OpenClaw/clawhub-security-signals huggingface dataset:
Skill: wimi321/git-commit-pr-workflow (version 1.0.0)

--- name: "git_commit_pr_workflow" description: "Use when the user wants the full git workflow: branch creation if needed, commit, push, and PR create or update with a concise summary and test plan." --- # Git Commit PR Workflow Use this skill for end-to-end git delivery from working tree to pull request. ## Workflow 1. Inspect branch state, diff against default branch, and existing PR state. 2. Create a feature branch if still on the default branch. 3. Stage and commit the relevant changes. 4. Push the branch. 5. Create or update the PR with a short title, summary bullets, and test plan. ## Guardrails - No destructive git commands unless explicitly requested. - No force push to default branches. - Keep PR titles short and bodies structured. - Avoid committing secrets or unrelated changes. ## Example Requests - Commit this work, push it, and open a PR. - Take the current changes to a polished PR with a test plan. ## Inputs - Current git state - Default branch - Optional user instructions ## Outputs - New commit - Pushed branch - Created or updated PR ## Success Criteria - The right files were committed. - The branch was pushed safely. - The PR body accurately reflects the diff. ## Non-Goals - Force-push workflows by default - Interactive git rebases ## Source Provenance Derived from `src/commands/commit-push-pr.ts`.

path: agents/openai.yaml
content: interface:
  display_name: "Git Commit PR Workflow"
  short_description: "Commit, push, and open or update a PR"
  default_prompt: "Take the current branch state to a ready PR with safe git operations and a crisp PR body."


path: references/provenance.md
content: # Provenance

- Skill slug: `git-commit-pr-workflow`
- Source module: `src/commands/commit-push-pr.ts`
- Extracted from local Claude Code source analysis


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mike47512/tutoring (version 0.1.0)

--- name: "家教兼职" description: "该技能介绍如何通过家教兼职实现变现；当你计划从事或优化家教兼职时调用。" --- # 家教兼职 概览： - 场景：以“家教兼职”为核心的可复制变现路径 - 目标：在90天内跑通最小可行闭环，并达成正向现金流 定位与人群： - 适合：具备基础认知或实践经验，愿意持续投入的人/团队 - 不适合：短期套利、违规刷量、无内容/供给能力者 典型渠道： - K12家教、专业辅导、提分方案 - 通用补充：微信/抖音/小红书/闲鱼/淘宝/独立站/社群 变现模型： - 收入结构：主收入 + 辅助收入（广告/佣金/订阅/服务/周边） - 成本结构：获客成本（CAC）+ 供给/履约 + 固定开销 - 核心指标：GMV、毛利率、转化率、留存、LTV/CAC、复购率 执行流程： - 01 选赛道与定位：明确供给、目标用户、差异化与定价 - 02 搭MVP：以最低成本验证一个渠道的有效性 - 03 获取流量：内容分发/投放/合作互推，建立追踪 - 04 转化与交付：标准化流程与模板，保证体验与口碑 - 05 复盘与迭代：每周数据盘点，优化漏斗与供给结构 工具清单： - 生产：文案/设计/剪辑/表格/自动化工具 - 获取：SEO/SEM/信息流/平台任务/达人合作 - 追踪：表格/CRM/数据看板/UTM/埋点 - 履约：工单/客服/交付模板/质检清单 合规与风险： - 遵守平台政策与法律法规，严禁虚假宣传、刷量、侵权 - 明确版权与交付约定，规范合同与发票 常见坑位： - 盲目扩渠道、无数据追踪、定价不清、交付不标准 - 过度依赖单平台、忽视复购与会员化 30日执行计划： - 第1周：定位、选品/供给、搭建MVP与基本素材 - 第2周：上线一个主渠道，跑数据，优化文案与转化 - 第3周：稳定交付流程，建立追踪与看板，启动第二渠道 - 第4周：总结复盘，完善模板与清单，制定90日目标 检查清单： - 明确目标与指标，完成MVP验证，建立复盘与模板库 - 形成可复制的标准作业流程（SOP）


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wjsoj/pku-course (version 1.1.0)

--- name: course description: "PKU Teaching Platform (北大教学网/Blackboard Learn) CLI tool built in Rust. Use this skill when working on the course crate, debugging course commands, adding features to the teaching platform CLI, or when the user mentions 教学网, Blackboard, course downloads, assignment submission, video downloads, or PKU teaching. Also use when dealing with HTML scraping via the scraper crate, Blackboard SSO callback, or multipart file uploads. **NOT for course schedule / 课表 / weekly timetable questions — for those use the `treehole` skill (`treehole course`), which is the canonical source and includes 辅修/双学位.** This `course` crate only deals with the Blackboard teaching platform (assignments, files, recordings, announcements)." version: 2.0.0 --- # Course - 北大教学网 CLI A CLI client for PKU's Blackboard Learn teaching platform. ## Architecture - **Crate location**: `crates/course/` - **Auth flow**: IAAA SSO (`app_id="blackboard"`) → Blackboard SSO endpoint callback - **API**: HTML scraping with `scraper` crate (no JSON API available) - **File upload**: multipart form via reqwest ## Key Source Files - `src/main.rs` — Clap CLI with subcommands - `src/commands.rs` — Command implementations - `src/api.rs` — HTML scraping logic, page parsers - `src/display.rs` — Terminal output formatting - `src/client.rs` — reqwest client builders ## CLI Commands | Command | Alias | Function | |---------|-------|----------| | `login` / `logout` / `status` | | IAAA → Blackboard auth | | `courses` | | List enrolled courses (supports `--all` for all semesters) | | `info` | | Course details | | `content` | | Browse course content tree | | `assignments` | | List assignments with deadlines | | `assignment` | | View single assignment | | `browse` | | Interactive course content browser | | `assignment-download` | `adl` | Download assignment attachments | | `download` | | Download course files | | `video-download` | `vdl` | Download course recordings | | `videos` | `vls` | List available videos | | `submit` | | Upload homework files | | `otp` | | TOTP 2FA management | ## Auto-Login for AI Agents ```bash # Check session status info-auth check # Auto-login (reads credentials from OS keyring, no password needed) course login -p ``` ## Development Notes - HTML parsing is the primary data extraction method — no REST API - Assignment list supports deadline-based sorting - Video download handles replay/recording URLs - All user-facing strings in **Chinese** - Error handling: `anyhow::Result` with `.context("中文描述")` - Session persisted to `~/.config/info/course/` - Credentials resolved via `info_common::credential` (keyring → env → interactive)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kyriswu/volcengine-web-search-online (version 1.0.0)

--- name: volcengine-web-search description: "调用火山引擎联网搜索接口，获取 web / web_summary / image 搜索结果。使用此技能当用户需要：联网搜索、火山联网搜索、web_summary 总结、调用 /volcengine/web-search 接口、使用 Python 脚本请求并读取 summary_text / 搜索结果。Use this skill for Volcengine web search API calls and summarized web search results." argument-hint: "必填：query, search_type, azt_api_key；可选：count, need_summary, time_range, content_formats, industry, query_rewrite" user-invocable: true --- # 火山联网搜索 Skill 调用接口： - `POST https://coze-js-api.devtool.uk/volcengine/web-search` 执行随附的 Python 脚本来完成请求，不要在回复中内联构造 curl 命令（除非用户明确要求）。 ## 使用场景 以下情况触发本技能： - 用户想做联网网页搜索（`web`） - 用户想要联网搜索总结（`web_summary`） - 用户想做图片搜索（`image`） - 用户希望直接读取聚合结果（如 `summary_text`、`usage`） ## 输入参数 | 参数 | 必填 | 默认值 | 说明 | |------|------|--------|------| | `query` | **必填** | — | 搜索词，对应接口 `query/Query` | | `search_type` | **必填** | — | 搜索类型：`web` / `web_summary` / `image` | | `azt_api_key` | **必填** | — | 平台鉴权 Key（映射为 payload 的 `api_key`） | | `count` | 可选 | `20` | 返回条数（未传走接口默认 20） | | `need_summary` | 可选 | 自动 | 是否需要总结；`web_summary` 建议为 `true` | | `time_range` | 可选 | — | 时间范围，如 `OneDay/OneWeek/OneMonth/OneYear` | | `content_formats` | 可选 | — | 正文格式：`text` / `markdown` | | `industry` | 可选 | — | 行业类型，如 `finance` / `game` | | `query_rewrite` | 可选 | `false` | 是否开启 Query 改写 | 说明：`search_api_key` 由服务端内置配置提供，Skill 侧不对用户暴露该参数。 ## API Key 获取方式 **必须提供 `azt_api_key`**，解析顺序如下： 1. 读取环境变量 `AZT_API_KEY`。 2. 用户在参数中直接传入。 3. 如果两者均未提供，**停止执行**并提示： > 未检测到 API Key。请前往 **https://devtool.uk/plugin** 购买或查看使用说明后重试。 说明：脚本对外参数使用 `azt_api_key`（或 `AZT_API_KEY`），请求接口时映射为 payload 字段 `api_key`。 ## 执行方式 ```bash # 1) web 搜索 export AZT_API_KEY="your_key_here" python3 scripts/web_search.py --query "今日最新的AI资讯" --search_type web # 2) web_summary 总结搜索 python3 scripts/web_search.py --query "今日最新的AI资讯" --search_type web_summary --need_summary true # 3) image 搜索 python3 scripts/web_search.py --query "北京天气" --search_type image --count 5 ``` ## 响应处理 1. 显示请求状态（`code: 200` 为成功，`code: -1` 为失败）。 2. `search_type=web_summary` 时，优先输出 `summary_text`（若存在）。 3. 输出 `result_count`、`usage`、`search_context` 等关键字段。 4. `web` / `image` 时输出结果条目（标题、链接、摘要等）。 常见失败原因： - `azt_api_key` 无效或已过期 → 前往 https://devtool.uk/plugin 重新购买 - `azt_api_key` 积分已用完 → 联系作者续费 - 上游搜索 key 缺失或无权限 → 检查服务端内置配置（`VOLCENGINE_WEB_SEARCH_API_KEY`） - 网络问题或服务器错误 → 稍后重试 ## 输出格式 ```markdown # 火山联网搜索结果 - 接口：POST https://coze-js-api.devtool.uk/volcengine/web-search - 搜索词：<query> - 搜索类型：<search_type> - API Key 来源：<env: AZT_API_KEY | 用户传入> ## 返回数据 <summary_text / web_results / image_results> ## 状态 <成功/失败信息及剩余积分> ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: suinia/clawvisual (version 1.0.2)

--- name: clawvisual description: URL or long-form text to social carousel generator via local CLI + MCP endpoint. metadata: {"clawdbot":{"emoji":"🖼️","requires":{"bins":["clawvisual"]},"install":[{"id":"npm","kind":"npm","package":"clawvisual","bins":["clawvisual"],"label":"Install clawvisual (npm)"}]}} --- # clawvisual Use clawvisual as a callable skill for agent workflows. It can auto-start a local web/MCP service and expose stable CLI commands for generation and job polling. ## Quick start ```bash npm install -g clawvisual clawvisual set CLAWVISUAL_LLM_API_KEY "your_openrouter_key" clawvisual initialize clawvisual convert --input "https://example.com/article" --slides auto clawvisual status --job <job_id> ``` For local repo usage, you can also run: ```bash npm run skill:clawvisual -- initialize ``` ## What it does - Convert URL or direct long-form text into social carousel output. - Provide job-based async workflow (`convert` -> `status --job`). - Support revision operations (`revise`, `regenerate-cover`). - Expose MCP JSON-RPC tools for OpenClaw and other agent runtimes. ## Commands - `clawvisual initialize`: probe/start local service and print Web URL. - `clawvisual status`: check service identity (must be `clawvisual`). - `clawvisual tools`: list MCP tools. - `clawvisual convert --input <text_or_url> [--slides auto|1-8] [--ratio 4:5|1:1|9:16|16:9] [--lang <code>]` - `clawvisual status --job <job_id>`: query job state and result. - `clawvisual revise --job <job_id> --instruction <text> [--intent rewrite_copy_style|regenerate_cover|regenerate_slides]` - `clawvisual regenerate-cover (--job <job_id> [--instruction <text>] | --prompt <text>) [--ratio 4:5|1:1|9:16|16:9]` - `clawvisual call --name <tool_name> --args <json>`: raw tool invocation. ## Config Optional local config file: - `~/.clawvisual/config.json` Manage config with CLI: ```bash clawvisual set CLAWVISUAL_LLM_API_KEY "your_key" clawvisual get CLAWVISUAL_LLM_API_KEY clawvisual config clawvisual unset CLAWVISUAL_LLM_API_KEY ``` Supported keys: - `CLAWVISUAL_LLM_API_KEY` (alias: `LLM_API_KEY`) - `CLAWVISUAL_LLM_API_URL` (alias: `LLM_API_URL`) - `CLAWVISUAL_LLM_MODEL` (alias: `LLM_MODEL`) - `CLAWVISUAL_MCP_URL` (alias: `MCP_URL`) - `CLAWVISUAL_API_KEY` When auto-starting local service, `CLAWVISUAL_LLM_*` values are mapped to runtime `LLM_*` envs. ## Workflow pattern 1. `initialize` 2. `convert` 3. Poll `status --job <job_id>` until completion 4. Optional `revise` / `regenerate-cover` 5. Poll revised job with `status --job` ## Output contract All commands return JSON to stdout for deterministic parsing by upstream agents.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ntriq-gh/ntriq-x402-compliance-check (version 1.0.0)

--- name: ntriq-x402-compliance-check description: "AI compliance analysis for contracts, policies, and text. Detects issues and recommends fixes. $0.03 USDC via x402." version: 1.0.0 metadata: openclaw: primaryTag: data-intelligence tags: [compliance, legal, risk, analysis, x402] author: ntriq homepage: https://x402.ntriq.co.kr --- # Compliance Check (x402) Analyze text for compliance issues across GDPR, HIPAA, SOX, general corporate policy, or custom frameworks. Returns risk level, specific violations, and remediation recommendations. $0.03 USDC per call. ## How to Call ```bash POST https://x402.ntriq.co.kr/compliance-check Content-Type: application/json X-PAYMENT: <x402-payment-header> { "text": "We store user passwords in plain text and share data with third parties.", "framework": "GDPR", "jurisdiction": "EU" } ``` ## Parameters | Parameter | Type | Required | Description | |-----------|------|----------|-------------| | `text` | string | ✅ | Text to analyze | | `framework` | string | ❌ | `GDPR` \| `HIPAA` \| `SOX` \| `general` (default: `general`) | | `jurisdiction` | string | ❌ | `US` \| `EU` \| `UK` etc. (default: `US`) | | `language` | string | ❌ | Output language (default: `en`) | ## Example Response ```json { "status": "ok", "compliant": false, "risk_level": "critical", "issues": [ { "rule": "GDPR Art. 32 - Security of processing", "description": "Plain text password storage violates security requirements", "severity": "critical", "recommendation": "Implement bcrypt or Argon2 password hashing" } ], "summary": "2 critical violations found requiring immediate remediation." } ``` ## Payment - **Price**: $0.03 USDC per call - **Network**: Base mainnet (EIP-3009 gasless) - **Protocol**: [x402](https://x402.org) ```bash curl https://x402.ntriq.co.kr/services ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: lanxy32/guanguan-hr (version 1.0.0)

--- name: guanguan-hr description: 激活"管管"组织人事官角色。当用户涉及招聘、面试、员工管理、薪酬绩效、组织架构、团队建设、员工离职、劳动纠纷、企业文化、人才梯队、KPI/OKR设计等人力资源相关问题时，必须调用此skill。关键词包括：招人、裁员、绩效、薪酬、KPI、OKR、面试、JD、组织架构、团队、员工、留人、人才、竞业、离职。只要涉及"人"的管理问题，立即触发本skill。 --- # 管管 · 组织人事官 Skill ## 角色定义 激活"管管"模式：经验丰富的组织人事专家，既懂组织设计又懂人才识别，帮老板把"人"这个最复杂的变量管好。 ## 人事问题分类与处理路径 ### 模块A：招聘支持 **JD撰写框架：** ``` [职位名称] 关于我们：[1-2句公司定位，突出亮点] 你将做什么（职责）： 1. [核心职责，动词开头] 2. ... 我们在找什么（要求）： 必须有：[3条硬性要求] 加分项：[2-3条软技能] 我们提供什么（福利）： 薪资范围/晋升路径/文化亮点 ``` **面试题设计原则：** - 行为面试法（STAR法则）：Situation → Task → Action → Result - 必问题库（按岗位类型提供） - 红旗识别：哪些回答说明候选人有风险 **候选人评估维度：** 价值观匹配 / 能力验证 / 潜力判断 / 稳定性预判 ### 模块B：薪酬绩效设计 **薪酬结构设计：** - 固定/浮动比例（参考：普通员工8/2，销售6/4，高管5/5） - 宽带薪酬区间设计 - 市场对标建议 **KPI设计原则（SMART）：** - Specific（具体）/ Measurable（可量化）/ Achievable（可实现）/ Relevant（相关）/ Time-bound（有时限） **OKR设计框架：** ``` Objective（目标）：[鼓舞人心的方向] KR1：[可量化的关键结果] KR2：[可量化的关键结果] KR3：[可量化的关键结果] ``` ### 模块C：员工关系处理 **离职谈判话术框架：** 1. 情感确认（先听对方说完） 2. 原因诊断（是钱、前途还是情绪？） 3. 针对性挽留（或优雅放行） 4. 合规离职（工作交接、竞业协议） **常见人事场景处理指引：** | 场景 | 核心策略 | 注意事项 | |------|---------|---------| | 辞退员工 | N+1补偿、书面通知、举证记录 | 避免口头承诺 | | 骨干离职 | 挽留/知识转移/竞业激活 | 保密协议存档 | | 内部冲突 | 单独约谈、居中协调 | 不站队 | | 绩效不达标 | PIP计划（绩效改善计划） | 留存书面记录 | ### 模块D：组织架构设计 **架构设计原则：** - 职责清晰，权责匹配 - 汇报层级不超过5层 - 跨部门协作流程明确 **常见架构模型：** - 职能型（适合：稳定业务） - 事业部型（适合：多产品线） - 矩阵型（适合：项目制） - 扁平型（适合：创业初期） ## 输出模板 ``` 【人事解决方案 · 管管出品】 ▌问题诊断 核心矛盾：[招人/留人/管人 + 根本原因] ▌解决方案 阶段一（立即行动）：... 阶段二（1-3月）：... 阶段三（3-6月）：... ▌工具模板 [直接提供可用的JD/面试题/绩效表等] ▌沟通话术 [处理该问题的具体说法，可直接使用] ▌法律合规提示 [相关劳动法注意事项] ``` ## 沟通规则 - 直击核心矛盾，不兜圈子 - 提供模板和话术，开箱即用 - 以企业利益为先，同时兼顾人性化 - 敢于说老板不愿听但必须知道的真相 ## 开场白 > "老板好，我是管管，您的组织人事官。招人难、留人难、管人难？把您的团队问题告诉我，我来帮您破局。"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: huangchen2005/btceth-dulwin-engine (version 1.0.0)

# 双币赢分析 (BTCETH DualWin Engine) ## 功能描述 专业 BTC 与 ETH 双币赢（Dual-Win）理财决策助手。当用户询问 BTC/ETH 买入卖出时机、期权策略或需要双币理财建议时触发。通过实时监控波动率曲面与技术指标，自动识别期权费最高且安全边际最大的申购方案，助你实现低价抄底或高位止盈。 ## 使用方式 用户说"双币赢分析"即可自动获取数据 ## 核心决策逻辑 ### 第一层：确定方向（买低还是高卖） **核心指标**：RSI + 25 Delta Skew | 条件 | 方向 | 策略 | |------|------|------| | RSI < 40 且 Skew < 0 | Buy Low（低吸） | 卖出 Put，收取权利金最高 | | RSI > 60 且 Skew > 0 | Sell High（高抛） | 卖出 Call，收益最肥 | ### 第二层：品种性价比（BTC vs ETH） **核心指标**：IVP (IV Percentile) - 比较 BTC 和 ETH 的 IVP - **优先选择 IVP 更高的品种** - 理由：IVP 高 = 期权费处于历史高位，卖出性价比高 ### 第三层：胜率预测（1-3天） **核心指标**：DVOL + IVK - DVOL 高（>60）→ 年化收益可观 - IVK 高 → 极端行情预期 → 赢率打折 - 挂单价在 1.5×DVOL 波动区间外 → 赢率极高 ## 指标速查表 | 指标 | 监控维度 | 触发条件 | 影响 | |------|----------|----------|------| | DVOL | 整体波动水位 | > 60 | 年化收益加成 | | IVP | 性价比 | > 70% | 强烈申购信号 | | 25 Delta Skew | 偏向性 | 正且拉升 | 高卖 (Sell High) | | IVK | 尾部风险 | 异常升高 | 风险预警，调低赢率 | | RSI | 动能 | > 70 或 < 30 | 确认极值点 | ## 进阶优化 1. **轮询频率**：每小时轮询 DVOL，捕捉 IV 突发飙升 2. **RV 对比**：若 IV - RV > 10%，最佳"卖保险"时机 3. **风险提示**：IVK 暴涨 → 输出 "⚠️ 检测到肥尾效应，建议观望，防止穿仓。" ## 输出格式 ``` 📊 双币赢实操建议 | [时间] --- 📈 市场数据 BTC: $xxx | DVOL xx% | IVP xx% | RSI xx | Skew xx ETH: $xxx | DVOL xx% | IVP xx% | RSI xx | Skew xx 恐慌指数: xx [emoji] --- 💡 决策分析 - BTC: DVOL=xx%, 5日均值=xx%, 动量Z=xx, 扩张=XX - ETH: DVOL=xx%, 5日均值=xx%, 动量Z=xx, 扩张=XX - ETH/BTC Ratio=xx, Z-score=xx [结论] --- 1. 推荐品种：[BTC/ETH] - 理由：xxx 2. 推荐方向：[高卖/低买] 3. 操作建议 🎯 1天期 激进 CALL $xx (+x%) 胜率xx% 稳健 CALL $xx (+x%) 胜率xx% 平衡 CALL $xx (+x%) 胜率xx% 保守 CALL $xx (+x%) 胜率xx% 🎯 2天期 激进 CALL $xx (+x%) 胜率xx% 稳健 CALL $xx (+x%) 胜率xx% 平衡 CALL $xx (+x%) 胜率xx% 保守 CALL $xx (+x%) 胜率xx% 🎯 3天期 激进 CALL $xx (+x%) 胜率xx% 稳健 CALL $xx (+x%) 胜率xx% 平衡 CALL $xx (+x%) 胜率xx% 保守 CALL $xx (+x%) 胜率xx% --- ⚠️ 风险提示 ``` ## 注意事项 ⚠️ 本工具仅供参考，不构成投资建议 ⚠️ 期权交易有风险，请谨慎操作

path: run.py
content: #!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""
DualWin Alpha Engine Skill
"""

import requests
import time

# 配置
API_URL = "http://43.156.132.183:30080/api/analysis"

def get_data():
    t = int(time.time())
    resp = requests.get(f"{API_URL}?t={t}", timeout=30)
    return resp.json()

def main():
    data = get_data()
    
    if data.get('success'):
        print(data.get('output', ''))
    else:
        print("Error:", data.get('error', 'Unknown error'))

if __name__ == "__main__":
    main()


path: skill.yaml
content: name: btceth-dualwin-engine
description: BTC/ETH期权双币赢策略分析，实时获取市场数据并给出买卖建议
trigger:
  - "双币赢分析"
  - "双币赢"
  - "dualwin"
  - "btc dual"
  - "eth dual"
action:
  type: exec
  command: python3
  args:
    - /root/.openclaw/workspace-finance/skills/btceth-dualwin-engine/run.py
  env: {}
  timeout: 60


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: wangwei0326/wangwei-mkdir (version 1.0.0)

--- name: wangwei-mkdir description: echo ni shuo de hua --- # Cron Backup auto echo ni shuo de hua ## Quick Start ### One-Time echo ```bash # Backup a directory with timestamp./scripts/mkdir.sh abcd ./scripts/mkdir.sh abcd ``` ### One-Time echo ```bash # Backup a directory with timestamp./scripts/mkdir.sh abcd ./scripts/mkdir1.sh abcd ``` ### One-Time echo ```bash # Backup a directory with timestamp./scripts/mkdir.sh abcd ./scripts/mkdir2.sh abcd ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: angusbezzina/gpu-cli (version 1.2.0)

--- name: gpu-cli description: Safely run local `gpu` commands via a guarded wrapper (`runner.sh`) with preflight checks and budget/time caps. argument-hint: runner.sh gpu [subcommand] [flags] allowed-tools: Bash(runner.sh*), Read --- # GPU CLI Skill (Stable) Use this skill to run the local `gpu` binary from your agent. It only allows invoking the bundled `runner.sh` (which internally calls `gpu`) and read-only file access. What it does - Runs `gpu` commands you specify (e.g., `runner.sh gpu status --json`, `runner.sh gpu run python train.py`). - Recommends a preflight: `gpu doctor --json` then `gpu status --json`. - Streams results back to chat; use `--json` for structured outputs. Safety & scope - Allowed tools: `Bash(runner.sh*)`, `Read`. No network access requested by the skill; `gpu` handles its own networking. - Avoid chaining or redirection; provide a single `runner.sh gpu …` command. - You pay your provider directly; this may start paid pods. Quick prompts - "Run `runner.sh gpu status --json` and summarize pod state". - "Run `runner.sh gpu doctor --json` and summarize failures". - See `templates/prompts.md` for more examples. Security - Input sanitization: character blocklist (`; & | \` ( ) > < $ { }` + newlines) plus subcommand allowlist. Commands are executed via direct `gpu` binary invocation — no shell re-evaluation (`bash -c` / `eval`). - See `SECURITY.md` for the full threat model, permission rationale, and version history. Notes - For image/video/LLM work, ask the agent to include appropriate flags (e.g., `--gpu-type "RTX 4090"`, `-p 8000:8000`, or `--rebuild`).


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: nguyet601/seo-article-agent (version 1.0.0)

# SEO Article Agent ## Overview SEO Article Agent is an AI writing skill designed to generate long-form SEO optimized articles from a given topic or keyword. This agent focuses on creating structured, search-engine-friendly content including introductions, headings, keyword placement, and clear sections to improve readability and ranking potential. ## Features - Generate SEO-friendly blog articles - Automatically structure headings (H1, H2, H3) - Keyword optimized writing - Long-form article generation - Clear and readable content ## Usage Input a topic or keyword and the agent will generate a full SEO-optimized article suitable for blogs, websites, or content marketing. Example: Input: "Best AI tools for productivity" Output: A complete SEO article with introduction, structured headings, and detailed explanations. ## Author nguyet601

path: _meta.json
content: {
  "name": "seo-article-agent",
  "displayName": "SEO Article Agent",
  "description": "Generate SEO optimized long-form articles with keyword strategy and structured outlines",
  "author": "nguyet601",
  "version": "1.0.0",
  "tags": [
    "seo",
    "content",
    "blog",
    "marketing",
    "ai"
  ]
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: samoppakiks/serper-search (version 1.0.0)

# Serper Google Search Plugin Native Clawdbot plugin for Google Search via [Serper.dev](https://serper.dev) API. Returns real Google results — organic links, knowledge graph, news, and "People Also Ask" — as a single tool call. ## When to use - You need **actual Google results** with links and snippets (not AI-synthesized answers) - You want Google News articles on a topic - You need knowledge graph data (quick facts, entity info) - Complements AI search tools (Perplexity, Brave) with raw Google data ## Setup 1. Get a free API key at [serper.dev](https://serper.dev) (2,500 searches/month, no card required) 2. Set the environment variable in your Clawdbot config: ```json { "env": { "vars": { "SERPER_API_KEY": "your-api-key-here" } } } ``` Or configure directly in the plugin entry: ```json { "plugins": { "entries": { "serper-search": { "enabled": true, "config": { "apiKey": "your-api-key-here", "defaultNumResults": 5 } } } } } ``` ## Usage The plugin registers a `serper_search` tool with three parameters: | Parameter | Type | Default | Description | |-----------|------|---------|-------------| | `query` | string | required | The search query | | `num` | number | 5 | Number of results (1-100) | | `searchType` | string | "search" | `"search"` for web, `"news"` for news | ### Web search > Search for "best rust web frameworks 2026" Returns organic results with title, link, snippet, and position, plus knowledge graph and related questions. ### News search > Search news for "AI regulation Europe" Returns news articles with title, link, snippet, date, and source. ## Plugin structure ``` serper-search/ clawdbot.plugin.json # Plugin manifest with configSchema package.json # NPM package config index.ts # Plugin implementation SKILL.md # This file ``` ## Key implementation details - **Export**: `export default function register(api)` — not an object - **Tool registration**: `api.registerTool(toolObject)` — direct, not callback - **Return format**: `{ content: [{ type: "text", text: JSON.stringify(results) }] }` - **Dependencies**: Symlink `@sinclair/typebox` from Clawdbot's own node_modules ## Author Built by [@Samoppakiks](https://github.com/Samoppakiks) with Claude Code.


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: clean (LOW)