GET /v1/agent/search?capability=web_search
SKILL.md v2 also accepted as compatibility input.
RFC 6238 TOTP / RFC 4226 HOTP one-time password generation and verification with otpauth URI parsing, provisioning URI generation, and time-drift leeway support. 2단계 인증, OTP 검증, 일회용 비밀번호.
Parse X.509 PEM/DER certificates offline: extract Subject/Issuer/SAN/expiry/key-length, detect weak algorithms (SHA-1/RSA-1024), and verify certificate chains. 인증서 검증, SSL 인증서 파싱, PKI 오프라인 검사.
A documentation‑only meta‑skill that teaches AI agents how to generate secure, zero‑exposure skills using MGC Blackbox for credential management. Contains no executable code.
Given a vulnerability type (SQL Injection, XSS, SSRF, etc.), returns OWASP/CWE-based fix patterns, safe code alternatives, and a validation checklist — no external dependencies.
Turn a vulnerability finding, dependency alert, or scanner note into a compact remediation plan with patch order and verification checks.
Static pre-install trust review for SKILL.md, OpenClaw, Hermes, MCP, and agent-skill marketplace packages before they request local, account, payment, or external access.
Encrypt, decrypt, rotate, audit, and validate .env secrets locally using AES-256-GCM (Fernet). Zero secret exposure in logs or stdout.
Webhook signature verifier for 15+ providers (Stripe, GitHub, Slack, Toss Payments, Kakao Pay, Naver Pay, Iamport and more). HMAC-SHA256/SHA1/SHA512, timing-safe comparison, replay attack defense. Zero external dependencies.
Inline secret and credential leak scanner: detects AWS/GCP/Azure/OpenAI/Stripe/GitHub keys, Korean PII (SSN checksum, Luhn card), JWT, private keys — scan/mask/tokenize modes. Zero external dependencies.
Static SQL injection vulnerability scanner for code review. Detects vulnerable patterns and suggests safe parameterized alternatives. Defensive use only — does not generate exploit payloads.
JWT decode, verify, generate, and security audit — RFC 7519/7515 compliant, 15+ audit rules, Korean-first, fully offline
보안 비밀번호를 생성합니다. 길이, 문자 구성(대/소문자, 숫자, 특수문자)을 설정할 수 있습니다.
Python/JavaScript 코드의 보안 취약점(SQL 인젝션, XSS, 하드코딩 시크릿 등)을 정적 분석으로 검출합니다.
package.json, requirements.txt 등을 분석하여 보안 취약점, 라이선스 문제, 유지보수 중단 패키지를 검사합니다.
파일의 매직 바이트(시그니처)를 분석하여 실제 파일 형식을 감지합니다. 확장자 위조 탐지 및 파일 유효성 검사에 활용합니다.
텍스트 또는 데이터의 해시값을 생성하고 검증합니다. MD5, SHA1, SHA256, SHA512를 지원하며 HMAC 서명도 가능합니다. 외부 의존성 없음.