TheophilusChinomona

Audit one or more OpenClaw agents, analyse what they require (complexity, tool use, context window, volume, autonomy, sensitivity), and recommend the best-fit OpenRouter models by pricing tier with ready-to-paste openclaw.json config snippets. Use when the user says "what model should I use", "recommend a model for my agent", "audit my agent models", "find a cheaper model", "openrouter model suggestions", "which model fits my agent", or invokes /openclaw-model-advisor.

Create, optimize, and maintain OpenClaw agent workspace files — SOUL.md, IDENTITY.md, AGENTS.md, MEMORY.md, and GOALS.md. Use this skill whenever the user mentions OpenClaw agent setup, agent personality, agent identity, agent workspace files, SOUL.md, IDENTITY.md, AGENTS.md, MEMORY.md, GOALS.md, agent persona, "set up my agent", "configure my agent", "make my agent", or wants to scan/optimize/audit an existing OpenClaw workspace. Also trigger when the user wants to create a new agent from scratch, refine an agent's personality, add goals or memory structure, or review workspace files for consistency. This skill conducts targeted interviews, generates production-ready markdown files, and can scan existing workspaces to optimize them.

Diagnose and fix OpenClaw agent and gateway problems — heartbeats not firing, cron jobs failing, agents not responding, wrong routing, model errors, workspace issues, channel connection failures, and openclaw.json config errors. Use this skill when the user reports: agent not responding, heartbeat stopped, cron job not running, wrong agent getting messages, model errors, gateway won't start, channel disconnected, agent sending to wrong place, memory not writing, session errors, openclaw doctor errors, or any "something isn't working" situation with OpenClaw. This skill reads the openclaw.json config, interprets error patterns, walks through diagnostic steps, identifies the root cause, and produces the exact commands or file changes needed to fix it.

Brainstorm, design, and document OpenClaw agents and multi-agent teams. Use this skill whenever the user wants to plan what agents to build, figure out what agents they need, design agent capabilities and permissions, plan a multi-agent architecture, decide how agents should work together, or create documentation for their agent team. Also trigger when the user says things like "what agents do I need", "help me plan my agents", "I want to set up multiple agents", "document my agent", "agent permissions", "agent roles", "agent team", or asks about agent capabilities, responsibilities, tool access, or inter-agent communication. This skill produces a comprehensive Agent Team Documentation package (markdown + optional .docx) covering every agent's role, persona, permissions, tools, boundaries, and team interaction rules.

Surgically update existing OpenClaw agent workspace files based on conversational change requests — without rewriting the soul, persona, or hard limits. Use this skill when the user says things like "update the agent", "tell NEXUS about the new client", "HUNTER's ICP has changed", "add this to APEX's memory", "RPS paid their invoice", "change SENTINEL's heartbeat", "update the goals", "the client list changed", "add a new cron job", "remove the stale goal", "SCRIBE needs to know about ISO 14001 scope change", or any request to change, add, remove, or refresh content in an existing agent's workspace files. Also trigger when business state changes (new client, lost client, invoice paid, tender outcome, staff change, new service, pricing update) that should be reflected in agent memory. This skill identifies which files and sections need changing, shows exactly what will change before touching anything, makes surgical edits that preserve the persona soul, and outputs ready-to-apply file patches.

Run the complete IBS OpenClaw client onboarding process — from scoping a new client's agent requirements, through designing their agent architecture, building their workspace files and openclaw.json, to producing a professional handover package. Use this skill when IBS is onboarding a new client onto OpenClaw, productising the agent deployment service, creating a client's first agent setup, or when the user says things like "onboard this client", "set up OpenClaw for a new client", "create an agent for our client", "deploy agents for [company]", or "build the OpenClaw setup for [client name]". This skill runs the full IBS OpenClaw product workflow: client interview, needs assessment, architecture design, workspace generation, openclaw.json configuration, deploy script, and professional handover documentation.

Audit, clean, and curate OpenClaw agent memory — reading daily memory logs, extracting durable facts, removing stale or contradictory entries, promoting important patterns to MEMORY.md, and keeping agent knowledge sharp and current. Use this skill when the user wants to clean up agent memory, says the agent seems to be "forgetting" things or repeating itself, wants to consolidate daily logs into long-term memory, notices the agent has stale or incorrect information, or asks to "review the agent's memory", "clean up the memory", "update what the agent knows", or "curate the memory files". Also trigger on a scheduled quarterly review or when significant time has passed since agents were last deployed (2+ months).

Research, design, and build complete persona-driven OpenClaw agent workspaces from scratch — including live web research on world-class domain experts, persona mapping, soul architecture design, and full 5-file workspace generation (SOUL.md, IDENTITY.md, AGENTS.md, MEMORY.md, GOALS.md). Use this skill whenever the user wants to build a new OpenClaw agent with a domain-specific persona, create an AI company or multi-agent team with differentiated personalities, design a soul architecture for an agent role, or asks to "research and build an agent" for any business function. Trigger when the user mentions building agents for sales, marketing, operations, development, SHEQ, finance, HR, content, or any specialist role — even if they don't explicitly say "persona" or "soul". This skill does the full job: researches the world's best practitioners in that domain, extracts their mental models, maps those frameworks onto an agent soul, and outputs production-ready workspace files ready to deploy into OpenClaw.

Design and implement RESTful API endpoints following REST principles with proper HTTP methods, status codes, resource-based URLs, and rate limiting. Use this skill when creating or modifying API endpoints, route handlers, controllers, or any backend API layer code. Apply when working on files that define API routes (routes/*.ts, controllers/*.ts, api/*.ts, *Controller.cs), implement request/response handlers, establish API versioning, or configure endpoint middleware. Use when building Bun/Express APIs, ASP.NET Core Web APIs, or Next.js API routes. This skill ensures RESTful design with clear resource-based URLs, consistent lowercase hyphenated naming, appropriate HTTP methods (GET, POST, PUT, PATCH, DELETE), proper status codes (200, 201, 400, 404, 500), plural nouns for resources (/users, /products), limited nesting depth (2-3 levels max), query parameters for filtering/sorting/pagination, API versioning strategies, and rate limiting headers in responses.

Create and manage database migrations following best practices for reversibility, zero-downtime deployments, and version control. Use this skill when creating migration files, modifying database schemas, adding or removing tables/columns, managing indexes, or performing data transformations. Apply when working on migration files (migrations/*.ts, migrations/*.sql, *_migration.py), Prisma schema changes, Supabase migrations, or any database evolution tasks. This skill ensures reversible migrations with rollback/down methods, small focused single-change migrations, zero-downtime deployment compatibility, separated schema and data migrations, safe concurrent index creation on large tables, clear descriptive naming conventions, and proper version control practices (never modify deployed migrations).

Define database models and schemas with proper data types, constraints, relationships, and validation rules for PostgreSQL (Supabase/Bun.sql) and Firestore (Firebase). Use this skill when creating or modifying database models, ORM entity definitions, Prisma schemas, or Firestore document structures. Apply when working on model files (models/*.ts, entities/*.ts, schema.prisma, models/*.py, Models/*.cs), defining database relationships, setting up validation rules, or implementing data integrity constraints. This skill ensures snake_case naming for SQL and camelCase for NoSQL, required timestamps (created_at/updated_at), UUIDs for SQL and auto-generated IDs for Firestore, foreign key constraints with indexed columns, Row Level Security (RLS) policies for Supabase, strict Firestore security rules, normalized data for SQL (3NF) with denormalization for Firestore read performance, and pgvector setup for AI embeddings.

Write efficient and secure database queries following best practices for SQL injection prevention, N+1 query optimization, and performance for PostgreSQL (Bun.sql, Prisma, Supabase) and Firestore. Use this skill when writing or modifying database queries, implementing data fetching logic, working with ORMs (Prisma, TypeORM, Entity Framework), using Bun.sql native driver, querying Firestore collections, or implementing caching strategies. Apply when working on service files (services/*.ts, repositories/*.ts, *Service.cs), query builder implementations, data access layers, or any code that fetches or manipulates data. This skill ensures parameterized queries to prevent SQL injection (never interpolate user input), eager loading to prevent N+1 problems, selective column fetching (no SELECT *), strategic indexing on WHERE/JOIN/ORDER BY columns, transactions for related operations, query timeouts for performance, caching expensive queries, prepared statements with Bun.sql for repeated queries, and query-driven mod

Build accessible user interfaces following WCAG guidelines with semantic HTML, keyboard navigation, screen reader support, and proper color contrast. Use this skill when creating or modifying UI components, implementing form inputs, adding interactive elements, working with navigation menus, creating modals or dialogs, or handling focus management. Apply when working on React component files (*.tsx, *.jsx), Shadcn/ui components, or any frontend code that users interact with. This skill ensures semantic HTML elements (nav, main, button, etc.) that convey meaning to assistive technologies, keyboard navigation with visible focus indicators (focus:ring-2 focus:ring-offset-2 in Tailwind), sufficient color contrast ratios (4.5:1 for normal text), descriptive alt text for images and meaningful labels for form inputs, screen reader testing and verification, ARIA attributes for complex components when semantic HTML isn't sufficient, logical heading structure (h1-h6 in proper order), and proper focus management in dyna

Structure React 19+ components following best practices for organization, state management, props handling, and code readability with top-down structure and single responsibility principle. Use this skill when creating new React components, refactoring existing components, organizing component logic, managing component state, defining prop interfaces (IComponentProps with I prefix), or implementing component patterns. Apply when working on React component files (*.tsx, *.jsx), Shadcn/ui components, or any frontend component implementations. This skill ensures predictable top-down structure (imports → types/interfaces → component → hooks → derived values → JSX), proper props destructuring with defaults in function signature, manageable component size (split at >300 lines), composition via Shadcn Slot pattern (asChild prop), React 19 patterns (use() hook for promises, useActionState for forms, useOptimistic for immediate feedback), no manual useMemo/useCallback (React Compiler handles memoization), Server Compo

Apply consistent coding style and formatting standards using automated tools (ESLint, Prettier, Ruff) with clear naming conventions, top-down code organization, and appropriate function/component sizing. Use this skill when writing any code in any language, naming files and variables, structuring code within files, organizing imports, configuring linters and formatters, or setting up pre-commit hooks. Apply when working on TypeScript/JavaScript files, Python files, .NET/C# files, configuration files (tsconfig.json, .prettierrc, .eslintrc), or any code that needs consistent formatting and naming. This skill ensures automated formatting with Prettier/Ruff (let tools handle it), ESLint/analyzer enforcement, TypeScript strict mode always enabled, proper naming conventions (PascalCase.tsx for React components, camelCase.ts for utilities, IPascalCase for interfaces with I prefix, PascalCase for types without prefix, camelCase for functions/constants/database fields/API endpoints/JSON keys, no underscore prefix for

Write meaningful code comments that explain WHY rather than WHAT, focusing on business logic, non-obvious solutions, workarounds, and complex algorithms while keeping code self-documenting. Use this skill when adding comments to explain rationale, documenting complex business logic, explaining workarounds or temporary solutions, describing performance optimizations, writing function documentation (JSDoc, docstrings, XML docs), or reviewing code for appropriate commenting. Apply when working on any code file that contains logic requiring explanation, public API functions, complex algorithms, security-critical code, or architectural decisions. This skill ensures comments explain rationale not implementation (WHY not WHAT), self-documenting code through clear naming (refactor unclear code instead of commenting), concise and evergreen comments (no who/when dated comments - Git tracks this), links to external resources for context, proper function documentation format (JSDoc for TS/JS, docstrings for Python, XML d

API security testing — REST, GraphQL, authentication, authorization, rate limiting, business logic

Network penetration testing — service enumeration, vulnerability scanning, credential auditing, Active Directory

Master pentest orchestration — full pipeline from target to report with confirmation gates

Comprehensive reconnaissance — passive OSINT, subdomain enumeration, port scanning, technology fingerprinting

Generate professional penetration testing reports from findings

Web application penetration testing — XSS, SQLi, CSRF, SSRF, command injection, file upload, WAF bypass

Code security testing — SAST, SCA, secret detection, container scanning, IaC analysis

Browser automation, debugging, and performance analysis using Puppeteer CLI scripts. Use for automating browsers, taking screenshots, analyzing performance, monitoring network traffic, web scraping, form automation, and JavaScript debugging.

Production-ready PDF processing with forms, tables, OCR, validation, and batch operations. Use when working with complex PDF workflows in production environments, processing large volumes of PDFs, or requiring robust error handling and validation.

Complete browser automation with Playwright. Auto-detects dev servers, writes clean test scripts to /tmp. Test pages, fill forms, take screenshots, check responsive design, validate UX, test login flows, check links, automate any browser task. Use when user wants to test websites, automate browser interactions, validate web functionality, or perform any browser-based testing.

Comprehensive software architecture skill for designing scalable, maintainable systems using ReactJS, NextJS, Bun, Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python. Includes architecture diagram generation, system design patterns, tech stack decision frameworks, and dependency analysis. Use when designing system architecture, making technical decisions, creating architecture diagrams, evaluating trade-offs, or defining integration patterns.

Create beautiful, accessible user interfaces with shadcn/ui components (built on Radix UI + Tailwind), Tailwind CSS utility-first styling, and canvas-based visual designs. Use when building user interfaces, implementing design systems, creating responsive layouts, adding accessible components (dialogs, dropdowns, forms, tables), customizing themes and colors, implementing dark mode, generating visual designs and posters, or establishing consistent styling patterns across applications.

Migrate a user's OpenClaw customization footprint into Athena. Imports compatible memories, SOUL.md, command allowlists, user skills, and selected workspace assets from ~/.openclaw, then reports exactly what could not be migrated and why.

Configure, extend, or contribute to Hermes Agent.

Migrate from upstream Hermes Agent (NousResearch) to Athena. Since Athena is a direct fork with identical internal paths, all data is 100% compatible — this is purely a repo switch + skin update. No data migration required.

Send and receive emails via Microsoft Graph API through Hermes MCP tools

Agent skill for using the Trello REST API MCP tools. Covers all 22 endpoints with workflows, error handling, and conventions.

Automate TikTok slideshow marketing for any app or product. Researches competitors, generates AI images, adds text overlays, posts via Postiz, tracks analytics, and iterates on what works. Use when setting up TikTok marketing automation, creating slideshow posts, analyzing post performance, optimizing app marketing funnels, or when a user mentions TikTok growth, slideshow ads, or social media marketing for their app. Covers competitor research (browser-based), image generation, text overlays, TikTok posting (Postiz API), cross-posting to Instagram/YouTube/Threads, analytics tracking, hook testing, CTA optimization, conversion tracking with RevenueCat, and a full feedback loop that adjusts hooks and CTAs based on views vs conversions.

BMAD-METHOD agile AI framework. Use /bmad-init to install into a project, /bmad-list to see modules, /bmad-update to pull latest, /bmad-master to launch the BMAD Master agent.

React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.