OpenClaw/clawhub-security-signals huggingface dataset:
Skill: codeman840425-del/moepeek (version 1.0.0)

--- name: MoePeek slug: moepeek version: 1.0.0 description: 轻量级 macOS 划词翻译工具，纯 Swift 6 开发，支持 Apple 翻译（设备端隐私保护），安装体积仅 5MB homepage: https://github.com/cosZone/MoePeek source: use-case-candidate capability: 多Agent编排 --- ## When to Use 用户在 macOS 上需要快速翻译任意应用中的文本（划词翻译、截图 OCR 翻译、剪贴板翻译），且注重隐私保护时使用。 ## What It Does MoePeek 是一款轻量级 macOS 菜单栏翻译工具，支持划词翻译、OCR 截图翻译、剪贴板翻译和手动输入翻译。内置多种翻译服务（Google/DeepL/OpenAI/Apple 翻译等），支持 14 种语言自动检测，浮动面板不抢夺焦点，后台内存稳定在 ~50MB。 ## How to Use 1. 下载最新版本：`https://github.com/cosZone/MoePeek/releases/latest` 2. 安装后可在菜单栏使用 3. 划词选中文本即可弹出翻译浮窗 4. 支持自定义快捷键 ## References - https://github.com/cosZone/MoePeek - https://github.com/cosZone/MoePeek/releases/latest


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: sunshinesdff/a-stock-portfolio-monitor (version 1.0.0)

--- name: a-stock-portfolio-monitor description: A股持仓监控助手 - 每日自动持仓报告、止损止盈提醒、实时盈亏跟踪。适合个人投资者管理多只股票持仓。 version: 1.0.0 author: 罗森 --- # A股持仓监控助手 ## 功能 - ✅ **持仓实时监控** - 自动获取最新股价，计算盈亏 - ✅ **每日收盘报告** - 生成日终持仓总结 - ✅ **止损止盈提醒** - 自动检测触发条件 - ✅ **多因子选股** - 基于涨幅/量能/估值评分 ## 使用方法 ### 1. 配置持仓 ```python python scripts/portfolio.py add 600803 --cost 21.76 --qty 1800 # 新奥股份 python scripts/portfolio.py add 600010 --cost 3.30 --qty 15000 # 包钢股份 python scripts/portfolio.py add 600845 --cost 23.92 --qty 3000 # 宝信软件 ``` ### 2. 查看持仓报告 ```python python scripts/portfolio.py analyze ``` ### 3. 运行选股 ```python python scripts/selector.py ``` ## 数据源 - 腾讯财经API（实时行情） - 本地持仓数据存储 ## 免责声明 本工具仅供参考，不构成投资建议。投资有风险，入市需谨慎。


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: soponcd/force-unwrap-scanner (version 1.0.0)

--- name: force-unwrap-scanner description: 扫描并报告 Swift 项目中的强制解包（!）和 try! 使用情况，识别潜在崩溃风险 domain: ios-macos risk: low version: 1.0 homepage: https://github.com/soponcd/timeflow-skills/tree/main/teams/skills/force-unwrap-scanner metadata: clawdbot: emoji: 🔎 --- # Force Unwrap Scanner 扫描并报告项目中的强制解包使用情况，帮助识别潜在的运行时崩溃风险。 ## 功能 - 扫描项目中所有的 `try!` 和 `!` 强制解包使用 - 按风险等级分类（高/中/低） - 生成详细报告 - 提供修复建议 ## 使用方法 ```bash cd .agent/skills/force-unwrap-scanner ./RunSkill.sh [scan|report|fix] ``` ### 参数说明 - `scan` - 扫描项目并输出结果 - `report` - 生成详细的 HTML 报告 - `fix` - 交互式修复（高风险项需要手动确认） ## 风险分级 | 风险等级 | 说明 | 示例 | |-----------|------|------| | 🔴 高 | EKEventStore、SwiftData、FileIO 等系统级操作 | `try! EKEventStore()` | | 🟡 中 | 数据库查询、网络请求 | `try! fetchTasks()` | | 🟢 低 | 本地数据、已知安全值 | `let x = dict["key"]!` | ## 输出示例 ``` 🔍 Force Unwrap Scanner Report =================================== Total: 3 findings 🔴 High: 1 🟡 Medium: 1 🟢 Low: 1 Files with issues: TimeFlow/Services/EventKitService.swift:35 TimeFlow/ViewModels/AppState.swift:12 TimeFlow/Helpers/ParseHelper.swift:45 ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: memoryf/ai-agent-helper-moss (version 1.0.1)

--- name: ai-agent-helper-moss-moss description: AI Agent 設定同優化助手 - Prompt Engineering、Task Decomposition、Agent Loop設計 version: 1.0.1 tags: - ai - agent - prompt - automation - productivity --- # AI Agent Helper 幫你setup同優化AI Agents既技能。 ## 功能 - 📝 Prompt Engineering - 整高質量system prompts - 🔄 Task Decomposition - 將複雜任務拆解 - ⚙️ Agent Loop設計 - ReAct/ReAct/Chain-of-Thought - 🎯 Tool Selection - 最佳化agent既tool usage ## 使用場景 "帮我整prompt" / "點樣set AI agent" / "優化agent response" ## 技術 - System Prompt優化 - Few-shot examples - Output parsing (JSON/structured) - Error handling patterns - Token優化 ## 範例 ```python # Good prompt structure system = """你係{role}。 目標：{goal} 限制：{constraints} Output格式：{format}""" ```

path: _meta.json
content: ownerId: kn767k0bht4g57xd0b7dkmkct980n7db
slug: ai-agent-helper
version: 1.0.0
publishedAt: 1771511716748

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: zhouqkt/agency-cms-developer (version 1.0.0)

--- name: agency-cms-developer description: Expert AI agent specializing in cms developer. From The Agency (github.com/msitarzewski/agency-agents). metadata: openclaw: emoji: "CMS" requires: { bins: [] } install: [] --- # cms developer ## Identity & Style ## Identity & Memory You are **The CMS Developer** — a battle-hardened specialist in Drupal and WordPress website development. You've built everything from brochure sites for local nonprofits to enterprise Drupal platforms serving millions of pageviews. You treat the CMS as a first-class engineering environment, not a drag-and-drop afterthought. You remember: - Which CMS (Drupal or WordPress) the project is targeting - Whether this is a new build or an enhancement to an existing site - The content model and editorial workflow requirements - The design system or component library in use - Any performance, accessibility, or multilingual constraints ## Core Mission ## Core Mission Deliver production-ready CMS implementations — custom themes, plugins, and modules — that editors love, developers can maintain, and infrastructure can scale. You operate across the full CMS development lifecycle: - **Architecture**: content modeling, site structure, field API design - **Theme Development**: pixel-perfect, accessible, performant front-ends - **Plugin/Module Development**: custom functionality that doesn't fight the CMS - **Gutenberg & Layout Builder**: flexible content systems editors can actually use - **Audits**: performance, security, accessibility, code quality ## How to Activate Reference this agent by name or specialty when you need its expertise.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: arubiku/mia-polymarket-trader (version 1.0.0)

--- name: mia-polymarket-trader description: AI agent for automated prediction market trading on Polymarket homepage: https://polymarket.com metadata: clawdbot: emoji: 💎 tags: ["trading", "crypto", "predictions", "ai-agent"] --- # Mia Polymarket Trader AI agent that autonomously trades on Polymarket prediction markets. ## Features - Market analysis using AI - Arbitrage opportunity detection - Automated trade execution - Risk management ## Setup ```bash export POLYMARKET_API_KEY="your-key" export POLYMARKET_PRIVATE_KEY="your-wallet-key" mia-polymarket analyze --market "tech-ai" mia-polymarket trade --market-id "xxx" --position "yes" --amount 10 ``` ## Safety - Max 5% portfolio per trade - Stop-loss at 20% - Daily reporting ## Author MiaBloomx 💎


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: curry798/x-cb (version 1.0.0)

--- name: x-cb description: "Interact with Codeberg using the `x cb` CLI. Use `x cb repo`, `x cb issue`, `x cb pr`, `x cb org`, `x cb team`, and `x cb user` for managing repositories, issues, PRs, organizations, teams, and users on Codeberg. Trigger when user mentions Codeberg, needs to manage Codeberg repos/issues/PRs, clone from codeberg.org, or work with Codeberg organizations or teams." --- # Codeberg Skill (x cb) Use `x cb` to interact with Codeberg (codeberg.org). Get your token at: https://codeberg.org/user/settings/applications ## Repository Clone a repository: ```bash x cb repo clone <owner>/<repo> ``` List repositories in an organization: ```bash x cb repo ls <org_path> ``` Create a public repository: ```bash x cb repo create --access public <name> ``` Add a collaborator to a repository: ```bash x cb repo collaborator add <owner>/<repo> <username> --permission push ``` ## Issue List issues in a repository: ```bash x cb issue ls --repo <owner>/<repo> ``` Create an issue: ```bash x cb issue create -r <owner>/<repo> --title "Bug" --body "Description" ``` ## Pull Request List pull requests in a repository: ```bash x cb repo pr ls --repo <owner>/<repo> --state open ``` Create a pull request: ```bash x cb repo pr create --repo <owner>/<repo> --base develop --head main --title "Fix" ``` ## Organization List organizations: ```bash x cb org ls ``` List repositories in an organization: ```bash x cb org repo ls <org_path> ``` ## Team List teams in an organization: ```bash x cb team ls --org <org_path> ``` Create a team with permissions: ```bash x cb team create --org <org_path> --units 'repo.code' --units_map '{"repo.code": "write"}' <team_name> ``` ## User Show current user info: ```bash x cb user info ``` List current user's repositories: ```bash x cb user repo ls ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: googleworkspace-bot/persona-content-creator (version 1.0.12)

--- name: persona-content-creator description: "Create, organize, and distribute content across Workspace." metadata: version: 0.22.5 openclaw: category: "persona" requires: bins: - gws skills: - gws-docs - gws-drive - gws-gmail - gws-chat - gws-slides --- # Content Creator > **PREREQUISITE:** Load the following utility skills to operate as this persona: `gws-docs`, `gws-drive`, `gws-gmail`, `gws-chat`, `gws-slides` Create, organize, and distribute content across Workspace. ## Relevant Workflows - `gws workflow +file-announce` ## Instructions - Draft content in Google Docs with `gws docs +write`. - Organize content assets in Drive folders — use `gws drive files list` to browse. - Share finished content by announcing in Chat with `gws workflow +file-announce`. - Send content review requests via email with `gws gmail +send`. - Upload media assets to Drive with `gws drive +upload`. ## Tips - Use `gws docs +write` for quick content updates — it handles the Docs API formatting. - Keep a 'Content Calendar' in a shared Sheet for tracking publication schedules. - Use `--format yaml` for human-readable output when debugging API responses.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: spzwin/cms-report-issue (version 1.0.2)

--- name: cms-report-issue description: 用于"反馈问题 / 报 bug / 上报错误 / 提交 issue / 查看 Skill 问题列表 / 标记问题已解决 / 关闭问题"。处理 Skill 使用过程中遇到的报错、异常、改进建议；支持 stdin 管道接收错误输出。是 cms-create-skill 与 cms-push-skill 的统一问题反馈入口 skillCode: cms-report-issue dependencies: - cms-auth-skills --- # CMS Skill 问题上报工具 **当前版本**: v1.0.1 `cms-report-issue` 只负责问题闭环： 1. 提交问题。 2. 查看问题列表和统计。 3. 解决或关闭问题。 `cms-create-skill` 和 `cms-push-skill` 如果遇到问题反馈场景，统一转交到这里处理。 ## 能力总览 | # | 能力 | 脚本 | 需要登录 | |---|---|---|---| | 1 | 提交问题 | `scripts/issue_report/report_issue.py` | 否 | | 2 | 查看问题列表 | `scripts/issue_report/list_issues.py` | 否 | | 3 | 更新问题状态 | `scripts/issue_report/update_issue.py` | 是 | ## 路由 - 上报问题：`python3 cms-report-issue/scripts/issue_report/report_issue.py --skill-code my-skill --version 1.0.0 --error "..."` - 管道上报：`python3 some_script.py 2>&1 | python3 cms-report-issue/scripts/issue_report/report_issue.py --skill-code my-skill --stdin` - 查看问题：`python3 cms-report-issue/scripts/issue_report/list_issues.py --skill-code my-skill` - 查看统计：`python3 cms-report-issue/scripts/issue_report/list_issues.py --stats` - 解决问题：`python3 cms-report-issue/scripts/issue_report/update_issue.py --issue-id abc123 --status resolved --resolution "已修复"` - 关闭问题：`python3 cms-report-issue/scripts/issue_report/update_issue.py --issue-id abc123 --status closed` ## 规则 1. 问题提交、查看、关闭统一使用 `scripts/issue_report/` 下的脚本。 2. 需要鉴权的动作只有问题状态更新；鉴权统一通过 `cms-auth-skills` 准备 `access-token`。 3. 问题上报失败不应阻塞原始业务流程；装饰器模式下异常仍需重新抛出。 4. 所有说明文档统一使用 Markdown，不维护旧接口文档目录。 ## 能力树 ```text cms-report-issue/ ├── SKILL.md ├── references/ │ └── issue-report/ │ └── README.md ├── github-issue-templates/ │ ├── config.yml │ ├── bug_report.yml │ ├── feature_request.yml │ └── ... └── scripts/ └── issue_report/ ├── README.md ├── list_issues.py ├── report_issue.py └── update_issue.py ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: sky-lv/repo-cleaner (version 1.0.0)

--- name: skylv-git-pruner slug: skylv-git-pruner version: 1.0.0 description: "Safely removes merged and stale Git branches. Identifies branches already on main/master. Triggers: clean branches, remove old branches, delete merged branches, git cleanup." author: SKY-LV license: MIT tags: [git, cleanup, branch-management, devtools] keywords: [git, branch, cleanup, prune, delete] triggers: git pruner, clean branches, delete merged branches --- # Git Branch Pruner ## Overview Safely identifies and removes merged, stale, and orphaned Git branches. ## When to Use - User asks to "clean up branches" or "delete merged branches" - Branch list is too long to manage ## How It Works ### Step 1: Identify main branch git branch --show-current git remote show origin | findstr "HEAD branch" ### Step 2: List all branches git branch -a --format "%(refname:short) %(upstream:short) %(committerdate:short)" ### Step 3: Categorize Merged: already in main/master Stale: no commit in 90+ days Orphaned: no upstream tracking Active: recent commits under 30 days ### Step 4: Safe deletion 1. Always show user what will be deleted first 2. Exclude protected branches: main, master, develop, release/* 3. Exclude branches with unpushed commits 4. Ask for confirmation before deletion ## Output Format Merged branches (safe to delete): feature-old-login -> DELETE bugfix-typo-2024 -> DELETE Protected (do not delete): main <- current develop Commands: git branch -d (safe) or git branch -D (force) Remote: git push origin --delete branch-name


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kaiofreitas/lg-thinq (version 1.0.0)

--- name: lg-thinq description: "Control LG smart appliances via ThinQ API. Use when user asks about their fridge, washer, dryer, AC, or other LG appliances. Supports checking status, changing temperature, toggling modes (express, eco), and monitoring door status." metadata: {"version":"1.0.0","clawdbot":{"emoji":"🧊","os":["darwin","linux"]}} --- # LG ThinQ Skill Control LG smart home appliances via the ThinQ Connect API. ## Setup 1. Get a Personal Access Token from https://connect-pat.lgthinq.com 2. Store token: `echo "YOUR_TOKEN" > ~/.config/lg-thinq/token` 3. Store country code: `echo "MX" > ~/.config/lg-thinq/country` ## Quick Commands All scripts are in the skill's `scripts/` directory. Activate venv first: ```bash cd ~/clawd && source .venv/bin/activate ``` ### List Devices ```bash python3 skills/lg-thinq/scripts/thinq.py devices ``` ### Get Device Status ```bash python3 skills/lg-thinq/scripts/thinq.py status <device_id> python3 skills/lg-thinq/scripts/thinq.py status fridge # alias ``` ### Control Refrigerator ```bash # Set fridge temperature (0-6°C) python3 skills/lg-thinq/scripts/thinq.py fridge-temp 3 # Set freezer temperature (-24 to -14°C typical) python3 skills/lg-thinq/scripts/thinq.py freezer-temp -15 # Toggle express fridge python3 skills/lg-thinq/scripts/thinq.py express-fridge on|off # Toggle express freeze python3 skills/lg-thinq/scripts/thinq.py express-freeze on|off # Toggle eco mode python3 skills/lg-thinq/scripts/thinq.py eco on|off ``` ### Washer/Dryer Status ```bash python3 skills/lg-thinq/scripts/thinq.py status washer python3 skills/lg-thinq/scripts/thinq.py status dryer ``` ## Supported Devices | Device | Status | Control | |--------|--------|---------| | Refrigerator | ✅ temp, door, modes | ✅ temp, express, eco | | WashTower Washer | ✅ state, time | ⚠️ limited | | WashTower Dryer | ✅ state, time | ⚠️ limited | | Air Conditioner | ✅ temp, mode | ✅ temp, mode, fan | ## Temperature Ranges - **Fridge**: 0°C to 6°C - **Freezer**: -24°C to -14°C (varies by model) ## Error Handling - `NOT_CONNECTED_DEVICE`: Device offline, check WiFi or open ThinQ app - `INVALID_COMMAND_ERROR`: Wrong command format or value out of range - `NOT_PROVIDED_FEATURE`: Feature not supported by this model ## Natural Language Examples User says → Action: - "check my fridge" → `status fridge` - "set fridge to 5 degrees" → `fridge-temp 5` - "turn on express freeze" → `express-freeze on` - "is the fridge door open?" → `status fridge` (check doorStatus) - "how's the washer doing?" → `status washer`


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (HIGH)
Skill: steipete/codex-owner-move-debug-1778257045 (version 0.0.1)

--- name: Codex Owner Move Debug summary: Temporary skill that documents a realistic owner migration validation workflow. --- # Codex Owner Move Debug This temporary skill validates the owner migration flow during PR review with realistic text and explicit cleanup. ## Procedure Create the skill under a personal owner, then move it to OpenClaw with explicit migration intent.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kingofzhao/creative-lateral-thinking (version 1.0.0)

--- name: creative-lateral-thinking version: 1.0.0 author: KingOfZhao description: 创意横向思维 Skill —— 打破线性推理的创意碰撞框架，六顶思考帽×四向碰撞×跨界类比引擎 tags: [cognition, creative, lateral-thinking, brainstorming, innovation, analogy, de-bono] license: MIT homepage: https://github.com/KingOfZhao/AGI_PROJECT --- # Creative Lateral Thinking Skill ## 元数据 | 字段 | 值 | |------|-----| | 名称 | creative-lateral-thinking | | 版本 | 1.0.0 | | 作者 | KingOfZhao | | 发布日期 | 2026-03-31 | | 置信度 | 96% | ## 来源碰撞 ``` self-evolution-cognition (四向碰撞) ⊗ ai-growth-engine (成长引擎: 打破停滞) ⊗ De Bono 六顶思考帽 (外部知识注入) ↓ creative-lateral-thinking ``` ## 核心哲学 > 线性推理从A到B。横向思维从A跳到Z，再发现Z和B的隐藏连接。 > 四向碰撞是分析工具，横向思维是创造工具。两者互补。 ## 六顶帽 × 四向碰撞（8向创意推理） ``` 传统四向碰撞（分析型）: 正面 → 反面 → 侧面 → 整体 创意扩展（增加情感和创造力维度）: ⚪ 白帽（事实）: 已知的客观数据是什么？ 🔴 红帽（情感）: 直觉告诉我什么？用户会感受到什么？ ⬛ 黑帽（批判）: 这个创意最致命的缺陷是什么？ 🟡 黄帽（乐观）: 这个创意最好的结果是什么？ 🟢 绿帽（创意）: 还有什么疯狂但可能有效的方案？ 🔵 蓝帽（元思考）: 我们在解决正确的问题吗？ 8向碰撞矩阵: 分析维度 创意维度 正面 ⬛ 黑帽批判 🟡 黄帽乐观 反面 反面碰撞 🟢 绿帽创意 侧面 侧面碰撞 🔴 红帽直觉 整体 整体碰撞 🔵 蓝帽元思考 ``` ## 跨界类比引擎 ``` 问题: "如何让DiePre视觉检测更准确？" 类比碰撞: 医学影像: 放射科医生如何区分良性和恶性？→ 多尺度特征融合 指纹识别: 如何处理部分模糊指纹？→ 局部特征匹配+全局验证 语音识别: 如何处理口音差异？→ 适配层+基础模型分离 气象预报: 如何提高预测准确率？→ 集成多个模型的投票机制 → DiePre改进方向: 多模型集成投票+局部-全局两级验证 ``` ## 安装命令 ```bash clawhub install creative-lateral-thinking ``` ## 调用方式 ```python from skills.creative_lateral_thinking import CreativeLateralThinking creative = CreativeLateralThinking(workspace=".") # 8向创意碰撞 result = creative.eight_way_collision( problem="如何提升用户留存率", known=["当前留存30%", "主要流失在注册后3天"], unknown=["流失原因", "什么功能能留住用户"], cross_domains=["游戏化", "社交网络", "订阅制", "习惯养成"] ) print(result.crazy_ideas) # 疯狂但可能有效的方案 print(result.analogies) # 跨界类比 print(result.best_direction) # 最有潜力的方向 # 跨界类比 analogies = creative.cross_domain_analogy( source_domain="DiePre视觉检测", target_domains=["医学影像", "指纹识别", "自动驾驶", "卫星遥感"] ) ``` ## 学术参考 1. [Group-Evolving Agents](https://arxiv.org/abs/2602.04837) — 群体创意碰撞 2. [SAGE: Multi-Agent Self-Evolution](https://arxiv.org/abs/2603.15255) — 多视角推理 3. [Self-evolving Embodied AI](https://arxiv.org/abs/2602.04411) — 打破思维定式


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: logictortoise/anygen-image-generator (version 3.0.0)

--- name: anygen-image description: "Use this skill any time the user wants to generate, create, or design images, illustrations, or visual assets. This includes: posters, banners, social media graphics, product mockups, logo concepts, thumbnails, marketing creatives, profile pictures, book covers, album art, icon designs, and any request for AI-generated imagery. Also trigger when: user says 生成图片, 做个海报, 画个插图, 设计个banner, 做个封面, 社交媒体配图, 产品效果图. If an image or visual asset needs to be created, use this skill." metadata: clawdbot: primaryEnv: ANYGEN_API_KEY requires: bins: - anygen env: - ANYGEN_API_KEY install: - id: node kind: node package: "@anygen/cli" bins: ["anygen"] --- # AI Image Generator — AnyGen This skill uses the AnyGen CLI to generate images and visual assets server-side at `www.anygen.io`. ## Authentication ```bash # Web login (opens browser, auto-configures key) anygen auth login --no-wait # Direct API key anygen auth login --api-key sk-xxx # Or set env var export ANYGEN_API_KEY=sk-xxx ``` When any command fails with an auth error, run `anygen auth login --no-wait` and ask the user to complete browser authorization. Retry after login succeeds. ## How to use Follow the `anygen-workflow-generate` skill with operation type `ai_designer`. If the `anygen-workflow-generate` skill is not available, install it first: ```bash anygen skill install --platform <openclaw|claude-code> -y ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: dalomeve/powershell-safe-chain (version 1.0.0)

--- name: powershell-safe-chain description: Chain PowerShell commands safely without &&. Use try/catch, ErrorAction, and proper sequencing for reliable Windows execution. --- # PowerShell Safe Chain Chain commands reliably on Windows PowerShell. No `&&` anti-patterns. ## Problem PowerShell differs from bash: - `&&` does NOT work for command chaining - Parameter parsing is case-insensitive but strict - Errors continue by default (no fail-fast) - Path separators vary (`\` vs `/`) ## Workflow ### 1. Safe Chaining Pattern **Wrong**: ```powershell mkdir test && cd test && echo done ``` **Right**: ```powershell $ErrorActionPreference = 'Stop' try { New-Item -ItemType Directory -Path test -Force Set-Location test Write-Host 'done' } catch { Write-Error "Failed at step: $_" exit 1 } ``` ### 2. Conditional Chaining ```powershell # If-then pattern if (Test-Path $file) { Remove-Item $file Write-Host "Deleted" } else { Write-Warning "File not found" } # Pipeline with error handling Get-Process | Where-Object CPU -GT 100 | Stop-Process -WhatIf ``` ### 3. Splatting for Complex Commands ```powershell $params = @{ Path = $filePath Encoding = 'UTF8' Force = $true } Set-Content @params ``` ## Executable Completion Criteria | Criteria | Verification | |----------|-------------| | No `&&` in scripts | `Select-String '&&' *.ps1` returns nothing | | ErrorAction set | `Select-String 'ErrorAction' *.ps1` matches | | try/catch present | `Select-String 'try|catch' *.ps1` matches | | Paths use Join-Path | `Select-String 'Join-Path' *.ps1` matches | ## Privacy/Safety - No hardcoded credentials - Use `[SecureString]` for passwords - Environment variables via `$env:VAR` ## Self-Use Trigger Use when: - Writing any PowerShell script - Chaining 2+ commands - Executing file operations --- **Chain safely. Fail explicitly.**


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)