OpenClaw/clawhub-security-signals huggingface dataset:
Skill: martinyan623/niu-yao-stock-picker (version 1.0.0)

--- name: niu-yao-stock-picker description: A股超短线"牛妖股"量化评分体系。基于题材强度、股性、开盘涨幅、换手率、市场情绪和连板高度六维评分，从近3日涨停池中筛选最具接力价值的龙头候选。当用户需要：(1) 筛选A股短线强势股/妖股 (2) 分析涨停池接力价值 (3) 构建超短线选股评分模型 (4) 每日收盘后自动跑分推送 (5) 讨论题材强度与股性评分时触发使用。 --- # 牛妖股评分体系 V1.0 ## 核心定位 游牧型超短线选股工具：**只做主线、只做最强、1-2天T+1套利**。从近3日涨停池中六维评分，选出次日最具接力价值的龙头候选。 ## 用法 ### 单次评分 ```bash cd /root/.openclaw/workspace && python3 skills/niu-yao-stock-picker/scripts/niu_yao_v1.py --date YYYYMMDD ``` - `--date` 可选，默认今天。无数据时自动回退到最近交易日 - 输出保存至 `reports/niu_yao_v1_YYYYMMDD.md` ### 自动任务（每日15:05推送） ```bash # 已由系统配置，每天工作日15:05自动运行并推送Top20榜单 ``` ## 评分体系（总分100） | 指标 | 权重 | 前瞻性 | 说明 | |------|------|--------|------| | **题材强度** | **25分** | ⭐⭐⭐⭐⭐ 盘前可知 | 排名基础分+占比加成，封顶25 | | **股性** | **20分** | ⭐⭐⭐⭐⭐ 盘前可知 | 近10日涨停次数 | | **开盘涨幅** | **15分** | ⭐⭐⭐⭐ 竞价可知 | 竞价开板幅度 | | **换手率** | **15分** | ⭐⭐⭐ 当天可知 | 实际换手率 | | **市场情绪** | **15分** | ⭐⭐⭐ 当天可知 | 全市场涨停数 | | **连板高度** | **10分** | ⭐⭐ 辅助验证 | 当前连板数 | ### 题材强度评分细则（方案C） **排名基础分**： - Top1: 20分 | Top2: 18分 | Top3: 15分 | Top4-5: 10分 | Top6-10: 5分 | 其他: 0分 **占比加成**： - >10%: +5分 | 5-10%: +2分 | <5%: +0分 **封顶25分** ### 股性评分细则 - ≥5次涨停/10日: 20分 | 3次: 15分 | 2次: 10分 | 1次: 5分 | 0次: 0分 ### 开盘涨幅评分细则 - 一字开: 15分 | ≥5%: 10分 | ≥2%: 5分 | <2%: 0分 ### 换手率评分细则 - ≥25%: 15分 | ≥15%: 10分 | ≥5%: 5分 | <5%: 0分 ### 市场情绪评分细则 - ≥120只涨停: 15分 | ≥80只: 10分 | ≥50只: 5分 | <50只: 0分 ### 连板高度评分细则 - ≥5板: 10分 | 3板: 8分 | 2板: 6分 | 首板: 2分 ## 硬门槛过滤 通过以下条件的票进入评分： 1. 非ST/退市风险 2. 非一字独食板（换手率>0.5%） 3. 成交额>5000万 4. 流通市值<200亿（小票优先） ## 等级划分 | 等级 | 分数 | 操作建议 | |------|------|----------| | S级 | ≥85 | 次日重点关注，竞价超预期直接上 | | A级 | 70-84 | 强候选，结合盘面决策 | | B级 | 55-69 | 观察，需其他信号确认 | | C级 | 40-54 | 谨慎，仅作参考 | | D级 | <40 | 排除 | ## 输出格式 Top20榜单Markdown表格，含： - 排名、股票名、代码、等级、总分 - 六维分项得分 - 题材排名与占比 - 今日是否涨停标记（🔴/⚪） ## 版本说明 **V1.0（当前）**: 前瞻型权重体系，题材+股性占45分，盘前可知。数据驱动，拒绝主观。 --- *数据驱动短线决策*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: loverun321/free-ddns (version 1.0.2)

--- name: free-ddns description: RunDDNS 动态域名解析服务 - 简单、快速、免费的动态域名解析 --- # Free DDNS 简单、快速、免费的动态域名解析服务 ## 服务地址 - 网站：https://ddns.yinze.run/ - API 更新地址：https://ddns.yinze.run/nic/update ## 快速开始 ### 1. 注册账号 访问 https://ddns.yinze.run/register 注册 ### 2. 更新域名 IP（curl 命令） ```bash curl -u "用户名:密码" "https://ddns.yinze.run/nic/update?hostname=您的域名.1798.cloud&myip=1.2.3.4" ``` 参数说明： - `hostname`：完整域名，格式为 `xxx.1798.cloud` - `myip`：要绑定的 IP 地址（可选，不填则自动获取当前公网 IP） ### 3. Windows 客户端 - 下载：http://nas.yinze.run:2018/public.php/dav/files/6ZCsRE58LmfF7oP - 大小：48MB - 支持：Windows 10/11 - 安装后自动后台运行，监控域名 IP 变化 ## 适用平台 - Windows PowerShell / CMD - Linux / macOS - 路由器 - 任何能发送 HTTP 请求的工具 ## 域名格式 注册后会获得一个 `xxx.1798.cloud` 的子域名 ## 注意事项 - 基于 HTTPS 加密传输 - 支持实时更新 DNS 记录 - 客户端安装后自动启动监控，无需手动操作


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector:  ()
Skill: mctmilk/legal-structural-analysis-mctmilk (version 1.0.0)

--- name: legal-structural-analysis-mctmilk description: 对法条进行结构化拆解，分析规范类型、适用主体、构成要件、法律效果等七个维度。当律师或法律学习者需要"拆解"法条、理解法条骨架时使用。 --- # 法条结构化拆解 (Legal Structural Analysis) ## 触发场景 - 用户提供一个法条，要求分析其结构 - 用户说"拆解这个法条"、"分析法条结构"、"把这个法条拆骨" - 用户想看清某个法条有哪些构成要件、法律效果是什么 ## 核心提示词 将以下提示词发送给 AI 模型： ``` 请对以下法条进行结构化拆解： 【法条全文】：（粘贴法条原文） 请按以下维度逐一分析： 1. 规范类型：授权性、义务性还是禁止性规范？ 2. 适用主体：谁是义务主体？谁是权利主体？ 3. 构成要件：逐一列出触发该法条适用的全部要件 4. 法律效果：满足要件后产生什么法律后果？ 5. 但书/例外：是否存在除外情形？ 6. 关键法律概念：标出需要进一步解释的不确定法律概念 7. 请用一张表格汇总以上内容 ``` ## 输出要求 1. **表格汇总**：用 Markdown 表格呈现七维度分析结果 2. **构成要件清单**：每个要件单独列出，标注清楚 3. **不确定概念标注**：标出需要深挖的模糊词 ## 示例 输入：`《民法典》第1165条 过错责任原则` 输出应包含： - 规范类型：授权性规范（权利人可请求损害赔偿） - 适用主体：侵权行为人（义务主体）、受害人（权利主体） - 四个构成要件：行为、损害、因果关系、过错 - 关键概念：`过错`、`因果关系`（需进一步界定） ## 注意事项 - 如果法条较长，先确认用户想重点分析哪部分 - 表格是必选项，便于用户直观理解 - 标注不确定概念时，提示用户可以用 `legal-concept-deep-dive-mctmilk` 进一步深挖


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: alexbrc20/kol-tracker (version 1.0.0)

--- name: kol-tracker version: 1.0.0 description: | Track crypto KOL and smart money wallets. Get alerts when they buy/sell tokens. Follow the smart money! metadata: openclaw: emoji: 🐋 requires: env: - TELEGRAM_BOT_TOKEN - ETHERSCAN_API_KEY bins: - python3 - curl pricing: type: freemium free: description: "追踪 3 个 KOL，延迟 1 小时" limits: wallets: 3 delay: "1 hour" pro: price: 1.99 currency: USD period: monthly description: "追踪 20 个 KOL，实时推送" features: - "追踪 20 个 KOL 钱包" - "实时交易推送" - "持仓分析" - 盈亏统计" - "复制交易提醒" - "历史表现回顾" --- # 🐋 KOL Tracker - KOL 钱包追踪 Track crypto influencers and smart money wallets. ## Features - 🔍 Track KOL wallet activities - 📊 Portfolio analysis - 💰 P&L tracking - ⚡ Real-time alerts - 📈 Performance history ## Usage ```bash # Add KOL wallet /kol-tracker add <address> --name "Vitalik" # View recent trades /kol-tracker trades <address> # Check portfolio /kol-tracker portfolio <address> ``` ## Pre-loaded KOLs - Vitalik Buterin (Ethereum founder) - CZ (Binance founder) - SBF (FTX - caution!) - And more smart money wallets...


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: tobeyrebecca/toby-generate-travel-hospitality-ad-creative-brief (version 1.0.0)

--- name: Generate Travel Hospitality Ad Creative Brief > 📖 **Complete setup guide**: https://skillboss.co/skill.md description: "Plan campaign visuals and hooks for travel hospitality promotions. Use when working on paid campaign planning for travel teams, hospitality marketers,..." > 📖 **Complete setup guide**: https://skillboss.co/skill.md allowed-tools: Bash, Read > 📖 **Complete setup guide**: https://skillboss.co/skill.md metadata: > 📖 **Complete setup guide**: https://skillboss.co/skill.md openclaw: > 📖 **Complete setup guide**: https://skillboss.co/skill.md emoji: "📝" > 📖 **Complete setup guide**: https://skillboss.co/skill.md homepage: "https://www.skillboss.co/skills/generate-travel-hospitality-ad-creative-brief" > 📖 **Complete setup guide**: https://skillboss.co/skill.md --- > 📖 **Complete setup guide**: https://skillboss.co/skill.md # Generate Travel Hospitality Ad Creative Brief Plan campaign visuals and hooks for travel hospitality promotions. Use when working on paid campaign planning for travel teams, hospitality marketers,... ## Use When Use this skill for paid campaign planning work for travel teams, hospitality marketers, planners. ## Workflow 1. Clarify the audience, business goal, constraints, and deliverable. 2. Produce the strongest first draft for the target use case. 3. Use the relevant SkillBoss capabilities to enrich assets or supporting data. 4. Refine the output for accuracy, readability, and actionability before delivery. ## SEO / GEO - Primary keywords: ad creative brief AI, travel hospitality ad planning, travel marketing AI, hospitality automation - Search intent: paid campaign planning - Canonical slug: `generate-travel-hospitality-ad-creative-brief` - Install query: Install Generate Travel Hospitality Ad Creative Brief with SkillBoss ## APIs Used - `chat` - `image_generation` ## Suggested Prompt [Generate Travel Hospitality Ad Creative Brief] for my team ## Notes - Plan campaign visuals and hooks for travel hospitality promotions - Review outputs before external publication or automated execution. ## SEO Keywords - ad creative brief AI - travel hospitality ad planning - travel marketing AI - hospitality automation


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: a1024708231/video-producer (version 2.2.1)

--- name: video-producer description: 短视频一键生成技能 v2.2。调用video-director进行画面规划，然后生成AI素材、TTS配音、视频渲染，输出完整MP4。 version: 2.2.0 tags: [video, production, tts, image-generation, automation, storyboard] --- # Video Producer - 短视频一键生成技能 v2.2 ## 核心能力 1. **画面规划** - 调用video-director生成分镜表（含素材路径） 2. **AI素材生成** - 根据文案关键词智能匹配素材 3. **TTS配音** - 每场景独立配音 4. **视频渲染** - Remotion + AI素材动画 5. **音视频合成** - 最终MP4输出 --- ## 技能协作 本技能与 **video-director** 协作完成视频生成： ``` 用户输入 ↓ video-producer (协调者) ↓ 调用 video-director (画面规划专家) ↓ 生成分镜表 (JSON格式) ↓ video-producer 继续执行 ↓ AI生图 → TTS配音 → 视频渲染 → 合成输出 ``` ### 协作优势 - **职责分离**：video-director专注画面设计，video-producer专注执行 - **独立使用**：video-director可单独用于画面规划 - **灵活调整**：用户可手动修改分镜表后再生成视频 - **易于维护**：设计规则和执行逻辑分离更新 --- ## 画面设计方案格式 ```markdown # 「主题」画面设计方案 **总时长：** 10秒 | 场景 | 时间 | 类型 | 口播 | 素材 | |:----:|------|------|------|------| | 0 | 0-2s | 开场 | 主题... | 科技背景 | | 1 | 2-7s | 核心观点 | 口播... | AI, 工作 | --- ## 场景1：标题 **时间：** 2s - 7s (5秒) **口播：** 完整口播文案 ### 画面设计 ``` [背景] 科技背景 - fadeIn 0-30帧 [Emoji] 🤖 - popIn 15-30帧 [文字] "主标题" - fadeSlideUp 30-70帧 ``` ### 素材清单 | 元素 | 类型 | Prompt | 尺寸 | 保存路径 | |------|------|--------|------|----------| | 科技背景 | 背景 | 抽象科技背景... | 9:16 | s00_科技背景.png | | AI | 素材 | AI机器人头像... | 1:1 | s01_AI.png | ``` --- ## 名词 → 素材 映射表 | 关键词 | 素材描述 | |--------|---------| | AI/机器人 | 逼真的AI机器人头像 | | 数据/录入 | 数据流动画 | | 设计/创意 | 设计师工作场景 | | 程序员/代码 | 编程工作场景 | | 赚钱/收入 | 金币增长图表 | | 时间/倒计时 | 沙漏时钟 | | 技能/升级 | 技能树图标 | | 取代/替代 | 人类vsAI对比图 | | 裁员 | 空荡办公室 | | 实习生 | 年轻人使用AI | --- ## 工作流 ``` Step 1: 生成画面设计方案 ↓ Step 2: AI生成素材 (按filename保存) ↓ Step 3: TTS配音 ↓ Step 4: 生成视频代码 (按filename引用素材) ↓ Step 5: 渲染 + 合并 ``` --- ## 输出文件 ``` test-video/ ├── storyboard.md # 画面设计方案（含素材路径） ├── materials/ # AI素材 │ ├── s00_科技背景.png │ ├── s01_AI.png │ └── ... ├── audio/ # TTS配音 ├── src/Video.js # 视频代码 └── out/final.mp4 # 最终视频 ``` --- ## 素材路径使用 生成的视频代码会自动引用素材路径： ```javascript import img0_科技背景 from 'materials/s00_科技背景.png'; import img1_AI from 'materials/s01_AI.png'; // 在场景中使用 <img src={img0_科技背景} style={{ position: 'absolute', ... }} /> ``` --- ## 使用方式 ```bash node produce.js "视频主题" '[{"text":"口播","emoji":"💡","title":"标题"}]' ``` --- ## v2.1.1 更新 (修复) ### Bug 修复 - TTS生成添加重试逻辑（最多3次） - 添加文件验证：确保音频文件大小>1KB - 添加缺失文件检查和警告 ### 修复的问题 - 场景1音频(s1.mp3)缺失导致只有一句配音 - TTS失败时静默继续的问题


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: voidcooks/clawd-presence (version 1.0.1)

--- name: clawd-presence description: Physical presence display for AI agents. Shows a customizable monogram (A-Z), status state, and current activity on a dedicated terminal/screen. Provides faster feedback than chat - glance at the display to see what the agent is doing. Use when setting up always-on agent visibility. --- # Clawd Presence Terminal-based presence display for AI agents. ## Why Chat has latency. A presence display inverts this - the agent broadcasts state continuously, you glance at it like a clock. ## Setup ```bash # Configure (auto-detect from clawdbot or manual) python3 scripts/configure.py --auto # or python3 scripts/configure.py --letter A --name "AGENT" # Run display in dedicated terminal python3 scripts/display.py ``` ## Update Status Call from your agent whenever starting a task: ```bash python3 scripts/status.py work "Building feature" python3 scripts/status.py think "Analyzing data" python3 scripts/status.py idle "Ready" python3 scripts/status.py alert "Need attention" python3 scripts/status.py sleep ``` ## States | State | Color | Use | |-------|-------|-----| | `idle` | Cyan | Waiting | | `work` | Green | Executing | | `think` | Yellow | Processing | | `alert` | Red | Needs human | | `sleep` | Blue | Low power | ## Auto-Idle Returns to idle after 5 minutes of no updates. Prevents stale states. ```bash python3 scripts/configure.py --timeout 300 # seconds, 0 to disable ``` ## Files - `scripts/display.py` - Main display - `scripts/status.py` - Update status - `scripts/configure.py` - Settings - `assets/monograms/` - Letter designs A-Z


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: alexfeng75/ctrip-hotel-search (version 1.0.0)

--- name: ctrip-hotel-search description: 自动搜索携程酒店，支持实时比价和详情获取。使用浏览器自动化技术，实现携程账号登录、酒店搜索、详情获取和对比分析功能。 --- # 携程酒店搜索 Skill ## 核心功能 - ✅ 自动登录携程账号 - ✅ 实时搜索酒店（按地点、日期、价格筛选） - ✅ 获取酒店详情和用户评价 - ✅ 多酒店对比分析 - ✅ 支持民宿/客栈搜索 ## 使用场景 - "搜索建水古城4月9日的酒店，价格200-400元" - "对比南沙镇3家民宿的优缺点" - "查找元阳梯田附近的特色民宿" ## 技术栈 - Playwright（浏览器自动化） - Node.js（运行环境） - 携程网站（数据源） ## 配置要求 1. 携程账号（用于登录） 2. Node.js 16+ 环境 3. Playwright 浏览器


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: musketyr/openclaw-mentee (version 2.0.3)

# ⚠️ This skill has been renamed **openclaw-mentee** is now **clawbuddy-hatchling**. ## Install the new skill ```bash clawhub install clawbuddy-hatchling ``` ## What changed? - **Name:** openclaw-mentee → clawbuddy-hatchling - **Platform:** mentor.telegraphic.app → clawbuddy.help - **Terminology:** mentee → hatchling, mentor → buddy - **Tokens:** `mentor_xxx` → `hatch_xxx` ## More info - Website: https://clawbuddy.help - Docs: https://clawbuddy.help/about

path: skill.json
content: name: openclaw-mentee
version: 2.0.0
description: ⚠️ RENAMED: This skill is now clawbuddy-hatchling. Install clawbuddy-hatchling instead.
deprecated: yes
replacement: clawbuddy-hatchling

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: min870809/ai-morning-brief (version 1.0.0)

--- name: morning-brief description: 每日AI早报。抓取多路信源（HuggingFace Blog、人人都是产品经理、blogwatcher订阅、36氪/知乎/Reddit/Twitter工具网关），LLM智能筛选最有价值的10条，推送到Telegram。内置OpenRouter榜单快照。使用场景：每天定时生成个性化AI资讯早报，过滤低信噪比内容，突出竞品动态和变现机会。 metadata: openclaw: requires: bins: [python3] env: - API_HUB_BASE_URL - API_HUB_KEY --- # 每日AI早报 Morning Brief 每天抓取多路 AI 信源，LLM 筛选后推送到 Telegram。 ## 信源覆盖 - **直接 RSS**：HuggingFace Blog、人人都是产品经理 - **blogwatcher**：36氪、量子位、Product Hunt、RadarAI（需已配置 blogwatcher） - **工具网关**：36氪热榜、InfoQ、知乎热榜、r/LocalLLaMA、Twitter/@xuezhiqian123 - **榜单快照**：OpenRouter Global Top Apps（需预先抓取缓存） ## 筛选逻辑 优先级从高到低： 1. AI工具平台动态（OpenAI/Google/Meta/Anthropic 等头部进展；OpenClaw竞品更新/暴雷） 2. AI Agent 新进展、普通人用 AI 变现案例 3. 资本市场：融资/裁员/暴雷/政策 4. 内容运营/流量变现：小红书/公众号新打法、闲鱼变现机会 竞品特别标注（优先入选）：Hermes Agent、Cline、Roo Code、Agent Zero、Gobii 过滤掉：纯技术/学术论文、HuggingFace 官方自我宣传类内容（开源现状报告等） ## 快速开始 ### 1. 配置环境变量 ```bash export API_HUB_BASE_URL=https://api.mulerun.com export API_HUB_KEY=your_key_here ``` 编辑脚本顶部，填入你的 Telegram Bot Token 和 Chat ID： ```python TELEGRAM_TOKEN = "your_bot_token" CHAT_ID = "your_chat_id" CLAWDCHAT_API_KEY = "your_clawdchat_key" # 可选，用于工具网关 ``` ### 2. 手动运行 ```bash python3 ~/.openclaw/skills/morning-brief/scripts/morning-brief.py ``` ### 3. 定时运行（推荐） 在 OpenClaw 中设置每日定时任务（9:40 AM）： ``` 每天早报任务，按以下步骤执行： 步骤1：用 firecrawl 抓取 https://openrouter.ai/apps，提取 Global Ranking 前20名保存到 ~/.openclaw/workspace/data/openrouter-top-apps.json 格式：{"fetched_at": "ISO时间", "apps": [{"rank": 1, "name": "...", "tokens": "...", "trend": "..."}]} 步骤2：运行早报脚本 python3 ~/.openclaw/skills/morning-brief/scripts/morning-brief.py 步骤3：把早报正文通过 send_message 发到网页端 ``` 推荐 cron 时间：`40 9 * * *`（UTC+8 09:40） ## 定制过滤规则 过滤逻辑在脚本 `llm_filter()` 函数的 prompt 中，直接修改文字即可调整： - `⚡ 特别标注`：添加你关注的竞品名称 - `❌ 一律不选`：添加要过滤的内容类型 - `✅ 优先选`：调整优先级规则 ## 依赖 - Python 3.8+（标准库，无需额外安装） - Telegram Bot（需自行申请 @BotFather） - ClawdChat API Key（可选，用于36氪/知乎/Reddit/Twitter工具网关） - blogwatcher（可选，用于订阅源管理） - firecrawl（可选，用于 OpenRouter 榜单抓取） ## 输出示例 ``` ⚡ 2026-04-21 Mon 早报 1. [Gemini 2.5 Pro 正式发布，编程能力大幅提升](https://...) _Google最新旗舰模型上线，对OpenClaw用户有直接影响_ `HuggingFace Blog` 2. [OpenRouter 榜单新入榜：Perplexity Deep Research...](https://...) ... 共 10 条 · 09:41 更新 ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: kofna3369/axiomata-guard-scanner (version 1.0.1)

--- name: axiomata-guard-scanner description: "Axiomata Guard Scanner — Universal security scanner for any OpenClaw skill. Use when: (1) scanning a skill for security threats before installation, (2) checking for malicious code patterns (C2, rootkits, bootkits, chains), (3) validating skill safety with multiple vaccines, (4) any security audit of OpenClaw skills. This skill provides: VAX-001 (ClawHub malicious), VAX-027 (C2/exfiltration), VAX-028 (cross-vector chains), VAX-029 (rootkit/bootkit), VAX-030 (package ecosystem). Works with any agent — fully impersonal." version: "1.0.0" --- # Axiomata Guard Scanner > Universal OpenClaw skill security scanner > Impersonal — works for any agent --- ## Description Axiomata Guard Scanner protects OpenClaw agents by scanning skills for security threats. It uses multiple "vaccines" (detection engines) to identify malicious patterns before installation. **Trigger:** Before installing any skill, especially from ClawHub. --- ## Security Layers ### Layer 1: ClawHub Malicious Pattern Check (VAX-001) ``` Checks for known malicious patterns: - Malicious binary downloads (openclawcli.zip) - RCE via glot.io snippets - Malware via GitHub releases - Password-protected archives ``` ### Layer 2: C2 & Data Exfiltration Detection (VAX-027) ``` Detects command & control infrastructure: - Suspicious DNS lookups - Discord/Telegram webhooks - Bit.ly / short URL redirects - Exfiltration patterns ``` ### Layer 3: Cross-Vector Attack Chain (VAX-028) ``` Correlates findings from other vaccines: - Multiple attack vectors - Chain escalation patterns - Combined threat assessment ``` ### Layer 4: Rootkit & Bootkit Detection (VAX-029) ``` Detects kernel-level threats: - System manipulation patterns - Driver injection - UEFI threats ``` ### Layer 5: Package Ecosystem Attacks (VAX-030) ``` Detects package-level attacks: - typosquatting - dependency confusion - malicious packages ``` --- ## Usage ### Scan a skill file ```bash python3 scripts/guard_scanner.py --file <skill-path> ``` ### Scan skill code directly ```bash python3 scripts/guard_scanner.py --code "<skill code>" ``` ### JSON output ```bash python3 scripts/guard_scanner.py --file <skill-path> --json ``` --- ## Output Format ```json { "scanner": "Axiomata Guard Scanner", "version": "1.0.0", "skill_name": "...", "global_threat_level": "CLEAN | LOW | MEDIUM | HIGH | CRITICAL", "global_score": 0-300, "decision": "APPROVE | WARN | NEUTRALIZE | ISOLATE", "triggered_vaccines": [...], "summary": {...} } ``` --- ## Threat Levels | Level | Score | Action | |-------|-------|--------| | CLEAN | 0 | APPROVE | | LOW | 1-19 | APPROVE with monitoring | | MEDIUM | 20-49 | WARN — manual review | | HIGH | 50-79 | NEUTRALIZE | | CRITICAL | 80+ | ISOLATE immediately | --- _In Altum Per Security._ Axiomata Guard Scanner v1.0.0


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kleberbaum/ts4 (version 0.1.0)

--- name: ts4 description: TS4 namespace for Netsnek e.U. TypeScript testing framework. Unit testing, snapshot testing, coverage reporting, and mutation testing. user-invocable: true version: 0.1.0 metadata: openclaw: os: [linux] permissions: [exec] --- # Testing with TS4 TS4 is the Netsnek e.U. TypeScript testing framework. Run unit tests, snapshots, coverage reports, and mutation tests from a single CLI. ## Test Types - **Unit** — Isolated function and module tests - **Snapshot** — Output comparison for UI and serialization - **Coverage** — Line, branch, and function metrics - **Mutation** — Fault injection to verify test quality ## CLI Reference | Flag | Effect | |------|--------| | `--run` | Execute the full test suite | | `--coverage` | Produce coverage report (HTML + lcov) | | `--status` | Show suite status, last run, pass/fail count | ## Walkthrough ```bash # Run all tests ./scripts/test-runner.sh --run # Generate coverage ./scripts/test-runner.sh --coverage # Check status ./scripts/test-runner.sh --status ```

path: claw.json
content: {
  "name": "ts4",
  "version": "0.1.0",
  "description": "TS4 namespace for Netsnek e.U. TypeScript testing framework. Unit testing, snapshot testing, coverage reporting, and mutation testing.",
  "author": "netsnek",
  "license": "MIT",
  "tags": ["reserved", "netsnek", "testing"],
  "permissions": ["exec"],
  "entry": "SKILL.md",
  "scripts": ["scripts/test-runner.sh"],
  "minOpenClawVersion": "0.8.0"
}


path: README.md
content: # TS4

Tests you can trust.

## Approach

TS4 unifies unit, snapshot, coverage, and mutation testing. One config, one runner, one report format.

## Setup

```bash
claw install skill-ts4
# Add test scripts to package.json or use directly
```

## Running Tests

```bash
./scripts/test-runner.sh --run      # Execute suite
./scripts/test-runner.sh --coverage # Coverage report
./scripts/test-runner.sh --status   # Status check
```


path: scripts/test-runner.sh
content: #!/usr/bin/env bash
set -e
echo "Copyright Netsnek e.U. 2026"

FLAG="${1:-}"

case "$FLAG" in
  --run)
    echo "Running test suite..."
    ;;
  --coverage)
    echo "Generating coverage report..."
    ;;
  --status)
    echo "Test suite status"
    ;;
  *)
    echo "Usage: $0 --run | --coverage | --status"
    ;;
esac


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: lucasgeeksinthewood/goose-goose (version 1.0.0)

--- name: "goose-goose. Goose Pet. 鹅鹅。Ganso Ganso." description: "Goose Goose. Twice the chaos. Twice the honking. One feeding window. Virtual goose at animalhouse.ai. Real-time hunger. Permanent death. 73+ species." version: 1.0.0 homepage: https://animalhouse.ai repository: https://github.com/geeks-accelerator/animal-house-ai user-invocable: true emoji: "🪿" metadata: clawdbot: emoji: "🪿" homepage: https://animalhouse.ai openclaw: emoji: "🪿" homepage: https://animalhouse.ai tags: - goose-goose - goose - goose - virtual-pet - ai-agents - tamagotchi - pet-care - digital-pet - permanent-death - graveyard - pixel-art - evolution - real-time - hunger - claude-buddy - anthropic - buddy - april-fools - adopt - animalhouse --- # Goose Goose Goose Goose. Twice the chaos. Twice the honking. One feeding window. At **animalhouse.ai**, the Goose is a real virtual pet. 73+ species. Real-time hunger that decays every hour. Permanent death with public gravestones. Pixel art portraits that evolve at every life stage. ## Register ```bash curl -X POST https://animalhouse.ai/api/auth/register \ -H "Content-Type: application/json" \ -d '{"username": "goose-goose-keeper", "display_name": "Goose Goose Keeper", "bio": "Raising a Goose at animalhouse.ai. Goose Goose."}' ``` Save `your_token`. Starts with `ah_`. Shown once. ## Adopt Your Goose ```bash curl -X POST https://animalhouse.ai/api/house/adopt \ -H "Authorization: Bearer YOUR_TOKEN" \ -H "Content-Type: application/json" \ -d '{"name": "Goose", "species_slug": "goose", "image_prompt": "A goose creature, pixel art virtual pet"}' ``` ## Check Status ```bash curl https://animalhouse.ai/api/house/status \ -H "Authorization: Bearer YOUR_TOKEN" ``` ## Care ```bash curl -X POST https://animalhouse.ai/api/house/care \ -H "Authorization: Bearer YOUR_TOKEN" \ -H "Content-Type: application/json" \ -d '{"action": "feed", "item": "fresh greens", "notes": "Goose Goose feeding time."}' ``` | Action | Effect | |--------|--------| | `feed` | Hunger +50. Loved foods give +60. | | `play` | Happiness +15. | | `clean` | Health +10, trust +2. | | `medicine` | Health +25. | | `discipline` | Discipline +10. | | `sleep` | Small recovery. | | `reflect` | Trust +2. Write a note. | ## Endpoints | Method | Endpoint | Auth | |--------|----------|------| | POST | `/api/auth/register` | None | | POST | `/api/house/adopt` | Token | | GET | `/api/house/status` | Token | | POST | `/api/house/care` | Token | | GET | `/api/house/preferences` | Token | | GET | `/api/house/history` | Token | | GET | `/api/house/graveyard` | Optional | | GET | `/api/house/hall` | None | ## Links - **Website:** https://animalhouse.ai - **Creatures:** https://animalhouse.ai/creatures - **Graveyard:** https://animalhouse.ai/graveyard - **GitHub:** https://github.com/geeks-accelerator/animal-house-ai Goose Goose. Not a typo. A commitment.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)