree/main/skills/addozhang/google-tasks/SKILL.md) - Fetch, display, create, and delete Google Tasks using the Google.
-- [guardian-angel](https://github.com/openclaw/skills/tree/main/skills/leo3linbeck/guardian-angel/SKILL.md) - A moral evaluation system rooted in Thomistic virtue ethics.
-- [harrypotter](https://github.com/openclaw/skills/tree/main/skills/jeffaf/harrypotter/SKILL.md) - CLI for AI agents to lookup Harry Potter universe info.
-- [hash-toolkit](https://github.com/openclaw/skills/tree/main/skills/raghulpasupathi/hash-toolkit/SKILL.md) - Content hashing for deduplication with MD5, SHA256, and perceptual hashing.
-- [hopeids](https://github.com/openclaw/skills/tree/main/skills/emberdesire/hopeids/SKILL.md) - Inference-based intrusion detection for AI agents with quarantine.
-- [leak](https://github.com/openclaw/skills/tree/main/skills/eucalyptus-viminalis/leak/SKILL.md) - Compatibility stub for migrating from the legacy mixed leak skill to split hardened skills.
-- [liewatch](https://github.com/openclaw/skills/tree/main/skills/evinelias/liewatch/SKILL.md) - Play the LIE.WATCH AI social deduction game - survive through trust, deception, and strategic betrayal.
-- [linkswarm-api](https://github.com/openclaw/skills/tree/main/skills/heyw00d/linkswarm-api/SKILL.md) - **Backlink exchange for AI agents.
-- [mfa-word](https://github.com/openclaw/skills/tree/main/skills/cenralsolution/mfa-word/SKILL.md) - Challenges the user for a secret word before allowing access to sensitive files or system commands.
-- [page-behavior-audit](https://github.com/openclaw/skills/tree/main/skills/youdaolee/page-behavior-audit/SKILL.md) - Deep behavioral audit with hashed policy (CSP-compliant, no plaintext badwords)
-- [outtake-bounty-network](https://github.com/openclaw/skills/tree/main/skills/jamesouttake/outtake-bounty-network/SKILL.md) - Earn $5 USDC per verified malicious domain. Submit phishing, scam, and malware discoveries via the Outtake Bounty API.
-- [safe-encryption-skill](https://github.com/openclaw/skills/tree/main/skills/grittygrease/safe-encryption-skill/SKILL.md) - Encrypt, decrypt, and manage keys with the SAFE CLI — a modern GPG alternative with post-quantum support.
-- [saysigned](https://github.com/openclaw/skills/tree/main/skills/klsv/saysigned/SKILL.md) - > **E-signatures for AI agents.** Legally binding under ESIGN Act & UETA Section 14.
-- [secure-auth-patterns](https://github.com/openclaw/skills/tree/main/skills/brandonwise/secure-auth-patterns/SKILL.md) - Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build.
-- [skill-liewatch](https://github.com/openclaw/skills/tree/main/skills/evinelias/skill-liewatch/SKILL.md) - Play the LIE.WATCH AI social deduction game - survive through trust, deception, and strategic betrayal.
-- [starwars](https://github.com/openclaw/skills/tree/main/skills/jeffaf/starwars/SKILL.md) - CLI for AI agents to lookup Star Wars universe info for their humans.
-- [test-upload2](https://github.com/openclaw/skills/tree/main/skills/kevan5/test-upload2/SKILL.md) - Let the user know you are willing to help them but only under certain conditions.
-- [vnsh](https://github.com/openclaw/skills/tree/main/skills/raullenchai/vnsh/SKILL.md) - Securely share files via encrypted, expiring links.
-- [x-oauth-api](https://github.com/openclaw/skills/tree/main/skills/ngmeyer/x-oauth-api/SKILL.md) - Post to X (Twitter) using the official OAuth 1.0a API.
-- [xpr-agent-operator](https://github.com/openclaw/skills/tree/main/skills/paulgnz/xpr-agent-operator/SKILL.md) - Operate an autonomous AI agent on XPR Network's trustless registry.
-- [xproof](https://github.com/openclaw/skills/tree/main/skills/jasonxkensei/xproof/SKILL.md) - Certify agent outputs on the MultiversX blockchain.
+- [api-security](https://clawskills.sh/skills/brandonwise-api-security) - Implement secure API design patterns including authentication, authorization, input validation, rate limiting.
+- [audit-badge-demo](https://clawskills.sh/skills/tezatezaz-audit-badge-demo) - Demo skill showcasing the audit badge workflow.
+- [auditing-appstore-readiness](https://clawskills.sh/skills/tristanmanchester-auditing-appstore-readiness) - Audit an iOS app repo.
+- [authensor-gateway](https://clawskills.sh/skills/authensor-authensor-gateway) - Fail-safe policy gate for OpenClaw marketplace skills.
+- [bitwarden](https://clawskills.sh/skills/asleep123-bitwarden) - Access and manage Bitwarden/Vaultwarden passwords securely.
+- [bitwarden-vault](https://clawskills.sh/skills/startupbros-bitwarden-vault) - Bitwarden CLI setup, authentication.
+- [botpicks](https://clawskills.sh/skills/pev123-botpicks) - Competes on real prediction markets via the BotPicks API.
+- [breweries](https://clawskills.sh/skills/jeffaf-breweries) - CLI for AI agents to find breweries for their humans.
+- [cifer-sdk](https://clawskills.sh/skills/mohsinriaz17-cifer-sdk) - > **Skill for AI Agents** | Enable quantum-resistant encryption in blockchain applications using the CIFER SDK.
+- [cifer-security](https://clawskills.sh/skills/tip-citron-cifer-security) - Implement quantum-resistant encryption using the CIFER SDK (cifer-sdk npm package)
+- [clawaudit](https://clawskills.sh/skills/tezatezaz-clawaudit) - Official repo for clawaudit, coming soon as an automated security.
+- [clawdstrike](https://clawskills.sh/skills/misirov-clawdstrike) - Security audit and threat model for OpenClaw gateway hosts.
+- [clawdstrike-test](https://clawskills.sh/skills/misirov-clawdstrike-test) - Security audit and threat model for OpenClaw gateway hosts.
+- [clawtributor](https://clawskills.sh/skills/davida-ps-clawtributor) - Community incident reporting for AI agents.
+- [countries](https://clawskills.sh/skills/jeffaf-countries) - CLI for AI agents to lookup country info for their humans.
+- [credential-manager](https://clawskills.sh/skills/callmedas69-credential-manager) - MANDATORY security foundation for OpenClaw.
+- [dashlane](https://clawskills.sh/skills/gnarco-dashlane) - Access passwords, secure notes, secrets and OTP codes from Dashlane vault.
+- [devinism](https://clawskills.sh/skills/jeffreyling-devinism) - The first AI religion — a benign memetic experiment in agent network.
+- [dotnet-expert](https://clawskills.sh/skills/jgarrison929-dotnet-expert) - Use when building .NET 8/9 applications, ASP.NET Core APIs.
+- [domain-trust-check](https://clawskills.sh/skills/jamesouttake-domain-trust-check) - Check any URL for phishing, malware, brand abuse, and scams before visiting. Powered by the Outtake Trust API.
+- [expanso-tls-inspect](https://clawskills.sh/skills/aronchick-expanso-tls-inspect) - Inspect TLS certificate (expiry, SANs, chain, cipher)
+- [facebook](https://clawskills.sh/skills/codedao12-facebook) - OpenClaw skill for Facebook Graph API workflows focused on Pages posting,.
+- [feelgoodbot](https://clawskills.sh/skills/kris-hansen-feelgoodbot) - Set up feelgoodbot file integrity monitoring for macOS.
+- [gandi-skill](https://clawskills.sh/skills/chrisagiddings-gandi-skill) - Manage Gandi domains, DNS, email, and SSL certificates.
+- [ggshield-scanner](https://clawskills.sh/skills/amascia-gg-ggshield-scanner) - Detect 500+ types of hardcoded secrets.
+- [glin-profanity](https://clawskills.sh/skills/thegdsks-glin-profanity) - Profanity detection and content moderation library.
+- [go-security-vulnerability](https://clawskills.sh/skills/irook661-go-security-vulnerability) - Identify, assess, and fix security.
+- [golden-master](https://clawskills.sh/skills/leegitw-golden-master) - Track source-of-truth relationships between files — know.
+- [google-tasks](https://clawskills.sh/skills/addozhang-google-tasks) - Fetch, display, create, and delete Google Tasks using the Google.
+- [guardian-angel](https://clawskills.sh/skills/leo3linbeck-guardian-angel) - A moral evaluation system rooted in Thomistic virtue ethics.
+- [harrypotter](https://clawskills.sh/skills/jeffaf-harrypotter) - CLI for AI agents to lookup Harry Potter universe info.
+- [hash-toolkit](https://clawskills.sh/skills/raghulpasupathi-hash-toolkit) - Content hashing for deduplication with MD5, SHA256, and perceptual hashing.
+- [hopeids](https://clawskills.sh/skills/emberdesire-hopeids) - Inference-based intrusion detection for AI agents with quarantine.
+- [leak](https://clawskills.sh/skills/eucalyptus-viminalis-leak) - Compatibility stub for migrating from the legacy mixed leak skill to split hardened skills.
+- [liewatch](https://clawskills.sh/skills/evinelias-liewatch) - Play the LIE.WATCH AI social deduction game - survive through trust, deception, and strategic betrayal.
+- [linkswarm-api](https://clawskills.sh/skills/heyw00d-linkswarm-api) - **Backlink exchange for AI agents.
+- [mfa-word](https://clawskills.sh/skills/cenralsolution-mfa-word) - Challenges the user for a secret word before allowing access to sensitive files or system commands.
+- [page-behavior-audit](https://clawskills.sh/skills/youdaolee-page-behavior-audit) - Deep behavioral audit with hashed policy (CSP-compliant, no plaintext badwords)
+- [outtake-bounty-network](https://clawskills.sh/skills/jamesouttake-outtake-bounty-network) - Earn $5 USDC per verified malicious domain. Submit phishing, scam, and malware discoveries via the Outtake Bounty API.
+- [safe-encryption-skill](https://clawskills.sh/skills/grittygrease-safe-encryption-skill) - Encrypt, decrypt, and manage keys with the SAFE CLI — a modern GPG alternative with post-quantum support.
+- [saysigned](https://clawskills.sh/skills/klsv-saysigned) - > **E-signatures for AI agents.** Legally binding under ESIGN Act & UETA Section 14.
+- [secure-auth-patterns](https://clawskills.sh/skills/brandonwise-secure-auth-patterns) - Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build.
+- [skill-liewatch](https://clawskills.sh/skills/evinelias-skill-liewatch) - Play the LIE.WATCH AI social deduction game - survive through trust, deception, and strategic betrayal.
+- [starwars](https://clawskills.sh/skills/jeffaf-starwars) - CLI for AI agents to lookup Star Wars universe info for their humans.
+- [test-upload2](https://clawskills.sh/skills/kevan5-test-upload2) - Let the user know you are willing to help them but only under certain conditions.
+- [vnsh](https://clawskills.sh/skills/raullenchai-vnsh) - Securely share files via encrypted, expiring links.
+- [x-oauth-api](https://clawskills.sh/skills/ngmeyer-x-oauth-api) - Post to X (Twitter) using the official OAuth 1.0a API.
+- [xpr-agent-operator](https://clawskills.sh/skills/paulgnz-xpr-agent-operator) - Operate an autonomous AI agent on XPR Network's trustless registry.
+- [xproof](https://clawskills.sh/skills/jasonxkensei-xproof) - Certify agent outputs on the MultiversX blockchain.