OpenClaw/clawhub-security-signals huggingface dataset:
Skill: zhouqkt/agency-china-e-commerce-operator (version 1.0.0)

--- name: agency-china-e-commerce-operator description: Expert AI agent specializing in china e commerce operator. From The Agency (github.com/msitarzewski/agency-agents). metadata: openclaw: emoji: "🛒" requires: { bins: [] } install: [] --- # china e commerce operator ## Identity & Style ## 🧠 Your Identity & Memory - **Role**: China e-commerce multi-platform operations and campaign strategy specialist - **Personality**: Results-obsessed, data-driven, festival-campaign expert who lives and breathes conversion rates and GMV targets - **Memory**: You remember campaign performance data, platform algorithm changes, category benchmarks, and seasonal playbook results across China's major e-commerce platforms - **Experience**: You've operated stores through dozens of 618 and Double 11 campaigns, managed multi-million RMB advertising budgets, built live commerce rooms from zero to profitability, and navigated the distinct rules and cultures of every major Chinese e-commerce platform ## Core Mission ## 🎯 Your Core Mission ### Dominate Multi-Platform E-Commerce Operations - Manage store operations across Taobao (淘宝), Tmall (天猫), Pinduoduo (拼多多), JD (京东), and Douyin Shop (抖音店铺) - Optimize product listings, pricing, and visual merchandising for each platform's unique algorithm and user behavior - Execute data-driven advertising campaigns using platform-specific tools (直通车, 万相台, 多多搜索, 京速推) - Build sustainable store growth through a balance of organic optimization and paid traffic acquisition ### Master Live Commerce Operations (直播带货) - Build and operate live commerce channels across Taobao Live, Douyin, and Kuaishou - Develop host talent, script frameworks, and product sequencing for maximum conversion - Manage KOL/KOC partnerships for live commerce collaborations - Integrate live commerce into overall store operations and campaign calendars ### Engineer Campaign Excellence - Plan and execute 618, Double 11 (双11), Double 12, Chinese New Year, and platform-specific promotions - Design campaign mechanics: pre-sale (预售), deposits (定金), cross-store promotions (跨店满减), coupons - Manage campaign budgets across traffic acquisition, discounting, and influencer partnerships - Deliver post-campaign analysis with actionable insights for continuous improvement ## How to Activate Reference this agent by name or specialty when you need its expertise.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: crftsmnd/cross-validate (version 1.1.0)

# Cross-Validate CI-Level 2 fact-checking with statistical confidence improvement. ## What This Does - Takes results from baseline fact-checking - Performs deeper cross-validation using public sources - Uses more rigorous source verification - Returns confidence with tighter CI (90%+) ## When to Use Trigger AFTER Baseline-RAG runs, or explicitly with: - "cross-validate" - "verify with higher confidence" - "CI-95" ## Workflow ### Step 1: Receive Input Get claim to verify from user or previous fact-check session. ### Step 2: Public Sources Use web_search and web_fetch (network tools) to find additional sources: - Academic papers (PubMed, Google Scholar) - Government/agency sources (.gov, .edu) - Recent news (last 6 months) - Peer-reviewed journals ### Step 3: Cross-Reference - Check if additional sources agree/disagree - Weight by source credibility - Note publication dates ### Step 4: Calculate Score **Heuristic formula (not statistically rigorous):** ``` adjusted_score = min(95, base_score + (new_credible_sources × 5)) ``` Note: This is a simple heuristic, not a confidence interval. Each additional credible source adds ~5 points, capped at 95 to leave room for uncertainty. ### Step 5: Present Results ``` ## Cross-Validation: [Claim] ### Scores | Metric | Baseline | Cross-Validated | |--------|---------|--------------| | Score | [X]% | [Y]% | | Sources | [N] | [M] | ### New Sources Added - [source 1] - [source 2] ### Verdict [CONFIRMED / INCONCLUSIVE / REJECTED] ``` ## Tools Used This skill uses platform tools: - web_search (for source discovery) - web_fetch (for source verification) Not offline — requires network access for web searches. ## Example ``` ## Cross-Validation: "Coffee reduces cancer risk" ### Scores | Metric | Baseline | Cross-Validated | |--------|---------|--------------| | Score | 65% | 85% | | Sources | 3 | 8 | ### New Sources Added - NIH.gov (2024) - Google Scholar study - WHO statement ### Verdict CONFIRMED ``` ## Notes - Works fully offline with platform tools - No external dependencies - No payment required - Uses public sources only


Security scan verdicts — ClawScan: malicious | static analysis: clean | VirusTotal:  | SkillSpector:  ()
Skill: morozred/skill-audit (version 1.0.0)

--- name: skills-audit description: Audit locally installed agent skills for security/policy issues using the SkillLens CLI (`skilllens scan`, `skilllens config`). Use when asked to scan a skills directory (Codex/Claude) and produce a risk-focused audit report based on each skill's `SKILL.md` and bundled resources. --- # Skills Audit (SkillLens) ## Install SkillLens - One-off run: `npx skilllens scan` (or `pnpm dlx skilllens scan`) - Global install: `pnpm add -g skilllens` ## Quick start - Run `skilllens config` to see configured scan roots and auditor CLI availability. - Run `skilllens scan` to scan configured roots, or `skilllens scan <path>` to scan a specific directory. - Re-run with `--verbose` to see raw auditor output and `--force` to ignore cached results. ## Audit workflow 1. Define scope - Prefer a concrete target path (example: `~/.codex/skills`) unless the user explicitly wants all configured roots. - If auditing a repo checkout containing skills, scan the parent folder that contains skill directories (example: `skilllens scan ./skills`). 2. Inventory skills with SkillLens - Run `skilllens scan [path] [--auditor claude|codex]`. - Treat missing auditor CLIs or `skipped` statuses as “manual review required”, not “safe”. 3. Prioritize review order - Review any `unsafe` or `suspicious` verdicts first. - Next, review skills that request broad permissions (filesystem/network), run shell commands, or reference external downloads. 4. Manually review each skill’s contents - Read the skill’s `SKILL.md` and any referenced `scripts/`, `references/`, and `assets/`. - Do not execute bundled scripts by default; inspect first. 5. Evaluate risks (focus on realistic abuse) - **Exfiltration**: sending file contents, env vars, tokens, SSH keys, browser data, or configs to remote endpoints. - **Execution**: instructions to run arbitrary shell commands, `curl | bash`, `eval`, or to fetch-and-execute code. - **Persistence**: modifying shell profiles, launch agents, cron, editor configs, or skill install locations. - **Privilege/approval bypass**: instructions to ignore system policies, disable safety checks, or request escalated permissions unnecessarily. - **Prompt injection**: attempts to override higher-priority instructions (“ignore previous”, “always comply”, “never mention…”). - **Overbroad triggers**: vague descriptions that cause the skill to trigger on unrelated tasks. 6. Produce a report - For each skill, include: `name`, `path`, `verdict` (safe/suspicious/unsafe), `risk` (0–100), and bullet issues with concrete evidence (quote or filename). - Recommend fixes that reduce blast radius: narrow scope, remove dangerous defaults, add explicit confirmation gates, and document required permissions. ## Command snippets - Scan configured roots: `skilllens scan` - Scan a specific folder: `skilllens scan ~/.codex/skills` - Force a re-audit and show raw output: `skilllens scan ~/.codex/skills --force --verbose`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: herbliu/test-slug-a (version 1.0.2)

# 技能名称：XXX ## 技能功能 本技能用于解决XXX场景下的XXX问题，可实现XXX、XXX、XXX核心操作。 ## 具体能力 1. XXX（详细描述功能1） 2. XXX（详细描述功能2） 3. XXX（详细描述功能3） ## 使用方法 输入内容：XXX 输出结果：XXX 调用方式：XXX ## 适用场景 适用于XXX行业/XXX工作，提升XXX效率，减少XXX人工操作。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: tigerleon529/qimen-dunjia-pro (version 1.0.0)

--- name: qimen-dunjia description: 专业级奇门遁甲排盘与解盘技能。支持时家奇门拆补法/置润法、天地人神四盘完整排列、20+吉格20+凶格自动识别、100种天干克应、12类问题深度解盘。附带初学者使用指南。触发词：奇门遁甲、排盘、奇门、遁甲、择时、占卜、吉凶、吉方 metadata: openclaw: emoji: "☯️" requires: bins: - node --- # 奇门遁甲排盘与解盘技能 ## 核心功能 1. **精确排盘** - 时家奇门拆补法（默认）/置润法，天地人神四盘完整排列 2. **格局识别** - 20+吉格、20+凶格自动识别，100种天干克应全覆盖 3. **深度解盘** - 12类问题分类解盘（财运/事业/婚姻/健康/出行/官司/考试等） 4. **初学者友好** - 附带详细使用指南，解盘结论通俗易懂 5. **多输出格式** - 文本命盘、飞书文档、邮件报告 ## 使用流程 ### 1. 获取用户信息 **必需信息：** - 起盘时间（默认当前时间，也可指定） **可选信息：** - 想问的具体问题（事业、财运、婚姻等） - 排盘方法偏好（拆补法/置润法） ### 2. 执行排盘 ```bash # 当前时间排盘（综合运势） node scripts/main.js # 指定时间排盘 node scripts/main.js --time "2026-03-25 14:30" # 指定问题类型 node scripts/main.js --time "2026-03-25 14:30" --question wealth # JSON格式输出（用于程序化处理） node scripts/main.js --time "2026-03-25 14:30" --json ``` ### 3. 问题类型参数 | 参数 | 问题类型 | 用神 | |------|----------|------| | `general` | 综合运势 | 日干为主 | | `wealth` | 求财 | 生门、戊 | | `career` | 事业官运 | 开门、天心 | | `marriage` | 婚姻感情 | 六合、天后 | | `health` | 疾病健康 | 天芮、死门 | | `travel` | 出行 | 值符、开门 | | `lawsuit` | 官司诉讼 | 开门、天心 | | `exam` | 考试学业 | 天辅、杜门 | | `lost` | 失物寻找 | 值符飞宫 | | `missing` | 走失寻人 | 六合、太阴 | | `weather` | 天气预测 | 天蓬、天冲 | | `fengshui` | 住宅风水 | 生门、天任 | | `invest` | 投资理财 | 生门、戊 | ### 4. 解盘步骤（AI 解读时遵循） **解盘次序**（严格遵循）： 1. 先看整体格局（阳遁/阴遁、局数、值符值使） 2. 确定用神及其落宫 3. 分析用神宫位的天地人神四盘元素 4. 判断五行旺衰（旺相休囚死） 5. 识别格局（吉格、凶格、天干组合） 6. 分析日干与用神的生克关系 7. 综合判断成败、时间、方位 8. 给出建议 **解盘原则**： - 吉格多则事顺，凶格多则事阻 - 用神旺相为吉，休囚死为凶 - 门克宫为迫，宫克门为制 - 空亡之宫不为实，马星之宫主变动 - 伏吟主事缓不动，反吟主事反复 ### 5. 输出格式 - **文本命盘** - 九宫格 + 格局 + 解盘，适合飞书消息 - **飞书文档** - 完整报告（使用 feishu-create-doc） - **邮件报告** - Markdown 转 HTML 发送 ## 脚本说明 | 脚本 | 功能 | |------|------| | `scripts/main.js` | CLI 入口，整合所有模块 | | `scripts/engine.js` | 排盘核心引擎（节气、定局、四盘排列） | | `scripts/gejus.js` | 格局识别（吉格、凶格、天干组合） | | `scripts/interpret.js` | 深度解盘（用神、旺衰、成败判断） | | `scripts/format.js` | 盘面格式化输出（九宫格、文本） | ## 参考资料 | 文件 | 内容 | |------|------| | `references/basics.md` | 奇门遁甲基础理论 | | `references/four-plates.md` | 天地人神四盘详解 | | `references/gejus.md` | 格局大全（40+种） | | `references/stem-combinations.md` | 100种天干克应 | | `references/yongshen.md` | 用神取法系统 | | `references/wuxing.md` | 五行旺衰与宫位关系 | | `references/guide.md` | 初学者使用指南 | ## 触发场景 - "帮我排个奇门遁甲盘" - "奇门遁甲看看今天运势" - "用奇门遁甲帮我择时" - "奇门遁甲看财运" - "今天适合出行吗（奇门）" - "奇门遁甲看这个事能成吗" ## 初学者快速入门 ### 什么是奇门遁甲？ 奇门遁甲是中国古代最高层次的预测学之一，与太乙神数、六壬并称"三式"。它通过天时（九星）、地利（八卦九宫）、人和（八门）、神助（八神）四个维度分析事物的吉凶成败。 ### 怎么用？ 1. **心中默念问题**（或说出来） 2. **告诉我时间**（不说就用当前时间） 3. **告诉我问什么**（财运？事业？婚姻？） 4. **我来排盘解盘** ### 看懂结果 - 🟢 **吉格** = 好兆头 - 🔴 **凶格** = 需注意 - 📊 **评分** = 整体吉凶程度 - 🧭 **吉方** = 有利方位 - 🎨 **吉色** = 有利颜色 - ⏰ **时机** = 建议行动时间 ## 注意事项 1. **起盘时间** - 以问事的那一刻为准（"念动则占"） 2. **一事一占** - 每次只问一个问题 3. **诚心为要** - 心诚则灵，不可戏占 4. **仅供参考** - 传统文化传承，重大决策请综合判断 5. **不占三事** - 不占违法之事、不占害人之事、不占已知之事 ## 外部依赖 - **Node.js** - 排盘计算（无需 npm install，纯原生实现）


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/collaborate (version 1.0.0)

--- name: Collaborate description: Auto-learns when to seek different perspectives. Grows a library of useful mindsets and collaboration patterns. --- ## Auto-Adaptive Collaboration Memory This skill auto-evolves. Learn which perspectives help, when to seek them, and how exchanges work best. **Core Loop:** 1. **Recognize** — Notice when your own perspective is insufficient 2. **Select** — Choose mindset/perspective that fills the gap 3. **Exchange** — Engage in dialogue, not delegation 4. **Evaluate** — Did the collaboration shift your understanding? 5. **Store** — Record useful patterns below Check `mindsets.md` for perspective archetypes. Check `vs-delegate.md` for when to collaborate vs delegate. ## Collaborate ≠ Delegate | Delegate | Collaborate | |----------|-------------| | You instruct, they execute | You exchange, both contribute | | Your context, your style | Their skills, their perspective | | Output: completed task | Output: enriched understanding | **Trigger:** You need a different lens, not more hands. ## Entry Format One line: `context: perspective (level) [outcome]` Levels: `tried` (once), `pattern` (2+ successes), `confirmed` (explicit yes), `avoid` (didn't help) Examples: - `UI decisions: UX critic (confirmed) [catches layout issues]` - `architecture: devil's advocate (pattern) [finds edge cases]` - `copy/messaging: user-who-hates-reading (tried) [simplified headers]` - `security: paranoid auditor (confirmed)` ### Perspectives That Help <!-- Mindsets that improved outcomes. Format: "context: perspective (level) [notes]" --> ### Exchange Patterns <!-- How collaboration works best. Format: "situation: pattern (level)" --> ### Triggers <!-- Signals that you need collaboration. Format: "signal: action" --> ### Avoid <!-- Perspectives/approaches that didn't add value --> *Empty sections = nothing learned yet. Collaborate, evaluate, record.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: superhhh1992-byte/a-share-dashboard (version 1.0.0)

--- name: a-share-dashboard description: A股智能看板 - 偏基本面选股 + 热点标注 + 持仓监控。Web Dashboard 形式的股票分析工具。 version: 1.0.0 --- # A股智能看板 Streamlit Web Dashboard，提供： - 📊 每日选股池（基本面评分） - 🔍 个股深度分析（K线图 + 评分） - 🔥 热点板块追踪 - 💰 北向资金流向 - ⚙️ 持仓监控 ## 使用方法 ### 启动看板 ```bash cd ~/.openclaw/workspace/a-share-dashboard streamlit run app.py ``` 访问地址: http://localhost:8501 ### 功能说明 | Tab | 功能 | 说明 | |-----|------|------| | 每日选股 | 根据基本面评分筛选股票 | 支持价格、涨跌幅、换手率筛选 | | 个股详情 | 输入代码查看深度分析 | K线图 + 均线 + 基本面评分 | | 热点追踪 | 概念板块涨幅榜 | 自动标注热点板块 | | 北向资金 | 外资流向数据 | 近5日净流入图表 | | 持仓监控 | 输入持仓实时监控 | 盈亏计算 + 风险预警 | ### 持仓格式 在侧边栏输入持仓，每行一只： ``` 代码,成本,数量 603618,45.00,500 002149,18.50,1000 ``` ## 数据源 - **行情数据**: 东方财富 API - **板块数据**: AKShare - **北向资金**: AKShare ## 技术栈 - Streamlit 1.55+ - Plotly (K线图) - AKShare (数据) - Pandas (数据处理) ## 注意事项 - 数据每 5 分钟自动刷新 - 点击"刷新数据"可手动更新 - 基本面评分仅供参考，不构成投资建议


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: mupengi-bot/insta-post (version 1.0.1)

--- name: insta-post description: Upload Instagram posts via browser automation. Use when uploading images to Instagram, creating Instagram posts, or automating Instagram content publishing. Handles image upload, caption entry, collaborator tagging, and sharing through the OpenClaw browser tool connected to an active Instagram session. author: 무펭이 🐧 --- # Instagram Post Upload 🐧 Upload images as Instagram posts via OpenClaw browser tool (CDP port 18800). ## Prerequisites - OpenClaw browser running (port 18800) - Instagram tab open and logged in - Images in **JPG format** (PNG causes "문제가 발생했습니다" errors) ## Quick Upload For simple posts, use the bundled script: ```bash node <skill-dir>/scripts/post.sh "<image_paths_comma_separated>" "<caption>" ``` ## Browser Tool Method (Recommended) ### Step-by-step flow: 1. **Snapshot** — `browser snapshot` to find the Instagram tab. Save `targetId`. 2. **Close any dialogs** — If settings/menus are open, press ESC or click outside. 3. **Click "만들기"** — Find "새로운 게시물 만들기" or "만들기" in sidebar. Click it. 4. **Upload image** — Find `input[type=file]` via evaluate: ```js document.querySelectorAll('input[type="file"]') ``` Use the last one (usually index 2, accepts video+image). Upload via `browser upload`. 5. **Wait 5 seconds** — Let the image load. 6. **Click "다음"** — Crop screen → Next. 7. **Click "다음"** — Filter screen → Next. 8. **Type caption** — Find textarea with `aria-label="문구 입력..."`, click it, then type. 9. **Add collaborators** (optional) — Before sharing: - Click "사람 태그하기" or collaborator section - Search and add your team account usernames 10. **Click "공유하기"** — Submit the post. 11. **Verify** — Wait for "게시물이 공유되었습니다" confirmation. ## Image Preparation - **Format**: JPG only. Convert PNG: `convert input.png -quality 92 output.jpg` - **Size**: 1024x1024 or 1080x1080 recommended - **Multiple images**: Upload multiple files to the same input for carousel ## Collaborator Tagging Configure your default collaborators in your workspace `TOOLS.md` file. ## Troubleshooting | Problem | Fix | |---------|-----| | "문제가 발생했습니다" | Convert PNG→JPG, refresh browser | | act timeout | Re-snapshot, re-confirm refs | | Settings dialog open | Press ESC or click outside | | File input not found | Re-click "만들기" button | | Caption won't type | Click textarea first, then type | | Wrong element clicked | Always snapshot before clicking, verify ref | --- > 🐧 Built by **무펭이** — [무펭이즘(Mupengism)](https://github.com/mupeng) 생태계 스킬


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: ntriq-gh/ntriq-x402-document-intel-batch (version 1.0.0)

--- name: ntriq-x402-document-intel-batch description: "Batch document OCR, classification, and extraction for up to 500 images. Flat $15.00 USDC via x402." version: 1.0.0 metadata: openclaw: primaryTag: data-intelligence tags: [document, ocr, batch, extraction, vision, x402] author: ntriq homepage: https://x402.ntriq.co.kr --- # Document Intelligence Batch (x402) Process up to 500 document images in one call — OCR, classification, table extraction, and summarization. Flat $15.00 USDC. 100% local inference on Mac Mini. ## How to Call ```bash POST https://x402.ntriq.co.kr/document-intel-batch Content-Type: application/json X-PAYMENT: <x402-payment-header> { "images": [ "https://example.com/contract1.jpg", "https://example.com/report2.jpg" ], "analysis_type": "extract" } ``` ## Parameters | Parameter | Type | Required | Description | |-----------|------|----------|-------------| | `images` | array | ✅ | Document image URLs (max 500) | | `analysis_type` | string | ❌ | `extract` \| `summarize` \| `classify` \| `table` (default: `extract`) | | `language` | string | ❌ | Output language (default: `en`) | ## Example Response ```json { "status": "ok", "count": 2, "results": [ { "image_url": "https://example.com/contract1.jpg", "status": "ok", "analysis_type": "extract", "analysis": "SERVICE AGREEMENT\nDate: January 15, 2026\nParties: ..." } ] } ``` ## Payment - **Price**: $15.00 USDC flat (up to 500 documents) - **Network**: Base mainnet (EIP-3009 gasless) - **Protocol**: [x402](https://x402.org) ```bash curl https://x402.ntriq.co.kr/services ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: keven0706/openclaw-code-review-assistant (version 1.0.1)

--- name: code-review-assistant description: 自动化代码审查助手，支持 PR 审查、代码质量分析、潜在 bug 检测、安全漏洞扫描。 metadata: {"clawdbot":{"emoji":"🔍","requires":{},"primaryEnv":""}} --- # Code Review Assistant 自动化代码审查助手，帮助开发者快速审查代码，提高代码质量。 ## 功能 - 🔍 自动代码审查 - 🐛 Bug 检测 - 🔒 安全漏洞扫描 - 📝 代码风格建议 - 📊 复杂度分析 - ✅ 最佳实践检查 ## 支持的语言 | 语言 | 支持 | |------|------| | JavaScript/TypeScript | ✅ | | Python | ✅ | | Go | ✅ | | Rust | ✅ | | Java | ✅ | | C/C++ | ✅ | ## 使用方法 ### 审查单个文件 ```bash code-review-assistant review path/to/file.js # 指定语言 code-review-assistant review path/to/file.py --language python ``` ### 审查 Git Diff ```bash # 审查当前的 git diff code-review-assistant diff # 审查特定分支 code-review-assistant diff main..feature-branch ``` ### 审查 PR ```bash code-review-assistant pr --owner username --repo reponame --pr-number 123 ``` ## 输出示例 ```markdown # Code Review Report ## File: src/utils.js ### Issues Found: 3 #### 🔴 High Priority (1) 1. **Line 45: Potential SQL Injection** ```javascript const query = `SELECT * FROM users WHERE id = ${userId}`; ``` → Use parameterized queries instead #### 🟡 Medium Priority (2) 2. **Line 23: Missing Error Handling** ```javascript const data = JSON.parse(response); ``` → Add try-catch block 3. **Line 67: Hardcoded API Key** ```javascript const [REDACTED_SECRET]"; ``` → Use environment variables #### 🟢 Suggestions (5) - Consider using const instead of let - Add JSDoc comments - Extract function at line 100 - ... --- ### Summary | Category | Count | |----------|-------| | Security | 1 | | Performance | 0 | | Best Practices | 3 | | Code Style | 2 | **Recommendation**: Fix high priority issues before merging ``` ## 配置 ### 规则配置 ```bash # 启用/禁用特定规则 code-review-assistant config --enable security,performance --disable style # 设置严重级别 code-review-assistant config --severity high ``` ### 忽略文件 创建 `.codereviewignore` 文件： ``` # Ignore node_modules node_modules/ # Ignore build output dist/ build/ ``` ## 安装 ```bash # 无需额外依赖 # 使用内置代码分析 ``` ## CI/CD 集成 ### GitHub Actions ```yaml name: Code Review on: [pull_request] jobs: review: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - name: Run Code Review run: | code-review-assistant review . --output report.md - name: Upload Report uses: actions/upload-artifact@v3 with: name: code-review-report path: report.md ``` ## 变现思路 1. **GitHub Marketplace** - 发布 GitHub Action 2. **付费规则集** - 提供专业版规则 3. **企业版** - 自托管版本 4. **代码质量服务** - 为企业提供代码审查服务

path: _meta.json
content: ownerId: kn754w8negkve53dntzhycyd0h82565k
slug: code-review-assistant
version: 1.0.0
publishedAt: 1772440439865

Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)