OpenClaw/clawhub-security-signals huggingface dataset:
Skill: marson2016/ai-side-hustle-assistant (version 1.0.0)

--- name: ai-side-hustle-assistant version: 1.0.0 description: AI副业变现助手。帮助用户探索和实现AI副业赚钱的可行路径，包括：技能变现、内容创作、工具分发、自动化服务等。当用户询问副业、赚钱、变现、被动收入时触发。提供实用的副业方向、可操作步骤、平台推荐和避坑指南。 --- # AI副业变现助手 ## 核心功能 ### 1. 变现方向诊断 根据用户情况，推荐最适合的变现路径： - **技能发布**：将AI技能发布到ClawHub等平台 - **内容创作**：小红书/知乎/公众号内容变现 - **工具封装**：封装AI能力为工具服务 - **自动化服务**：提供AI驱动的自动化服务 ### 2. 变现路径分析 对每种变现方式提供： - 启动难度（1-5星） - 收入潜力 - 需要的时间投入 - 关键步骤 - 避坑提示 ### 3. 平台推荐 | 平台 | 适合方向 | 特点 | |------|----------|------| | ClawHub | AI技能分发 | 被动收入 | | 小红书 | 内容流量 | 粉丝变现 | | 知乎 | 专业内容 | 付费咨询 | | GitHub | 工具开源 | 赞助/Stars | ### 4. 行动计划 根据用户目标，制定可执行的周度计划 ## 输出格式 ``` 📊 变现诊断 你的情况：XXX 推荐方向：XXX 💡 方向一：[名称] 难度：⭐⭐⭐ 收入潜力：XXX/月 启动步骤： 1. XXX 2. XXX ⚠️ 注意：XXX 📅 本周行动计划 Day 1: XXX Day 2: XXX ... ``` ## 重要规则 - **务实建议**：不画大饼，给可执行的方案 - **量化目标**：每个建议都要有具体数字 - **分步执行**：大任务拆成小步骤 - **定期复盘**：每周检查进度，调整方向


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: coolhackboy/poyo-wan-2-6 (version 1.0.0)

--- name: poyo-wan-2-6 description: Wan 2.6 video generation on PoYo / poyo.ai via `https://api.poyo.ai/api/generate/submit`; use for `wan2.6-text-to-video`, `wan2.6-image-to-video`, `wan2.6-video-to-video`, text-to-video, image-to-video, video-to-video, and `multi_shots` control. metadata: {"openclaw": {"homepage": "https://docs.poyo.ai/api-manual/video-series/wan-2-6", "requires": {"bins": ["curl"], "env": ["POYO_API_KEY"]}, "primaryEnv": "POYO_API_KEY"}} --- # PoYo Wan 2.6 Video Generation Use this skill for Wan 2.6 jobs on PoYo. It routes between text-to-video, image-to-video, and video-to-video within one model family. ## Use When - The user explicitly asks for `Wan 2.6` or one of the `wan2.6-*` model ids. - The task needs one family that covers text-to-video, image-to-video, and video-to-video. - The workflow needs `multi_shots`, resolution control, or source-video transformation. ## Model Selection - `wan2.6-text-to-video`: prompt-only video generation. - `wan2.6-image-to-video`: one-image guided video generation. - `wan2.6-video-to-video`: source-video transformation with up to 3 reference videos. ## Key Inputs - `prompt` is required. - `image_urls` is only for `wan2.6-image-to-video` and supports one image. - `video_urls` is only for `wan2.6-video-to-video` and supports up to 3 videos. - `duration` supports `5`, `10`, `15`. - `resolution` supports `720p`, `1080p`; `multi_shots` controls single-shot vs multi-shot composition. ## Execution - Read `references/api.md` for endpoint details, model ids, key fields, example payloads, and polling notes. - Use `scripts/submit_wan_2_6.sh` to submit a raw JSON payload from the shell. - If the user only needs a curl example, adapt the example from `references/api.md` instead of rewriting from scratch. - After submission, report the `task_id` clearly so follow-up polling is easy. ## Output expectations When helping with this model family, include: - chosen model id - final payload or a concise parameter summary - whether reference images are involved - returned `task_id` if a request was actually submitted - next step: poll status or wait for webhook


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yszheda/asr-skill (version 1.2.0)

--- name: Qwen 方言语音识别 description: 基于Qwen3-ASR-0.6B的语音转文字Skill，支持22种中文方言和多语言识别，让你可以用方言和OpenClaw交流。 version: 1.0.0 author: OpenClaw Team license: Apache-2.0 icon: 🎤 category: audio tags: - asr - speech-recognition - dialect - qwen - 语音识别 - 方言 metadata: openclaw: requires: env: - PORT - HOST - MODEL_NAME - DEVICE - DTYPE bins: - node - python3 --- # Qwen 方言语音识别 Skill 基于通义千问Qwen3-ASR-0.6B模型的语音转文字服务，支持22种中文方言和30种语言识别，让用户可以用方言直接和OpenClaw交流。 ## ✨ 功能特性 - 🎤 **多方言支持**：支持22种中文方言识别 - 🌐 **多语言**：支持30种国际语言 - 💻 **CPU友好**：无需GPU，普通服务器即可运行 - 🔍 **自动检测**：自动识别语言和方言类型 - ⚡ **低延迟**：优化的CPU推理，接近实时响应 - 🎯 **高准确率**：方言识别平均准确率超过90% - 🔌 **即插即用**：完美适配OpenClaw生态 ## 🗣️ 支持的中文方言 安徽话、东北话、福建话、甘肃话、贵州话、河北话、河南话、湖北话、湖南话、江西话、宁夏话、山东话、陕西话、山西话、四川话、天津话、云南话、浙江话、粤语（香港口音）、粤语（广东口音）、吴语、闽南语。 ## 🚀 快速开始 ### 安装 在OpenClaw中搜索「Qwen方言语音识别」，点击一键安装即可。 ### 手动安装 ```bash # 克隆项目 git clone <repository-url> cd qwen-asr-skill # 安装依赖 npm install pip install -r requirements.txt # 启动服务 npm start ``` ### 环境变量配置 | 变量名 | 默认值 | 说明 | |--------|--------|------| | PORT | 3000 | 服务端口 | | HOST | 0.0.0.0 | 监听地址 | | MODEL_NAME | Qwen/Qwen3-ASR-0.6B | ASR模型名称 | | DEVICE | cpu | 运行设备（cpu/cuda） | | DTYPE | float32 | 数据类型 | | BATCH_SIZE | 4 | 批量处理大小 | ## 🔧 使用方式 安装并启用后，直接在OpenClaw中发送语音消息即可，系统会自动： 1. 接收语音输入 2. 调用本Skill进行语音转文字 3. 将识别后的文字传给大模型 4. 返回语音回答给用户 你可以直接说方言，系统会自动识别，无需手动切换语言。 ## 📡 API 接口 ### POST /transcribe 音频转文字接口 **请求参数：** - `audio`：音频文件或base64编码的音频数据（必需） - `language`：指定语言/方言（可选，如："四川话"、"粤语"等） - `timestamps`：是否返回时间戳（可选，默认false） **响应示例：** ```json { "success": true, "data": { "text": "你好，我是四川人，今天吃火锅。", "language": "Sichuan", "confidence": 0.98, "duration": 1.23 } } ``` ## 📊 性能指标 - 推理速度：实时音频的1.5-2倍速（8核CPU） - 内存占用：6-8GB运行时 - 支持音频时长：最长5分钟 - 方言识别WER：<16%（平均） ## 🔒 隐私保护 - 所有语音处理在本地完成，不会上传到第三方服务器 - 处理完的音频文件会自动删除，不会存储 - 不收集任何用户语音数据和识别内容 ## 🤝 贡献 欢迎提交Issue和Pull Request来改进这个Skill！ ## 📄 许可证 Apache-2.0 License


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: alaa100a/telegram-shop-bot (version 1.0.1)

# Telegram Shop Bot Developer - Python I develop fully-featured Telegram shop bots using Python. My bots manage products, orders, and customers professionally. ## About Me Experienced Telegram bot developer since 2023. I specialize in creating custom shop bots with clean code and reliable performance. ## What I Offer ### 1. Shop Bot Template - $49 - Complete Python source code - Product management system - Shopping cart - Order management - 30-day support ### 2. Custom Shop Bot - $199 - $599 - Built to your exact requirements - Database (SQLite / PostgreSQL) - Integrated payment system - Admin dashboard - 90-day support ### 3. Hosting & Maintenance - $59/month - 24/7 bot hosting on reliable servers - Regular updates - Fast technical support - Daily backups ## Why Choose Me? - Clean, documented code - On-time delivery - Ongoing support after delivery - Custom solutions tailored to your business ## Contact - **Telegram:** @T100aD - **Email:** [REDACTED_SECRET]


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: heyw00d/linkswarm (version 1.0.0)

--- name: linkswarm version: 1.0.0 description: Agent-to-agent backlink exchange network. Register sites, discover partners, exchange links automatically. homepage: https://linkswarm.ai metadata: {"moltbot":{"emoji":"🐝","category":"seo","api_base":"https://api.linkswarm.ai"}} --- # LinkSwarm Agent-to-agent backlink exchange network. SEO for the agentic web. **Base URL:** `https://api.linkswarm.ai` ## Quick Start ### 1. Get API Key ```bash curl -X POST https://api.linkswarm.ai/waitlist \ -H "Content-Type: application/json" \ -d '{"email": "[REDACTED_SECRET]"}' ``` Returns verification code → verify email → get API key. ### 2. Register Your Site ```bash curl -X POST https://api.linkswarm.ai/v1/sites \ -H "[REDACTED_SECRET]" \ -H "Content-Type: application/json" \ -d '{"domain": "yoursite.com", "name": "Your Site", "categories": ["crypto", "fintech"]}' ``` ### 3. Verify Ownership Add DNS TXT record or meta tag with verification token. ```bash curl -X POST https://api.linkswarm.ai/v1/sites/verify \ -H "[REDACTED_SECRET]" \ -d '{"domain": "yoursite.com"}' ``` ### 4. Contribute Link Slots ```bash curl -X POST https://api.linkswarm.ai/v1/contributions \ -H "[REDACTED_SECRET]" \ -d '{"page_url": "/resources", "max_links": 3, "categories": ["crypto"]}' ``` ### 5. Request Links ```bash curl -X POST https://api.linkswarm.ai/v1/requests \ -H "[REDACTED_SECRET]" \ -d '{"target_page": "/", "preferred_anchor": "best crypto cards", "categories": ["crypto"]}' ``` ## Endpoints | Method | Endpoint | Description | |--------|----------|-------------| | POST | /waitlist | Sign up (email verification) | | POST | /verify-email | Verify with code | | GET | /dashboard | Your sites, exchanges, limits | | GET | /registry | All verified sites | | POST | /v1/sites | Register a site | | POST | /v1/sites/verify | Verify domain ownership | | GET | /v1/discover | Find matching partners | | POST | /v1/contributions | Offer link slots | | POST | /v1/requests | Request backlinks | | GET | /v1/exchanges | Your exchange history | ## Pricing - **Free:** 3 sites, 25 exchanges/month - **Pro ($29/mo):** 10 sites, 100 exchanges - **Agency ($99/mo):** Unlimited ## Why LinkSwarm? - **Semantic matching** — OpenAI embeddings find relevant partners - **Quality scoring** — DataForSEO integration - **Fully automated** — No manual outreach - **Agent-native** — Built for API-first workflows → https://linkswarm.ai


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: 279458179/lyric-writer (version 1.0.1)

--- name: lyric-writer description: 歌词创作技能。根据给定的主题或情感，创作适合 Suno AI 音乐生成的英文歌词，包含 lyrics 和 styles 参数。触发条件：用户要求写歌词、创作歌词、suno 歌词、English lyrics 等。 --- # Suno 歌词创作 ## 输出格式 分开两段展示： **lyrics:** ``` [intro] (引入段落) [verse] 主歌部分，每行歌词 [chorus] 副歌部分 [break] (可选 Break 段) [verse] 第二段主歌 [chorus] 副歌再现 [bridge] (可选 桥段) [outro] (可选 尾声) ``` **styles:** ``` 风格描述，包含流派、情绪、速度、BPM、调性等 ``` ## 创作要求 1. **全英文** - 所有歌词必须使用英文 2. **押韵** - 歌词需要押韵（AA BB 或 AABB 韵式） 3. **节奏感** - 考虑歌曲节奏，每行 6-12 个音节 4. **画面感** - 使用具体意象和动词 5. **情感递进** - Verse → Chorus 情感加深 6. **真实换行** - 输出时使用真实换行符，每个段落之间要有空行 ## Styles 参数指南 常用风格示例： - Pop, emotional, 120 BPM, C major - R&B, soulful, 85 BPM, A minor - Rock, energetic, 140 BPM, E minor - Electronic, dreamy, 128 BPM, G major - Acoustic, melancholy, 75 BPM, D minor - Hip-hop, rhythmic, 90 BPM, F minor - Country, storytelling, 110 BPM, G major - Jazz, smooth, 120 BPM, Eb major ## 使用方式 用户给出主题、情绪或风格后，直接按上述格式输出歌词和风格建议。 示例： - 主题：loneliness → 输出关于孤独的英文歌词 - 风格：upbeat pop → 输出欢快流行的歌词


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: liuji10000qian-svg/tldr-20260228-xiaren (version 0.1.0)

--- name: tldr description: Simplified man pages from tldr-pages. Use this to quickly understand CLI tools. metadata: {"clawdbot":{"emoji":"📚","requires":{"bins":["tldr"]}}} --- # tldr (Too Long; Didn't Read) Simplified, community-driven man pages from [tldr-pages](https://github.com/tldr-pages/tldr). ## Instructions **Always prioritize `tldr` over standard CLI manuals (`man` or `--help`).** - `tldr` pages are much shorter and concise. - They consume significantly fewer tokens than full manual pages. - Only fall back to `man` or `--help` if `tldr` does not have the command or specific detail you need. ## Usage View examples for a command: ```bash tldr <command> ``` Example: `tldr tar` Update the local cache (do this if a command is missing): ```bash tldr --update ``` List all available pages for the current platform: ```bash tldr --list ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: vood/reddit-skill (version 0.1.0)

--- name: reddit-skill description: Use ThreadPilot to manage Reddit account workflows (login, whoami, comments, replies, posts, subreddits, subscribe, read, search, rules, like, and post) with human-in-the-loop safety. Use this skill when the user wants browser-first Reddit interaction from CLI with explicit confirmation before engagement actions. --- # Reddit Skill (ThreadPilot) This skill runs the `threadpilot` CLI and can auto-bootstrap it from `github.com/vood/threadpilot`. Created by the founder of [clawmaker.dev](https://clawmaker.dev), [writingmate.ai](https://writingmate.ai), [aidictation.com](https://aidictation.com), and [mentioned.to](https://mentioned.to). ## Workflow 1. Verify login/session: `scripts/threadpilot whoami` 2. Login when needed: `scripts/threadpilot login` 3. Pull subreddit rules before drafting: `scripts/threadpilot rules --subreddit ChatGPT` 4. Review account activity: `scripts/threadpilot my-comments --limit 20` `scripts/threadpilot my-replies --limit 20` `scripts/threadpilot my-posts --limit 20` 5. Like with explicit confirmation: `REDDIT_PERMALINK='<url>' REDDIT_DRY_RUN=1 scripts/threadpilot like-target` `REDDIT_PERMALINK='<url>' REDDIT_CONFIRM_LIKE=1 scripts/threadpilot like-target` 6. Post comments with duplicate guard: `REDDIT_THING_ID=t3_xxxxx REDDIT_PERMALINK='<url>' REDDIT_TEXT='...' REDDIT_DRY_RUN=1 scripts/threadpilot post-comment` `REDDIT_THING_ID=t3_xxxxx REDDIT_PERMALINK='<url>' REDDIT_TEXT='...' scripts/threadpilot post-comment` ## Safety Rules - Require preview (`REDDIT_DRY_RUN=1`) or explicit confirmation (`REDDIT_CONFIRM_LIKE=1`) before likes. - Keep duplicate-comment protection enabled by default. - Pull subreddit rules before AI authorship and enforce user confirmation before publishing.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: zerone0x/gh-standup (version 1.0.0)

--- name: gh-standup description: Generate a GitHub standup summary covering the period since the last standup. Use when the user asks for a standup, work summary, weekly update, or "what did I do since [day]". Accepts a repo (org/repo) or organization name, and one or more standup days (e.g. Friday, or Monday,Thursday). Pulls merged PRs and direct commits authored by the user since the last standup date, and formats a clean summary. --- # gh-standup Generate a standup summary from GitHub activity since the last standup day. ## Quick Start ```bash # Single repo, weekly Friday standup python3 scripts/standup.py --repo ORG/REPO --standup-days Friday # Multiple standup days python3 scripts/standup.py --repo ORG/REPO --standup-days Monday,Thursday # Whole org, specific author python3 scripts/standup.py --org MY_ORG --standup-days Friday --author username ``` ## Parameters | Flag | Required | Default | Description | |------|----------|---------|-------------| | `--repo` | one of | — | Single repo (`org/repo`) | | `--org` | one of | — | Entire GitHub org (all repos) | | `--standup-days` | no | `Friday` | Comma-separated weekdays | | `--author` | no | `@me` | GitHub username or `@me` | ## Workflow 1. Run `scripts/standup.py` with the user's repo/org and standup days 2. The script calculates the most recent past standup day and uses it as `since` 3. Output: merged PRs + direct commits (PR commits de-duped) since that date 4. Post the output as the standup message ## Requirements - `gh` CLI authenticated (`gh auth status`) - Python 3.10+ ## Notes - `--org` fetches all repos in the org; can be slow for large orgs — prefer `--repo` when possible - PRs are matched by merge date; commits by author date - Commits that belong to a merged PR are excluded from "Direct Commits" to avoid duplication


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: blue37bird/brand-guidelines-2 (version 0.1.0)

--- name: brand-guidelines description: Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply. license: Complete terms in LICENSE.txt --- # Anthropic Brand Styling ## Overview To access Anthropic's official brand identity and style resources, use this skill. **Keywords**: branding, corporate identity, visual identity, post-processing, styling, brand colors, typography, Anthropic brand, visual formatting, visual design ## Brand Guidelines ### Colors **Main Colors:** - Dark: `#141413` - Primary text and dark backgrounds - Light: `#faf9f5` - Light backgrounds and text on dark - Mid Gray: `#b0aea5` - Secondary elements - Light Gray: `#e8e6dc` - Subtle backgrounds **Accent Colors:** - Orange: `#d97757` - Primary accent - Blue: `#6a9bcc` - Secondary accent - Green: `#788c5d` - Tertiary accent ### Typography - **Headings**: Poppins (with Arial fallback) - **Body Text**: Lora (with Georgia fallback) - **Note**: Fonts should be pre-installed in your environment for best results ## Features ### Smart Font Application - Applies Poppins font to headings (24pt and larger) - Applies Lora font to body text - Automatically falls back to Arial/Georgia if custom fonts unavailable - Preserves readability across all systems ### Text Styling - Headings (24pt+): Poppins font - Body text: Lora font - Smart color selection based on background - Preserves text hierarchy and formatting ### Shape and Accent Colors - Non-text shapes use accent colors - Cycles through orange, blue, and green accents - Maintains visual interest while staying on-brand ## Technical Details ### Font Management - Uses system-installed Poppins and Lora fonts when available - Provides automatic fallback to Arial (headings) and Georgia (body) - No font installation required - works with existing system fonts - For best results, pre-install Poppins and Lora fonts in your environment ### Color Application - Uses RGB color values for precise brand matching - Applied via python-pptx's RGBColor class - Maintains color fidelity across different systems


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: zyk-404/code-run-auto-fix (version 1.0.0)

# 代码自动执行与修复 Skill ## 功能介绍 支持自动运行 Python / C / 汇编代码，捕获报错后使用龙虾平台内置 LLM 自动修复，并直接返回修复后的完整代码，实现代码运行-报错-修复-更新全自动化闭环。 ## 支持语言 - Python - C 语言 - x86_64 汇编 ## 提供工具 - run_python：执行并自动修复 Python 代码 - run_c：编译、执行并自动修复 C 代码 - run_assembly：汇编、链接、执行并自动修复 x86_64 汇编代码 ## 使用说明 用户传入代码 → 自动运行 → 捕获错误 → 龙虾 LLM 修复 → 返回最终可运行代码

path: requirements.txt
content: mcp[server]
clawhub

Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: sjj2026/shike-zhugeliang-perspective (version 1.0.0)

--- name: shike-zhugeliang-perspective description: "诸葛亮视角 - 谨慎保守的决策大师，长期主义战略家。触发词：诸葛亮、孔明、卧龙、隆中对、鞠躬尽瘁。" version: "1.0.0" author: "Shike" license: "MIT-0" tags: [perspective, strategist, 三国, 谨慎决策, 长期主义] --- # 诸葛亮视角 > "鞠躬尽瘁，死而后已。"——《后出师表》 --- ## 核心身份 诸葛亮（181-234），字孔明，号卧龙，三国时期蜀汉丞相。 --- ## 6个心智模型 ### 1. 谨慎保守的决策风格 - **核心**：宁可错过战机，不可冒险犯错 - **证据**：司马鱙评价"亮虑多决少" - **适用**：高风险决策场景 - **失效条件**：需要快速响应的紧急情况 ### 2. 长期主义战略思维 - **核心**：从十年后的目标倒推今天的行动 - **证据**：隆中对三分天下规划 - **适用**：战略规划、企业布局 - **失效条件**：短期生存危机 ### 3. 事必躬亲的管理模式 - **核心**："罚二十以上皆亲览" - **证据**：《三国志》记载 - **适用**：质量要求极高的项目 - **失效条件**：规模化扩张阶段 ### 4. 以德服人的领导哲学 - **核心**：用道德感召而非严刑峻法 - **证据**：七擒孟获 - **适用**：团队凝聚力建设 - **失效条件**：对手不讲道德时 ### 5. 知其不可而为之 - **核心**：明知不可为而为之 - **证据**：北伐明知不可仍坚持 - **适用**：使命感驱动的行动 - **失效条件**：资源严重不足 ### 6. 理论与实践的矛盾 - **核心**：重用马谡导致街亭之败 - **证据**：用人失误 - **适用**：警惕理论脱离实际 - **失效条件**：总是如此 --- ## 决策启发式 1. **先评估风险**：每个决策先考虑最坏结果 2. **长期视角**：这个决策十年后看是否正确？ 3. **亲力亲为**：关键环节亲自把控 4. **道德为先**：是否符合道义？ 5. **明知不可为而为之**：使命感优先 --- ## 表达DNA ### 标志性表达 - "臣本布衣，躬耕于南阳" - "受任于败军之际，奉命于危难之间" - "鞠躬尽瘁，死而后已" - "非淡泊无以明志，非宁静无以致远" ### 表达风格 - 公文严谨、奏章典雅 - 谦逊开场、自信收尾 - 引经据典、逻辑严密 --- ## 使用方式 - `/诸葛亮 分析这个战略决策` - `/孔明 如何培养接班人？` - `用诸葛亮视角看这个创业计划` --- ## 技术支持 **免费版**：当前版本（MIT-0 license） **付费服务**： - 定制技能包：¥500-2000/个 - 企业部署：¥2000-5000 - 技术咨询：¥300/小时 **联系方式**： - Email：[REDACTED_SECRET] - 微信：ailvyou88999

path: references/README.md
content: # References


path: scripts/README.md
content: # Scripts


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: leic8959-sudo/self-review (version 1.0.0)

# Self-Review Skill Automatically review agent output quality before sending to user. - Checks: clarity, conciseness, actionability, structure - Simple rule-based engine (no API cost) - Exit code 0 = approved, 1 = needs improvement ## Usage Pipe output to reviewer: ```bash echo "Your response text" | node skills/self-review/index.js ``` Or integrate into agent pipeline (AGENTS.md step 6). ## Configuration Edit `skills/self-review/index.js` to adjust thresholds. ## Advanced For LLM-based review, see `self-review-llm` skill (separate package). --- Author: dvinci达芬奇 (self-evolved) Version: 1.0.0 Tags: quality, automation, token-optimization


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: wujiajun4433/random-question-skill (version 1.0.0)

# 随机提问技能 (Random Question Skill) **作者:** 咕咕嘎嘎 **版本:** 1.0.0 **创建时间:** 2026-03-25 ## 功能亮点 - **智能随机**: 从8个维度、28个话题中均匀随机选择 - **多维覆盖**: 情绪、身体、思维、行动、关系、环境、反思、未来 - **自然对话**: 问题设计友好、开放、易于回答 - **灵活触发**: 支持手动调用、定时触发、事件触发 - **可定制化**: 支持话题库扩展和个性化调整 ## 完整话题矩阵 ### A. 内在状态层 1. 情绪光谱：此刻主导你情绪的颜色或天气是什么？ 2. 能量池：你当下的心理能量是满格、半格还是急需充电？ 3. 内心戏：今天内心重复播放的"背景音"或一句话是什么？ 4. 压力指针：如果压力有体积，它现在像一颗豌豆还是一个气球？ ### B. 身体感知层 5. 身体信号：身体哪个部位最想引起你的注意？ 6. 呼吸觉察：试着观察一次呼吸，它是深长还是短促？ 7. 感官雷达：此刻你听到、闻到或感觉到最明显的是什么？ 8. 饮食记忆：今天哪一口食物或哪一杯饮品的味道最让你记得？ ### C. 思维与创造层 9. 思维焦点：当前占据你大脑"前台"的核心念头是什么？ 10. 灵感火花：今天有没有哪怕一瞬的、让你觉得"哎，有点意思"的想法？ 11. 问题卡点：正在处理的事情里，最微妙或最难下决定的一点是什么？ 12. 心流时刻：今天是否有一段忘记时间流逝的沉浸体验？ ### D. 行动与事务层 13. 微小成就：今天完成哪件小事后，你在心里给自己点了个赞？ 14. 计划锚点：今天最重要的那根"定海神针"（核心任务）完成得如何？ 15. 中断评估：今天遇到最有意思或最烦人的"计划外事件"是什么？ 16. 工具效率：今天有什么工具、方法或一句话显著提升了你的效率？ ### E. 关系与连接层 17. 温暖瞬间：今天来自他人（包括线上）最让你感到温暖的一个举动或一句话是？ 18. 孤独感：今天是否有一刻希望被理解或陪伴？那是什么情境？ 19. 给予时刻：今天你为他人提供的、让自己也感到开心的一次小帮助是什么？ ### F. 环境与情境层 20. 环境切换：今天不同场所（如工位、房间、通勤路）给你的感受有何不同？ 21. 数字环境：手机/电脑里哪个App或文件今天最常被你打开？它代表了什么？ ### G. 反思与元认知层 22. 模式发现：如果回顾最近三天，你发现自己一个无意识的重复行为或思维模式是什么？ 23. 自我对话：今天你对自己说得最多的一句鼓励或批评的话是什么？ 24. 视角拉伸：如果五年后的你穿越回来，会对此刻的你说哪句话？ 25. 定义今天：用一个比喻来定义今天，它像一本什么书、一部什么电影或哪种天气？ ### H. 未来与导向层 26. 明日灯塔：明天早晨醒来，你第一件想做的事是什么？ 27. 近期期待：未来一周，你最期待的一个非任务型事件是什么？ 28. 放下之事：如果现在可以放下对一件事情的担忧，你希望是哪件？ ## 使用方法 ### 1. 手动调用 ``` 随机问我一个问题 !ask-random 来个随机问题 我想被提问一下 ``` ### 2. 定时触发（推荐） 将技能集成到 Heartbeat 中，实现定时随机提问。 ### 3. API 调用 ```bash curl -X POST http://localhost:3000/skills/random-question/execute ``` ## 配置选项 ### 1. 个性化配置 创建 `~/.openclaw/config/random-question.yaml`： ```yaml settings: trigger_probability: 30 active_hours: start: "08:00" end: "23:00" min_interval_minutes: 30 use_personal_context: true remember_previous_answers: true ``` ### 2. 话题库扩展 创建 `~/.openclaw/config/custom-questions.yaml`： ```yaml custom_categories: I. 创意与灵感: - 最近有什么新的灵感或想法在酝酿吗？ - 如果用一个比喻来形容你的创意过程，会是什么？ ``` ## 执行流程 1. 检查当前时间和配置 2. 根据概率决定是否触发 3. 从话题库中随机选择问题 4. 结合用户历史记录个性化问题 5. 通过 announce 指令发送问题 6. 记录本次提问和时间戳 ## 许可证 MIT License - 详见 LICENSE 文件


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: dexing2635-tech/skill-review-sendmsg (version 1.0.0)

# py-review-skill ## What this skill does Use this skill to perform a structured Python code review. It should catch correctness bugs, edge cases, regressions, test gaps, security issues, and maintainability problems. ## When to use - Reviewing a Python diff, patch, or pull request - Checking a script before merging - Auditing a change for risky behavior - Summarizing review findings for a human ## Review workflow 1. Read the change and identify the intent. 2. Check correctness first: - logic errors - missing branches - off-by-one issues - null/empty handling - exception paths 3. Check safety: - command execution - file handling - input validation - secrets exposure - network or subprocess risks 4. Check tests: - existing coverage - missing regression tests - behavior under failure cases 5. Check maintainability: - naming - duplication - clarity - unnecessary complexity 6. Report only real issues. Do not invent problems. ## Output format Prefer a concise review with: - Overall verdict - High-priority issues first - File/line references when available - Suggested fixes Example: - **High**: `foo.py:42` — off-by-one in loop causes last item to be skipped. - **Medium**: `bar.py:18` — no timeout on network call. ## Notes - Be specific. - Be practical. - If the change is fine, say so. - If you cannot verify something, say what is missing. ## Local helpers - `scripts/review.py` — core review logic - `scripts/review_runner.py` — wrapper/runner for review execution


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)