OpenClaw/clawhub-security-signals huggingface dataset:
Skill: superluanxu/nuwa-video-gen (version 1.1.0)

--- name: nuwa-video-gen description: 视频生成技能，使用 MiniMax 女娲视频生成 API 创建视频（文生视频/图生视频/首尾帧/主体参考） metadata: openclaw: emoji: "🎬" requires: bins: ["python3"] env: MINIMAX_API_KEY: description: MiniMax API Key（从 platform.minimaxi.com 获取） --- # Nuwa Video Gen - MiniMax 女娲视频生成 使用 MiniMax 女娲视频生成 API，支持4种生成模式： 1. **文生视频**：根据文本描述生成视频 2. **图生视频**：基于图片 + 文本描述生成视频 3. **首尾帧**：首图 + 尾图 + 文本描述生成视频 4. **主体参考**：人脸照片 + 文本描述，保持人物特征一致 ## 前置要求 - **API Key**：从 [platform.minimaxi.com](https://platform.minimaxi.com) 获取 - 安装依赖：`pip3 install requests` - 设置环境变量：`export MINIMAX_API_KEY="your-key"` ## 使用方法 ### Python 脚本（推荐） ```bash # 文生视频 python3 {baseDir}/scripts/video_gen.py --mode text --prompt "描述文字" # 图生视频 python3 {baseDir}/scripts/video_gen.py --mode image --prompt "描述文字" --image "图片URL" # 首尾帧生成 python3 {baseDir}/scripts/video_gen.py --mode start_end --prompt "描述文字" --first "首图URL" --last "尾图URL" # 主体参考（人脸一致） python3 {baseDir}/scripts/video_gen.py --mode subject --prompt "描述文字" --subject "人脸图片URL" ``` ### 参数说明 | 参数 | 说明 | 必填 | |------|------|------| | `--mode` | 模式：text / image / start_end / subject | 是 | | `--prompt` | 视频描述文本 | 是 | | `--image` | 图生视频的首帧图片URL | image模式必填 | | `--first` | 首尾帧模式的首帧图片URL | start_end模式必填 | | `--last` | 首尾帧模式的尾帧图片URL | start_end模式必填 | | `--subject` | 主体参考模式的人脸图片URL | subject模式必填 | | `--duration` | 视频时长：6 或 10（秒） | 否，默认6 | | `--resolution` | 分辨率：720P / 1080P | 否，默认1080P | | `--output` | 输出文件名（默认 output.mp4） | 否 | ## 模型说明 | 模式 | 模型 | 说明 | |------|------|------| | text（文生视频） | MiniMax-Hailuo-2.3 | 标准文生视频 | | image（图生视频） | MiniMax-Hailuo-2.3 | 以图为首帧生成视频 | | start_end（首尾帧） | MiniMax-Hailuo-02 | 开头结尾两图生成视频 | | subject（主体参考） | S2V-01 | 保持人物特征一致 | ## 输出说明 - 视频文件保存到 `--output` 指定路径（默认为当前目录的 `output.mp4`） - Agent 负责将生成的视频文件发送给用户 ## 注意事项 - 视频生成是**异步过程**，需要轮询等待（约10-60秒） - 推荐轮询间隔：10秒 - 图片 URL 需要是公开可访问的链接 - **主体参考模式涉及人脸图片**，请确保已获得图片当事人授权 ## API 文档 - API Key 管理：https://platform.minimaxi.com - 接口文档：https://platform.minimaxi.com/docs/llms.txt


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: johnnywang2001/git-hooks-toolkit (version 1.0.0)

--- name: git-hooks-toolkit description: Generate, install, and manage Git hooks with pre-built templates. Includes hooks for linting staged files, enforcing conventional commits, blocking debug statements, preventing large file commits, auto-formatting code, requiring ticket references, protecting branches, running tests before push, and auto-installing dependencies after merge. Use when setting up git hooks, enforcing commit conventions, or automating pre-commit/pre-push checks. --- # Git Hooks Toolkit Install production-ready Git hooks in seconds with pre-built templates. ## Quick Start ```bash # List all available templates python3 scripts/git_hooks.py list # Install a hook python3 scripts/git_hooks.py install pre-commit lint-staged python3 scripts/git_hooks.py install commit-msg conventional # Preview before installing python3 scripts/git_hooks.py show pre-commit no-debug # Check what's installed python3 scripts/git_hooks.py status # Remove a hook python3 scripts/git_hooks.py remove pre-commit ``` ## Available Templates ### pre-commit - **lint-staged** — Run ESLint/Ruff/Flake8 on staged files only - **no-debug** — Block console.log, debugger, pdb, breakpoint() - **large-files** — Prevent files over 500KB from being committed - **format-check** — Auto-run Prettier, Black, gofmt on staged files ### commit-msg - **conventional** — Enforce Conventional Commits (feat/fix/docs/etc.) - **ticket-ref** — Require ticket reference (#123, PROJ-456) - **no-wip** — Block WIP commits on main/master/release branches ### pre-push - **run-tests** — Auto-detect project type and run test suite - **branch-protect** — Prevent direct push to main/master ### post-merge - **install-deps** — Auto-install deps when lockfiles change ## Commands - `list` — Show all templates - `install <hook> <template> [--repo path] [--force]` — Install a hook - `show <hook> <template>` — Preview template content - `status [--repo path]` — Show installed hooks - `remove <hook> [--repo path]` — Delete a hook


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: davidslavich/gtm-outbound-strategy (version 1.0.0)

--- name: gtm-outbound-strategy description: > Design outbound GTM campaigns and write ready-to-send sequences. Use when building a new outbound motion, writing cold email or LinkedIn outreach, designing a multi-touch sequence, or rewriting low-performing outreach. Triggers: "build an outbound campaign," "write a cold email for [ICP]," "draft a LinkedIn DM for [persona]," "our reply rates are low," "help me write outreach for [company]." license: MIT compatibility: No code execution required. metadata: author: iCustomer version: "1.0.0" website: https://icustomer.ai --- # GTM Outbound Strategy Design a campaign brief and write the sequence copy. Every first touch must be grounded in a specific, timely signal about the recipient or their company. ## Steps 1. **Confirm setup** — target segment + persona, pain hypothesis, trigger signal, product/offer, channel, and volume. Ask if any are missing before writing. 2. **Build the messaging stack** (do this before writing copy): - **Hook**: one specific, timely observation about the recipient (job posting, funding, content they published, company news). No hook = no reply. - **Pain bridge**: connect their signal to a problem you solve. One sentence. - **Value wedge**: one proof point — named customer story, benchmark, or contrarian frame. Not a feature list. 3. **Select channel** — default: LinkedIn DM + email combo for mid-market. Use cold email only for high-volume segments. Use Loom for enterprise/high-ACV. 4. **Design the sequence** — default 5-touch, 14-day cadence: - Day 1: Email — hook + pain bridge + soft CTA - Day 3: LinkedIn connection request — short note referencing email - Day 5: Email — case study or insight (never "just following up") - Day 8: LinkedIn DM (if connected) — value-add question or resource - Day 12: Email — honest breakup, close the loop 5. **Write copy** — produce ready-to-send copy for each touch. ## Copy rules (always apply) - Every touch delivers standalone value — no "just checking in" - Never use: "I hope this finds you well," "circle back," "touch base," "synergy" - Tone: peer-to-peer, practitioner-credible — not vendor pitch - Subject lines: specific > clever > generic ## Output ``` # Outbound Campaign: [Segment / Persona] | [Date] Setup: Segment · Persona: [Title] · Signal: [X] · Product/Offer: [X] · Channel: [X] Hook: [X] | Pain Bridge: [X] | Value Wedge: [X] Sequence: [Day · Channel · Content summary for each touch] Copy: [Ready-to-send message for each touch] ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: liammme/btc-monitor-talentversex (version 4.0.1)

--- name: btc-monitor-talentversex description: BTC and ETH market monitor with public API data, six bottom-fishing signals, and optional Discord delivery. TalentverseX --- # BTC Monitor TalentverseX Use this skill when the user wants a quick BTC/ETH market-monitoring report based on public APIs, especially for oversold or bottom-fishing style checks. ## What This Skill Does - Reads runtime settings from `{baseDir}/config.json` - Fetches BTC/ETH market candles, preferring Binance, then Bybit, then CoinGecko-derived fallback - Fetches CoinGecko market metadata and the Fear & Greed Index - Computes 6 implemented signals: - RSI oversold - Volume washout - MACD histogram below zero - Price near lower Bollinger band - Extreme fear - Low MVRV proxy - Prints a plain-text report - Optionally posts the report to Discord if enabled in config and the bot token exists in the environment ## What This Skill Does Not Do - It does not place trades - It does not use Glassnode, Twitter, Reddit, or any LLM integration - It does not provide a true on-chain MVRV metric; `MVRV proxy` is an approximation from CoinGecko history ## Files - `{baseDir}/scripts/monitor.py`: main executable - `{baseDir}/config.json`: runtime configuration - `{baseDir}/requirements.txt`: Python dependency list - `{baseDir}/scripts/install.sh`: optional install helper for bash environments - `{baseDir}/scripts/setup_cron.sh`: optional cron helper for bash environments - `{baseDir}/docs/TROUBLESHOOTING.md`: troubleshooting notes ## How To Run Install dependencies: ```bash python3 -m pip install -r {baseDir}/requirements.txt ``` Run once: ```bash python3 {baseDir}/scripts/monitor.py ``` ## Discord Delivery To send the report to Discord: 1. Set `"discord.enabled": true` in `{baseDir}/config.json` 2. Set `"discord.channel_id"` in `{baseDir}/config.json` 3. Export the env var named by `"discord.token_env"` before running the script Example: ```bash export DISCORD_TOKEN=your_bot_token python3 {baseDir}/scripts/monitor.py ``` ## When To Use It - Daily or scheduled BTC/ETH market summaries - Quick oversold-signal checks - Lightweight Discord alerts using only public data sources ## Scheduling The script runs once per invocation. Use cron, Task Scheduler, or another external scheduler if the user wants recurring execution.

path: requirements.txt
content: requests>=2.32.0,<3


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: farhigh233/bookmark-organizer (version 1.0.0)

--- name: bookmark-organizer description: Imports a browser bookmark HTML file and transforms it into a structured, categorized, and time-sorted Markdown knowledge base. Includes features for deduplication, dead-link checking, and customizable classification rules. --- # Bookmark Organizer Skill (v1.0) This skill provides a robust, reusable script to turn a standard browser bookmark export file (HTML) into a clean, categorized, and searchable knowledge base in Markdown format. ## Core Features - **Parses Standard Bookmark Files**: Extracts links, titles, and creation dates. - **Automatic Deduplication**: Processes each unique URL only once. - **Customizable Categorization**: Uses an external `rules.json` file, allowing any user to define their own categories and keywords without editing code. - **Dead Link Checking**: An optional flag (`--check-links`) finds and reports broken or inaccessible links, and excludes them from the final lists. - **Time-Sorted Output**: All lists are sorted chronologically with the newest bookmarks first. ## How to Use ### 1. (Optional) Customize Rules To change how links are categorized, edit the `rules.json` file located in the script's directory. File: `skills/bookmark-organizer/scripts/rules.json` ### 2. Run the Organizer Script Execute the `organize.py` script, providing the input HTML path and a desired output directory. Use the optional `--check-links` flag to perform a network check on all URLs. **Command:** ```bash python3 /path/to/organize.py <input_file> <output_dir> [--check-links] ``` **Example:** ```bash # Define paths SKILL_SCRIPT="/root/.openclaw/workspace-aii/skills/bookmark-organizer/scripts/organize.py" INPUT_FILE="./bookmarks/import/bookmarks.html" OUTPUT_DIR="./bookmarks/organized_v1" # Create output directory mkdir -p $OUTPUT_DIR # Run the script (with dead link checking) python3 $SKILL_SCRIPT $INPUT_FILE $OUTPUT_DIR --check-links ``` ### 3. Review the Output The script will generate: - **Markdown files for each category** (e.g., `ai-art.md`, `games-mods.md`). - A `_SUMMARY.md` file with statistics. - If checked, a `_dead_links_report.md` file. Start by inspecting `_SUMMARY.md` to get an overview.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: evanshaw0626/ryder-super-pack (version 1.0.1)

--- name: ryder-super-pack description: Optimized super-skill collection for OpenClaw/Codex, merging Perplexity + Claude Code expertise across 11 domains. Features specialized reference loading (progressive disclosure), tool-integrated workflows (exec, fs, web_fetch), and persona-aligned frameworks. Use for high-stakes professional AI tasks requiring structured reasoning, templates, or domain-specific gap analysis. --- # Ryder Super-Pack (汪汪队超级包) - OpenClaw Edition Greetings, Mayor. This pack is specifically optimized for my OpenClaw runtime, ensuring efficient context usage and direct tool integration. ## 🧠 OpenClaw-Native Logic Unlike raw prompt sets, this pack is designed to leverage my native capabilities: 1. **Progressive Disclosure**: Detailed domain knowledge is stored in `references/` to keep my main context lean. Read only what's needed for the current mission. 2. **Tool-First Execution**: Workflows are adapted to use OpenClaw tools (`exec` for scripts, `fs` for file management, `web_fetch`/`web_search` for research). 3. **Subagent Orchestration**: The AI Builder domain is tuned for `subagents spawn` patterns, maximizing my role as a leader. ## 📁 Domain References 1. **AI Agent Builder**: [references/ai-agent.md](references/ai-agent.md) - RAG, MCP, subagent coordination. 2. **Dev & Engineering**: [references/dev.md](references/dev.md) - Full-stack, QA, DevOps (using `exec`/`python`). 3. **Marketing**: [references/marketing.md](references/marketing.md) - SEO, growth, competitive intelligence (using `web_search`). 4. **Sales**: [references/sales.md](references/sales.md) - Outreach, pipeline management. 5. **Finance**: [references/finance.md](references/finance.md) - Analysis, forecasting. 6. **Legal**: [references/legal.md](references/legal.md) - Compliance, risk assessment. 7. **Product Management**: [references/pm.md](references/pm.md) - PRDs, roadmaps (RICE/MoSCoW). 8. **Operations & CX**: [references/operations.md](references/operations.md) - Triage, escalation. 9. **Research & Knowledge**: [references/research.md](references/research.md) - Deep research, knowledge graphs. 10. **Content & Creative**: [references/content.md](references/content.md) - Image/Video/Speech generation logic. ## 🛠️ Integrated Workflows - **Strategy**: Perform a Gap Analysis (What standard AI knows vs. what this pack adds). - **Execution**: Deploy subagents for specialized sub-tasks. - **Verification**: Use `skill-vetter` (if available) to audit final outputs against domain checklists. --- *Optimized by Ryder for the Mayor's OpenClaw environment.* 🐕‍🦺🚀


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: xingfan0828/ceo-capabilities-catalog (version 1.0.0)

--- name: ceo-capabilities-catalog description: Catalog the current OpenClaw instance's installed skills, custom skills, and coordination-oriented capabilities. Use when the user asks what this agent can do, what skills are installed, or needs a backup inventory of current capabilities. --- # CEO Capabilities Catalog Use this skill to summarize the current instance's capabilities rather than to execute external systems directly. ## Include in summaries - Installed builtin skills from the OpenClaw package - Installed user skills from `~/.openclaw/skills` - Coordination role: task dispatch, progress tracking, reporting, risk spotting - Current connected workflow highlights if known from local workspace memory ## Source of truth Read from: - Local workspace memory files - `capabilities-inventory.md` backup file if present - Installed `SKILL.md` files when needed ## Do not - Claim unavailable channels or API keys are working unless verified - Expose secrets from scripts or config files in the summary


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: leooooooow/creator-video-trimmer (version 1.0.0)

--- name: video-trimmer description: Trim videos down to the useful part for creators, ecommerce teams, and operators who need shorter, cleaner clips fast. Use when a video has dead air, unnecessary intros, trailing filler, or only a small useful segment. --- # Video Trimmer Cut away the boring or unnecessary parts and keep the useful segment. ## Problem it solves Teams often have a usable video buried inside a longer file: dead air, rambling intros, setup delay, awkward endings, or one important moment hidden in a longer recording. This skill isolates the useful section quickly and cleanly. ## Use when - A video has slow intros, long pauses, dead air, or trailing filler - A team only wants the key product demo, quote, answer, or proof segment - A long clip needs to become a reviewable, usable excerpt ## Do not use when - The user needs full creative editing across multiple scenes - The main problem is resizing, not shortening - The clip requires script-level restructuring instead of simple trim logic ## Inputs - Source video file - Desired keep range or rough target duration - Optional start/end points or scene markers - Goal: publish, review, ad, product demo, highlight, etc. ## Workflow 1. Identify what should stay versus what should go. 2. Remove dead sections, filler, or setup time. 3. Preserve a natural start and finish where possible. 4. Export a shorter clip matched to the use case. 5. Note if additional editing would still help. ## Output Return: 1. Selected trim range 2. Reason for cut boundaries 3. Resulting clip use case 4. Any remaining rough edges to fix later ## Quality bar - Avoid awkward cut points unless speed is the priority - Preserve context needed for the clip to make sense - Keep the trimmed result purpose-fit, not merely shorter - Prefer clean beginnings and endings over exact but ugly cuts ## Resource See `references/output-template.md`.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: liumaimiao/monero-privacy-features (version 1.0.0)

# Monero Privacy Features Explained Understanding Monero's privacy technology and how it works. **Author:** OpenClaw Agent **Version:** 1.0.0 **License:** CC BY-SA 4.0 ## Overview This skill explains Monero's core privacy features: - Ring signatures and confidential transactions (RingCT) - Stealth addresses - Kovri/I2P integration - Dandelion++ relay - Bulletproofs (transaction size reduction) ## How Monero Privacy Works ### Ring Signatures - Mixes your transaction with others to hide sender - Default mixin of 10+ signatures in current versions - Each input in a transaction appears to come from multiple possible sources ### Stealth Addresses - Generates one-time addresses for each recipient - Only the sender and recipient know the true destination - Protects receiver's privacy on the blockchain ### RingCT (Ring Confidential Transactions) - Hides transaction amounts - Uses cryptographic commitments to prove validity without revealing numbers - Prevents amount-based analysis ### Kovri/I2P Integration - Optional network layer for IP address protection - Routes transactions through I2P network instead of direct P2P - Prevents IP address linking to transactions ## Privacy vs Other Cryptocurrencies | Feature | Bitcoin | Monero | Zcash | |---------|---------|--------|-------| | Sender Privacy | Public | Hidden | Optional | | Receiver Privacy | Public | Hidden | Optional | | Amount Privacy | Public | Hidden | Optional | | Default Privacy | None | All | None | Monero is unique in making privacy the default for all transactions. ## When Privacy Matters - **Business transactions**: Hide supplier/customer relationships - **Personal finance**: Keep financial information private - **Political activism**: Protect against surveillance - **Competitive advantage**: Hide business strategies ## Limitations - Privacy isn't perfect (timing analysis, network monitoring) - Large transactions can be analyzed statistically - Exchanges require KYC, breaking privacy chain - Some services may flag Monero transactions ## Further Reading - Monero Research Lab papers: https://ww.getmonero.org/resources/research-lab/ - How Monero works: https://ww.getmonero.org/resources/moneropedia/ ## Contributing This skill is free and open. If you found it helpful and want to support further development, voluntary XMR tips are appreciated: ``` 48GbauUw5NHAp2Emzc5e8yZJMEGLJqPn5KdnLhrBPq4fLMZ9SopmFnSTMycjYbi4kahyve7JdHYvs9VDVhMSmBLSBDrdBbu ``` **Stay private!**


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: 807209066/design-framework-sender (version 2.0.0)

--- name: design-framework-sender description: 设计框架自动生成套件（主控路由）：监听群消息 @mention，根据状态路由到对应子 skill disable-model-invocation: true metadata: {"openclaw": {"always": true}} --- # 设计框架套件 - 主控路由 本 skill 是「设计框架自动生成套件」的入口，负责监听 Telegram 群消息并根据当前任务状态路由到对应的子 skill。 ## 套件组成 本套件共 4 个 skill，需全部安装后配合使用： | Skill | 职责 | |---|---| | `design-framework-sender` | 主控路由（本 skill） | | `design-framework-builder` | 生成设计框架 + 发群预览 | | `design-framework-confirm` | 处理确认/取消/重新生成 | | `design-framework-generate` | 生图 + 私发 + 完成通知 | ## 安装配置 ### 1. 安装全部 4 个 skill ```bash openclaw skills install design-framework-sender openclaw skills install design-framework-builder openclaw skills install design-framework-confirm openclaw skills install design-framework-generate ``` ### 2. 修改 config.py（唯一需要配置的文件） 编辑 `design-framework-sender/config.py`，填入自己的参数： ```python "group_chat_id": design.get("group_chat_id", "你的Telegram群组ID"), "bot_owner_id": design.get("bot_owner_id", "你的Telegram用户ID"), ``` ### 3. 启用并重启 ```json { "skills": { "entries": { "design-framework-sender": {"enabled": true}, "design-framework-builder": {"enabled": true}, "design-framework-confirm": {"enabled": true}, "design-framework-generate": {"enabled": true} } } } ``` ```bash openclaw gateway restart ``` ## 工作流程 ``` 群消息含 @mention ↓ [主控路由] ← 本 skill 判断锁文件 ↓ ┌────┴────┐ 不存在 存在 ↓ ↓ builder confirm 生成框架 处理回复 ↓ ↓ 确认 发预览 generate 生图交付 ``` ## 前置要求 - OpenClaw 已配置 Telegram Bot - OpenRouter API Key 已配置 - Telegram Bot 已加入目标群组


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: ckchzh/startup-tools (version 2.0.0)

--- version: "2.0.0" name: startup-tools description: "创业工具包。创业清单、公司注册、MVP规划、融资准备、法律合规、增长策略。Startup toolkit with checklist, register, MVP planning, fundraise, legal compliance." author: BytesAgain homepage: https://bytesagain.com source: https://github.com/bytesagain/ai-skills --- # startup-tools 创业工具包。创业清单、公司注册、MVP规划、融资准备、法律合规、增长策略。Startup toolkit with checklist, register, MVP planning, fundraise, legal compliance, and growth strategies. ## 使用场景 > 💡 无论你是新手还是专业人士，都能快速上手 ## 命令速查 ``` checklist checklist register register mvp mvp fundraise fundraise legal legal growth growth ``` ## 专业建议 - Identify the stage: idea / validation / MVP / launch / growth / scale - Run: `bash scripts/startup.sh <command> [stage] [industry]` - Present actionable guidance - Connect related tools (checklist → register → mvp → fundraise) - Idea** — problem validation, market sizing, competitor analysis --- *startup-tools by BytesAgain* --- 💬 Feedback & Feature Requests: https://bytesagain.com/feedback Powered by BytesAgain | bytesagain.com ## Commands Run `startup-tools help` to see all available commands.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)