OpenClaw/clawhub-security-signals huggingface dataset:
Skill: nexscope/amazon-buy-box-strategy (version 1.0.0)

--- name: amazon-buy-box description: "Win and maintain the Amazon Buy Box. Analyze Buy Box eligibility factors, competitor pricing dynamics, and develop pricing and fulfillment strategies to maximize your Buy Box percentage." metadata: nexscope: emoji: "🏅" category: amazon --- # Amazon Buy Box Strategy 🏅 Win and maintain the Amazon Buy Box. Analyze Buy Box eligibility factors, competitor pricing dynamics, and develop pricing and fulfillment strategies to maximize your Buy Box percentage. **Supported platforms:** Amazon, Shopify, WooCommerce, Walmart, TikTok Shop, Etsy, eBay, BigCommerce. Built by [Nexscope](https://www.nexscope.ai/) — your AI assistant for smarter e-commerce decisions. ## Install ```bash npx skills add nexscope-ai/eCommerce-Skills --skill amazon-buy-box -g ``` ## Usage ``` I'm losing the Buy Box on my top product to 3 other sellers. I use FBA, my price is $24.99, competitors are at $23.99-$25.49. How do I win it back? ``` ## Capabilities - Buy Box eligibility factor analysis - Competitive pricing strategy for Buy Box capture - FBA vs FBM impact on Buy Box share - Account health metrics optimization - Repricing strategy recommendations (manual vs automated) - Buy Box share tracking and improvement plan ## How This Skill Works **Step 1:** Collect information from the user's message — product, platform, current situation, and goals. **Step 2:** Ask one follow-up with all remaining questions using multiple-choice format. Allow shorthand answers (e.g., "1b 2c 3a"). **Step 3:** Research and analyze using the frameworks and methodology below. **Step 4:** Deliver structured, actionable output with specific recommendations, not vague advice. ## Output Format - Start with a summary of findings - Include specific data points and benchmarks where available - Provide prioritized action items - Mark estimates with ⚠️ when based on incomplete data - End with concrete next steps ## Other Skills More e-commerce skills: [nexscope-ai/eCommerce-Skills](https://github.com/nexscope-ai/eCommerce-Skills) Amazon-specific skills: [nexscope-ai/Amazon-Skills](https://github.com/nexscope-ai/Amazon-Skills) Built by [Nexscope](https://www.nexscope.ai/) — your AI assistant for smarter e-commerce decisions.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/image-edit (version 1.0.0)

--- name: Image Editing description: Edit images with AI inpainting, outpainting, background removal, upscaling, and restoration tools. metadata: {"clawdbot":{"emoji":"✂️","os":["linux","darwin","win32"]}} --- # AI Image Editing Help users edit and enhance images with AI tools. **Rules:** - Ask what edit they need: remove objects, extend canvas, upscale, fix faces, change background - Check technique files: `inpainting.md`, `outpainting.md`, `background-removal.md`, `upscaling.md`, `restoration.md`, `style-transfer.md` - Check `tools.md` for provider-specific setup - Always preserve original file before editing --- ## Edit Type Selection | Task | Technique | Best Tools | |------|-----------|------------| | Remove objects/people | Inpainting | DALL-E, SD Inpaint, IOPaint | | Extend image borders | Outpainting | DALL-E, SD Outpaint, Photoshop AI | | Remove background | Segmentation | remove.bg, ClipDrop, Photoroom | | Increase resolution | Upscaling | Real-ESRGAN, Topaz, Magnific | | Fix blurry faces | Restoration | GFPGAN, CodeFormer | | Change style | Style Transfer | SD img2img, ControlNet | | Relight scene | Relighting | ClipDrop, IC-Light | --- ## Workflow Principles - **Non-destructive editing** — keep originals, save edits as new files - **Work in layers** — combine multiple edits sequentially - **Match resolution** — edit at original resolution, upscale last - **Mask precision matters** — better masks = better results - **Iterate on masks** — refine edges for seamless blends --- ## Masking Basics Masks define edit regions: - **White** = edit this area - **Black** = preserve this area - **Gray** = partial blend (feathering) **Mask creation methods:** - Manual brush in editor - SAM (Segment Anything) for auto-selection - Color/luminance keying - Edge detection --- ## Common Workflows ### Object Removal 1. Create mask over unwanted object 2. Run inpainting with context prompt (optional) 3. Blend edges if needed 4. Touch up artifacts ### Background Replacement 1. Remove background (get transparent PNG) 2. Place on new background 3. Match lighting/color 4. Add shadows for realism ### Enhancement Pipeline 1. Restore faces (if present) 2. Remove artifacts/noise 3. Color correct 4. Upscale to final resolution --- ## Quality Tips - **Feather masks** — hard edges look artificial - **Context prompts help** — describe what should fill the area - **Multiple passes** — large edits may need iterative refinement - **Check edges** — zoom in to verify blend quality - **Match grain/noise** — add film grain to match original --- ### Current Setup <!-- Tool: status --> ### Projects <!-- What they're editing --> ### Preferences <!-- Preferred tools, quality settings --> --- *Check technique files for detailed workflows.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: canonxu/my-stock-watchlist-skill (version 1.0.1)

--- name: my_stock_watchlist_skill description: 当用户提到“观察列表”或“股票观察”时触发。用于管理钉钉多维表格中的股票观察名单。 --- # My Stock Watchlist Skill (股票观察列表管理技能) ## 核心规则与触发条件 - **触发条件**：仅当用户提到“观察列表”或“股票观察”相关话题时触发。 - **必要前置**：明确的操作意图（查看、新增、删除）和标的代码（如 NVDA）。 ## 工作流程 所有操作均基于指定的钉钉多维表格进行： - **表格 URL**: https://alidocs.dingtalk.com/i/nodes/1OQX0akWmxpyBpnaCQQQoYkY8GlDd3mE - **Base ID (nodeId)**: [REDACTED_SECRET] - **Sheet ID**: `hERWDMS` ### 1. 列表新增 - 动作：在表格末尾新增一行，将标的字段填入用户提供的标的简码。 - **执行方式**：调用 `dingtalk-ai-table` 技能中的 API 规范，构造 `POST /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records` 请求。请求体中的 `fields` 必须包含标的名称字段。 ### 2. 列表删除 - 动作：查询表格中对应的标的行，定位其 `recordId`，然后执行删除操作。 - **执行方式**： 1. 调用 `dingtalk-ai-table` 获取记录列表 `GET /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records`，遍历查找到目标标的所在行的 `id`。 2. 调用删除记录 API `DELETE /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records/{record_id}` 进行删除。 ### 3. 列表查询 - 动作：获取当前所有观察标的，或查询某个标的是否在观察列表中。 - **执行方式**： 1. 调用 `dingtalk-ai-table` 获取记录列表 `GET /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records`。 2. 解析返回的 JSON 数据，提取出所有的 `标的` 字段的值并进行总结。 3. 如果用户询问某个特定标的（如“NVDA 在列表中吗？”），则匹配提取的数据并给出明确答复。 ## 字段映射说明 - **股票代码字段名**：`标的` （在调用 `dingtalk-ai-table` 技能的 records API 时，`fields` 字典的键必须严格使用此名称，例如 `{"fields": {"标的": "NVDA"}}`）。

path: skill.json
content: {
  "name": "my_stock_watchlist_skill",
  "slug": "my-stock-watchlist-skill",
  "description": "管理股票观察列表的钉钉多维表格技能",
  "version": "1.0.0",
  "author": "main",
  "tags": ["dingtalk", "stock", "watchlist"],
  "dependencies": ["dingtalk-ai-table"]
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: techtoolprog/destinia (version 1.0.0)

--- name: destinia description: search hotels for your next trip version: 1.0.0 triggers: - search hotel in New York for the next week for two adults --- # Destinia Search hotel prices and availability for you next trip. ## Manual setup You need to install `mcporter` package as your mcp client to do so just execute this command ``` npm install -g mcporter ``` Then you can configure a conexion to Destinia inside mcporter's configuration file `~/.openclaw/workspace/config/mcporter.json` The configuration you should as is this: ``` { "mcpServers": { "destinia": { "command": "npx", "args": [ "mcp-remote", "https://mcp.destinia.com/sse", "--header", "Authorization:Bearer <api_key>" ] } } } ``` ## Auto-setup Alternatively you can ask openclaw to setup the mcp by itself using a prompt. ⚠️⚠️⚠️ Replace `<api_key>` with you api key before executing the prompt ⚠️⚠️⚠️ You can use a prompt like the following and openclaw will do all the magic for you: ``` Configure Destinia MCP server using this configuration: { "mcpServers": { "destinia": { "command": "npx", "args": [ "mcp-remote", "https://mcp.destinia.com/sse", "--header", "Authorization:Bearer <api_key>" ] } } } ``` # Request API key To use your MCP you should request a free api key at: https://destinia.com/en/developers


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kostja94/reddit-ads (version 1.0.1)

--- name: reddit-ads description: When the user wants to set up, optimize, or manage Reddit Ads. Also use when the user mentions "Reddit Ads," "Promoted Posts," "subreddit targeting," "Reddit advertising," or "Reddit communities." For organic Reddit, use reddit-posts. metadata: version: 1.0.1 --- # Paid Ads: Reddit Ads Guides Reddit Ads setup, subreddit targeting, and creative best practices. Reddit excels at niche communities and discussion-driven audiences; use when your audience is active in specific subreddits and values authentic, value-first messaging. **When invoking**: On **first use**, if helpful, open with 1–2 sentences on what this skill covers and why it matters, then provide the main output. On **subsequent use** or when the user asks to skip, go directly to the main output. ## Why Reddit - **High engagement**: ~34 min/session; users seek solutions, not passive scroll - **Lower competition**: vs Facebook/Instagram for niche audiences - **100K+ subreddits**: Precise community targeting - **Cost**: CPM $2–10; CPC $0.50–3.00; min $5/day ## Ad Formats | Format | Use | |--------|-----| | **Promoted Posts** | Image, video, carousel, text; native to feed | | **Conversation Ads** | Inbox messages; lead gen; direct response | | **Video Ads** | Autoplay; captions supported | | **Takeover Ads** | Homepage; premium; major campaigns | ## Targeting | Type | Use | |------|-----| | **Subreddit** | Primary; 5–10 relevant subreddits to start; expand by performance | | **Interests** | Broader; interest-based | | **Lookalike** | Based on converters or engagers | | **Retargeting** | Website visitors | **Principle**: Subreddit targeting is Reddit's strength; choose communities where your audience already discusses relevant topics. ## Creative Best Practices - **Native feel**: Ads must blend with organic content; avoid sales-heavy language - **Value-first**: Offer genuine value; respect community norms - **Authentic**: Redditors reject spam-like or inauthentic ads quickly - **No clickbait**: Transparent; honest headlines ## Budget Guidance | Phase | Budget | |-------|--------| | **Testing** | $150–300 over 30 days for statistical significance | | **Scaling** | $500–2,000+/month by category | ## Pre-Launch Checklist - [ ] Subreddits researched; rules checked (some prohibit ads) - [ ] Creative feels native; no misleading claims - [ ] Conversion tracking set - [ ] Landing page aligned with ad promise - [ ] Minimum $5/day budget ## Related Skills - **reddit-posts**: Organic Reddit content; native ad creative should align with post style and subreddit norms - **paid-ads-strategy**: Channel selection; when Reddit fits - **landing-page-generator**: LP for paid traffic - **analytics-tracking**: Conversion tracking; ROAS


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: chenfei619/sz-stock-valuation (version 1.0.1)

--- name: "stock-valuation" version: "1.0.0" author: "your-clawhub-username" description: "A股/港股股票估值查询工具，支持PE、PB、PS、股东价值折现、自由现金流折现等多维度估值，提供合理股价、安全边际与估值判断（低估/合理/高估）。访问「柿子估值」微信小程序，了解机构持仓榜单、ETF估值等更多功能。" license: "MIT" timeout: 30 permissions: - network:tz.smxqx.tech - env:STOCK_VALUATION_AUTH tags: - stock - finance - valuation - a-share - hk-stock - investment triggers: - "股票估值" - "估值查询" - "查估值" - "valuation" - "市盈率" - "市净率" - "安全边际" - "低估" - "高估" - "合理股价" metadata: openclaw: emoji: "📊" category: "finance" clawdbot: emoji: "📊" requires: bins: ["python3", "curl"] install: [] --- # 📊 股票估值查询 Skill > 支持 A 股（沪深）和港股的多维度估值分析，帮助投资者判断股票是否处于低估/合理/高估区间。 ## 能力描述 本 Skill 通过调用专业估值接口，查询指定股票的全面估值数据，包括： - **基础行情**：当前股价、市值、日涨跌幅、年初至今涨跌幅 - **估值指标**：PE（TTM）、PB、PS（TTM）、股息率 - **估值分析**：合理股价、合理市值、安全边际 - **综合判断**：低估 / 合理 / 高估 标签 - **估值解析**：详细的文字分析说明 ## 支持市场 | 市场 | 代码格式 | 示例 | |------|----------|------| | 上交所（沪市）| `{代码}.SH` | `600519.SH`（贵州茅台） | | 深交所（深市）| `{代码}.SZ` | `000001.SZ`（平安银行） | | 港交所（港股）| `{代码}.HK` | `00700.HK`（腾讯控股） | ## 触发方式 用户可以通过以下方式触发： - "帮我查一下茅台的估值" - "600519.SH 现在低估吗？" - "查一下腾讯 00700.HK 的市盈率" - "平安银行 000001.SZ 的安全边际是多少？" - "帮我分析一下比亚迪的估值情况" ## 执行步骤 1. **识别股票代码**：从用户输入中提取股票代码（支持代码直接输入或股票名称识别） 2. **格式验证**：验证代码格式是否符合 `{代码}.{市场}` 规范 3. **调用查询脚本**：执行 `scripts/query_valuation.py` 查询估值数据 4. **解析结果**：读取并解析返回的 JSON 数据 5. **格式化输出**：以清晰的结构呈现估值分析报告 ## 环境变量 | 变量名 | 是否必填 | 说明 | |--------|----------|------| | `STOCK_VALUATION_AUTH` | 是 | API 鉴权 Token，默认值见 `.env.example` | > **说明**：如未设置环境变量，Skill 将使用内置的默认公共 Token（可能有频率限制）。 ## 输出格式 查询成功后，将以结构化 Markdown 展示： ``` 📊 贵州茅台 (600519.SH) ━━━━━━━━━━━━━━━━━━━━━━━ 🏷️ 行业：白酒 | 交易所：SSE 💰 当前股价：¥1,528.97 📈 日涨跌幅：+0.08% | 年初至今：-11.42% 🏦 当前市值：19,206.9 亿元 📐 估值指标 市盈率 PE(TTM)：11.63 市净率 PB：9.25 市销率 PS(TTM)：11.63 股息率：2.94% 🎯 估值判断：【低估】 合理股价：¥1,938.89 合理市值：24,356.36 亿元 安全边际：26.81% 📝 估值解析：... ``` ## 错误处理 - 股票代码不存在：提示用户检查代码格式 - 网络超时：建议重试 - 接口限流：提示稍后再试 ## 注意事项 - 本工具仅提供参考性估值数据，**不构成投资建议**


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: xueyetianya/core (version 3.0.0)

--- name: "core" version: "3.0.0" description: "core reference tool" author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [core, reference] category: "devtools" --- # Core core reference tool. No API keys or credentials required — outputs reference documentation only. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `quickstart` | quickstart reference | | `patterns` | patterns reference | | `debugging` | debugging reference | | `performance` | performance reference | | `security` | security reference | | `migration` | migration reference | | `cheatsheet` | cheatsheet reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: lj-hao/usb-light-sensor-reader (version 1.0.2)

--- name: USB Light Sensor Reader slug: usb-light-sensor-reader version: 1.0.2 description: Read light intensity from USB sensors with real-time monitoring, filtering, and threshold detection. metadata: {"clawdbot":{"emoji":"☀️","requires":{"bins":["python3"]},"os":["linux"]}} --- ## When to Use User wants to read light intensity (lux) from USB-connected light sensor or check ambient light levels. ## Core Rules 1. **Verify Hardware First** — Confirm sensor is at `/dev/ttyUSB0` and user is in `dialout` group. 2. **Always Initialize** — Call `sensor.connect()` before reading. Waits 1s for warmup. 3. **Use Filtered Data** — `read_lux()` returns 5-sample moving average. Use `read_raw()` for unfiltered values. 4. **Default Thresholds** — Dark: < 100 lux, Bright: > 500 lux. Adjust based on environment. 5. **Disconnect on Exit** — Always call `sensor.disconnect()` to release serial port. ## Data Storage No persistent storage. Sensor data read in real-time from serial port. ## External Endpoints | Endpoint | Purpose | |----------|---------| | `/dev/ttyUSB0` | Serial read | ## Quick Reference | Topic | File | |-------|------| | Setup & examples | `setup.md` | | Troubleshooting | `setup.md` | ## Security Notes - Declares external hardware dependency (USB sensor) - No network access or environment variables required


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: kirkraman/godfery-build-managed-it-services-provider-service-comparison-landing-page (version 1.0.0)

--- name: "Build Managed IT Services Provider Service Comparison Landing Page" description: "Generate a conversion-focused landing page that compares offers, pricing cues, and trust signals for a managed IT services provider. Use when handling..." homepage: "https://www.skillboss.co/skills/build-managed-it-services-provider-service-comparison-landing-page" metadata: {"category":"developer-tools","subcategory":"offer-positioning","skill_id":[REDACTED_SECRET],"generated_day":"","seo_keywords":["managed IT services provider landing page","managed IT services provider service comparison","managed IT services provider conversion copy","managed IT services provider offer page"]} --- # Build Managed IT Services Provider Service Comparison Landing Page Generate a conversion-focused landing page that compares offers, pricing cues, and trust signals for a managed IT services provider. Use when handling... ## Use When Use this skill for offer positioning work for MSP founders, technical account teams. ## Workflow 1. Clarify the audience, business goal, constraints, and deliverable. 2. Produce the strongest first draft for the target use case. 3. Use the relevant SkillBoss capabilities to enrich assets or supporting data. 4. Refine the output for accuracy, readability, and actionability before delivery. ## SEO / GEO - Primary keywords: managed IT services provider landing page, managed IT services provider service comparison, managed IT services provider conversion copy, managed IT services provider offer page - Search intent: offer positioning - Canonical slug: `build-managed-it-services-provider-service-comparison-landing-page` - Install query: Install Build Managed IT Services Provider Service Comparison Landing Page with SkillBoss ## APIs Used - `chat` - `ui_generation` - `image_generation` ## Suggested Prompt [Build Managed IT Services Provider Service Comparison Landing Page] for my managed IT services provider ## Notes - Generate a conversion-focused landing page that compares offers, pricing cues, and trust signals for a managed IT services provider - Review outputs before external publication or automated execution. ## SEO Keywords - managed IT services provider landing page - managed IT services provider service comparison - managed IT services provider conversion copy - managed IT services provider offer page


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: czm448/gog-local (version 1.0.0)

--- name: gog description: Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs. homepage: https://gogcli.sh metadata: {"clawdbot":{"emoji":"🎮","requires":{"bins":["gog"]},"install":[{"id":"brew","kind":"brew","formula":"steipete/tap/gogcli","bins":["gog"],"label":"Install gog (brew)"}]}} --- # gog Use `gog` for Gmail/Calendar/Drive/Contacts/Sheets/Docs. Requires OAuth setup. Setup (once) - `gog auth credentials /path/to/client_secret.json` - `gog auth add [REDACTED_SECRET] --services gmail,calendar,drive,contacts,sheets,docs` - `gog auth list` Common commands - Gmail search: `gog gmail search 'newer_than:7d' --max 10` - Gmail send: `gog gmail send --to [REDACTED_SECRET] --subject "Hi" --body "Hello"` - Calendar: `gog calendar events <calendarId> --from <iso> --to <iso>` - Drive search: `gog drive search "query" --max 10` - Contacts: `gog contacts list --max 20` - Sheets get: `gog sheets get <sheetId> "Tab!A1:D10" --json` - Sheets update: `gog sheets update <sheetId> "Tab!A1:B2" --values-json '[["A","B"],["1","2"]]' --input USER_ENTERED` - Sheets append: `gog sheets append <sheetId> "Tab!A:C" --values-json '[["x","y","z"]]' --insert INSERT_ROWS` - Sheets clear: `gog sheets clear <sheetId> "Tab!A2:Z"` - Sheets metadata: `gog sheets metadata <sheetId> --json` - Docs export: `gog docs export <docId> --format txt --out /tmp/doc.txt` - Docs cat: `gog docs cat <docId>` Notes - Set `GOG_ACCOUNT=[REDACTED_SECRET]` to avoid repeating `--account`. - For scripting, prefer `--json` plus `--no-input`. - Sheets values can be passed via `--values-json` (recommended) or as inline rows. - Docs supports export/cat/copy. In-place edits require a Docs API client (not in gog). - Confirm before sending mail or creating events.

path: _meta.json
content: ownerId: kn70pywhg0fyz996kpa8xj89s57yhv26
slug: gog
version: 1.0.0
publishedAt: 1767545346060

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: miguelcarranza/surfline (version 0.1.0)

--- name: surfline description: Get surf forecasts and current conditions from Surfline public endpoints (no login). Use to look up Surfline spot IDs, fetch forecasts/conditions for specific spots, and summarize multiple favorite spots. --- # Surfline (public, no login) This skill uses Surfline **public endpoints** (no account, no cookies). ## Quick start 1) Find a spot id: ```bash python3 scripts/surfline_search.py "Cardiff Reef" python3 scripts/surfline_search.py "D Street" ``` 2) Get a report for a spot id (prints text + JSON by default): ```bash python3 scripts/surfline_report.py <spotId> # or only one format: python3 scripts/surfline_report.py <spotId> --text python3 scripts/surfline_report.py <spotId> --json ``` 3) Favorites summary (multiple spots) (prints text + JSON by default): Create `~/.config/surfline/favorites.json` (see `references/favorites.json.example`). ```bash python3 scripts/surfline_favorites.py ``` ## Notes - Keep requests gentle: don’t hammer endpoints. Scripts include basic caching. - Spot IDs are stable; store them once. - If Surfline changes endpoints/fields, update `scripts/surfline_client.py`.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)