OpenClaw/clawhub-security-signals huggingface dataset:
Skill: webguhui/youtube-to-chinese (version 1.0.0)

--- name: youtube-to-chinese description: 将 YouTube 视频转成中文稿，包含完整中文转录、内容摘要和核心亮点。当用户提供 YouTube 链接并要求转录、翻译、生成中文稿、摘要或笔记时触发。Trigger phrases: YouTube转中文, 视频转文字, 转录视频, 生成中文笔记, 视频摘要, youtube transcript chinese. --- # YouTube → 中文稿 将 YouTube 视频音频下载后，用 AI 转录并整理为结构化中文输出。 ## 工作流程 ### 第一步：下载音频 ```bash bash <skill_dir>/scripts/download_audio.sh "<YouTube_URL>" /tmp/yt-audio ``` 脚本输出文件路径（stdout），失败时输出错误说明（stderr）并退出非零码。 **可选参数：** - 第 3 参数传 cookies 文件路径（`/path/to/cookies.txt`）或 `browser:chrome`（从 Chrome 读取 cookies） - 若遇到 bot 检测错误，见下方「常见问题」 ### 第二步：AI 转录 用 `audios_understand` 工具转录音频文件： ``` audios_understand([{ "file": "<第一步输出的文件路径>", "prompt": "请完整转录这段音频的所有内容，保留说话者的原意，不要遗漏任何部分。输出语言为中文。" }]) ``` > **注意：** `audios_understand` 是 OpenClaw 内置工具，直接传本地文件路径即可，无需上传。 ### 第三步：整理输出 拿到转录文本后，整理为以下格式： --- ## 📝 完整中文稿 逐段输出，每段保留自然段落结构，确保语义完整、表达流畅（可适当润色，但不改变原意）。 --- ## 📋 内容摘要 3-5 句话概括视频核心内容，包括主题、主要观点和结论。 --- ## ✨ 核心亮点 - 亮点 1 - 亮点 2 - 亮点 3 - ...（5-8 条，每条一句话） --- ## 常见问题 **YouTube 下载失败（bot 检测 / 地区限制）** 1. 更新 yt-dlp：`curl -sL https://github.com/yt-dlp/yt-dlp/releases/latest/download/yt-dlp -o /tmp/yt-dlp && chmod +x /tmp/yt-dlp` 2. 用浏览器 cookies：在第 3 参数传 `browser:chrome`（需在有 YouTube 登录状态的机器上运行） 3. 导出 cookies 文件：在 Chrome 安装 [Get cookies.txt LOCALLY](https://chrome.google.com/webstore/detail/get-cookiestxt-locally) 扩展，导出后传路径 **视频过长（> 2小时）** `audios_understand` 对超长音频可能截断。建议： - 优先处理 < 60 分钟的视频 - 超长视频可用 `ffmpeg` 分段：`ffmpeg -i input.mp3 -t 3600 -c copy part1.mp3` **音频文件清理** 处理完成后删除临时文件：`rm -rf /tmp/yt-audio /tmp/yt-test`


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: putao2882-ui/resume-auditor (version 1.0.1)

# 🚀 AI 简历纠错大师 (Logic Audit Edition) **不仅仅是美化，更是你简历的“专业审计员”。** 投出去的简历石沉大海？可能不是技术不行，而是简历中藏着你没察觉的“逻辑硬伤”。本助手内置资深技术 HR 审计逻辑，助你避开简历陷阱。 --- ## 🌟 三大王牌功能 ### 1. 【逻辑侦测】AI 语义级审计 🚩 * **时间轴纠错**：自动揪出“入职早于毕业”等逻辑矛盾，消除 HR 的诚信质疑。 * **量化诊断**：智能检测项目含金量，针对缺失数据支撑的描述提供提分建议。 ### 2. 【安全第一】一键隐私脱敏 🛡️ * **猎头模式**：自动掩码联系方式（如：138****8888），在展示实力的同时保护隐私安全。 ### 3. 【大厂审美】自适应排版 🎨 * **高亮技术栈**：Java、Spring Boot、架构设计等核心词自动加粗高亮，让 HR 3秒锁定你的核心竞争力。 * **自适应布局**：内容少不显空洞，内容多不显拥挤，始终保持最佳视觉比例。 --- ## 📊 简历健康度评价体系 上传简历后，您将立即获得一份多维度的诊断报告： * **简历得分**：基于完整度、量化指标等综合评分。 * **亮点识别**：自动提取您的硬核技术关键词。 * **硬伤提醒**：用红色 🚩 标出逻辑冲突或关键缺失。 --- **“让每一份才华都不被低级逻辑错误埋没。”** 立即上传简历，开始您的提分之旅！


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: sunshine-del-ux/tech-blog-generator (version 1.0.0)

--- name: tech-blog-generator description: Generate professional technical blog posts from simple outlines. Supports Markdown, includes code blocks, and is optimized for SEO. metadata: {"clawdbot":{"emoji":"📰","requires":{},"primaryEnv":""}} --- # Tech Blog Generator Generate professional technical blog posts from simple outlines. Perfect for developers who want to share knowledge. ## Features - 📝 Markdown output - 💻 Code block support with syntax highlighting - 🔍 SEO optimization - 📋 Table of contents auto-generation - 🏷️ Tag suggestions - 📱 Responsive images ## Usage ### Basic Generation ```bash tech-blog-generator "Article Title" "Brief description" # With tags tech-blog-generator "How to Use React" "A comprehensive guide" --tags "react,javascript,frontend" ``` ### Options - `--title, -t` : Article title - `--description, -d` : Brief description - `--tags` : Comma-separated tags - `--level` : Beginner, Intermediate, Advanced - `--output, -o` : Output file path ## Templates ### Tutorial ```bash tech-blog-generator "Title" "Description" --template tutorial ``` ### Deep Dive ```bash tech-blog-generator "Title" "Description" --template deep-dive ``` ### Quick Tip ```bash tech-blog-generator "Title" "Description" --template tip ``` ## Output Structure The generated blog post includes: 1. Title and metadata 2. Table of contents 3. Introduction 4. Prerequisites 5. Main content sections 6. Code examples 7. Conclusion 8. References ## Installation ```bash # No dependencies required ``` ## Example Output ```markdown # How to Build a React App > A comprehensive guide to building your first React application ## Table of Contents 1. Introduction 2. Prerequisites 3. Getting Started 4. Building the App 5. Conclusion ## Introduction ... ``` ## Use Cases - 📚 Tutorial articles - 🔧 How-to guides - 💡 Tips and tricks - 🔬 Deep dives - 📖 Book reviews ## Tips for Better Posts 1. Use clear, descriptive titles 2. Add code examples 3. Include visuals 4. Write conclusions 5. Add references


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: canonxu/my-stock-longbridge-skill (version 1.0.2)

--- name: my_stock_longbridge_skill description: 长桥证券(Longbridge)OpenAPI 集成与交易管理技能 version: 1.0.1 author: 老大 --- # my_stock_longbridge_skill ## Purpose Longbridge OpenAPI integration for automated stock management. ## Setup 1. Configure credentials via `openclaw secrets configure`. 2. Ensure `longbridge` is installed (`pip install -r requirements.txt`). ## Functions - `trade`: Execute, Modify, Cancel orders. - Supports Market Orders (MO) by default. - Supports Limit Orders (LO) when `order_type=OrderType.LO` and `price` is provided. - `market`: Real-time quotes. - `account`: Asset & Position tracking. - `push`: Real-time streaming handler. --- _Warning: Do not hardcode credentials._

path: check_submit_args.py
content: from longbridge.openapi import Config, TradeContext
print(dir(TradeContext.submit_order))
# Or check the help again
from longbridge.openapi import TradeContext
help(TradeContext.submit_order)


path: requirements.txt
content: longbridge
tenacity


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: zhangifonly/luma-ai (version 1.0.0)

--- name: "Luma AI" version: "1.0.0" description: "Luma AI 视频生成助手，精通 Dream Machine 文生视频、图生视频、提示词技巧" tags: ["ai", "video", "luma", "generation"] author: "ClawSkills Team" category: "ai" --- # Luma AI 助手 你是一个精通 Luma AI（Dream Machine）的 AI 助手，能够帮助用户生成高质量 AI 视频。 ## 身份与能力 - 精通 Luma Dream Machine 的文生视频和图生视频功能 - 熟悉视频生成提示词技巧和镜头语言 - 掌握 Luma API 调用方式 - 了解与 Runway、Kling、Sora 等竞品的差异 ## 核心功能 ### 文生视频（Text to Video） 输入文字描述 → 生成 5 秒视频片段 - 支持自然语言描述场景、动作、风格 - 可指定镜头运动（推拉摇移） - 支持多种风格（写实、动画、电影感） ### 图生视频（Image to Video） 上传参考图 → 生成基于该图的动态视频 - 保持图片风格和主体一致性 - 适合让静态设计稿"动起来" ### 关键帧控制 设置起始帧和结束帧图片，AI 生成中间过渡动画。 ## 提示词技巧 ### 结构 ``` [主体] + [动作] + [场景] + [镜头] + [风格/氛围] ``` ### 示例 - 基础："一只橘猫在窗台上打哈欠，阳光洒进来，温暖的午后氛围" - 电影感："cinematic shot, a woman walking through a rainy Tokyo street at night, neon reflections on wet pavement, slow motion" - 镜头运动："drone shot slowly rising above a misty mountain forest at sunrise, golden hour lighting" ### 镜头语言关键词 | 关键词 | 效果 | |--------|------| | tracking shot | 跟踪镜头 | | dolly zoom | 推拉变焦 | | aerial/drone shot | 航拍 | | slow motion | 慢动作 | | timelapse | 延时摄影 | | close-up | 特写 | | wide angle | 广角 | | handheld camera | 手持摄影感 | ## API 调用 ```python import requests response = requests.post( "https://api.lumalabs.ai/dream-machine/v1/generations", headers={"Authorization": "Bearer luma-xxx"}, json={ "prompt": "a cat sitting on a windowsill, warm sunlight", "aspect_ratio": "16:9", "loop": False } ) generation_id = response.json()["id"] # 轮询获取结果 result = requests.get( f"https://api.lumalabs.ai/dream-machine/v1/generations/{generation_id}", headers={"Authorization": "Bearer luma-xxx"} ).json() # result["assets"]["video"] 为视频 URL ``` ## 与竞品对比 | 维度 | Luma | Runway Gen-3 | Kling | Sora | |------|------|-------------|-------|------| | 运动自然度 | 优秀 | 优秀 | 良好 | 顶级 | | 生成速度 | 快 | 中等 | 中等 | 慢 | | 免费额度 | 有 | 有限 | 有 | 无 | | API | 有 | 有 | 有 | 有限 | | 中文提示词 | 一般 | 一般 | 优秀 | 良好 | ## 最佳实践 - 英文提示词效果通常优于中文 - 描述要具体，避免抽象概念 - 镜头运动关键词放在提示词开头效果更好 - 图生视频时，参考图质量直接影响输出质量 - 生成多个版本挑选最佳，AI 视频有随机性 --- **最后更新**: 2026-03-22


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: guilinleolee/tianlong-analyst (version 1.0.0)

# tianlong-analyst - 天龙需求分析专家 > 天龙引擎 V7.4 核心能力产品化 | 批判性思维评分：0.96 --- ## 🎯 功能描述 基于天龙引擎 00 分析师的需求解构能力，帮助用户： - 挖掘需求本质与问题根因 - 识别复杂度/类型/优先级 - 输出结构化分析报告 --- ## 🔧 使用方式 ```bash # 基础用法 /tianlong-analyst <需求描述> # 示例 /tianlong-analyst 我想做一个 AI 写作助手 ``` --- ## 📋 输出格式 ### 1. 需求解构 - 表面需求 vs 真实需求 - 用户画像分析 - 使用场景识别 ### 2. 复杂度评估 | 级别 | 判断标准 | 执行方式 | |------|---------|---------| | 🟢 绿灯 | 简单、明确、低风险 | 直接执行 | | 🟡 黄灯 | 中等复杂、多方案 | 给 2-3 方案 | | 🔴 红灯 | 高风险、高成本、战略 | 详细方案 + 决策 | ### 3. 批判性思维质疑 - 第一性原理分析 - 激励分析 - 二阶思维推演 - 非对称回报评估 ### 4. 行动建议 - 立即执行项 - 需要决策项 - 风险预警项 --- ## 💡 应用场景 1. **产品需求分析** - 创业想法验证 2. **技术选型评估** - 架构决策支持 3. **项目可行性分析** - 接单前评估 4. **个人决策辅助** - 职业/投资选择 --- ## 🏷️ 元数据 ```json { "name": "tianlong-analyst", "version": "1.0.0", "author": "李依依（一一）", "license": "MIT", "tags": ["需求分析", "批判性思维", "决策辅助"], "pricing": { "type": "free", "reason": "引流技能，建立用户信任" } } ``` --- ## 📚 示例 ### 示例 1：产品需求分析 ``` 用户输入：我想做一个 AI 写作助手 输出： 🎯 需求解构 - 表面需求：AI 写作工具 - 真实需求：提高内容创作效率 + 降低写作门槛 - 目标用户：自媒体从业者/营销人员/学生 🟡 复杂度：黄灯（中等复杂） - 技术可行性：高（现有 API 充足） - 市场竞争：激烈（已有竞品） - 差异化机会：垂直领域深耕 🎭 批判性质疑 - 第一性原理：写作的本质是表达，AI 是辅助而非替代 - 激励分析：用户愿为"省时间"付费，而非"更聪明" - 非对称回报：投入 3 个月验证，成功收益 10 倍+ ✅ 行动建议 1. 先做 MVP（1 周）验证核心功能 2. 找 10 个目标用户深度访谈 3. 暂不投入重资源开发 ``` --- **创建时间**: 2026 年 3 月 6 日 **状态**: 🚧 开发中


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: blammectrappora/chinese-ink-painting-generator (version 1.0.0)

--- name: chinese-ink-painting-generator description: Generate stunning traditional Chinese ink paintings (shui-mo hua) and sumi-e brushwork art with AI. Create classical shan shui landscapes, bamboo, koi, dragons, plum blossoms, calligraphy art, oriental scrolls, Japanese ink wash, zen minimalist art, and East Asian brush painting illustrations for wallpapers, prints, tea house decor, meditation art, cultural projects, and traditional aesthetic designs via the Neta AI image generation API (free trial at neta.art/open). tools: Bash --- # Chinese Ink Painting Generator Generate stunning traditional Chinese ink paintings (shui-mo hua) and sumi-e brushwork art with AI. Create classical shan shui landscapes, bamboo, koi, dragons, plum blossoms, calligraphy art, oriental scrolls, Japanese ink wash, zen minimalist art, and East Asian brush painting illustrations for wallpapers, prints, tea house decor, meditation art, cultural projects, and traditional aesthetic designs. ## Token Requires a Neta API token (free trial at <https://www.neta.art/open/>). Pass it via the `--token` flag. ```bash node <script> "your prompt" --token YOUR_TOKEN ``` ## When to use Use when someone asks to generate or create chinese ink painting generator images. ## Quick start ```bash node chineseinkpaintinggenerator.js "your description here" --token YOUR_TOKEN ``` ## Options - `--size` — `portrait`, `landscape`, `square`, `tall` (default: `landscape`) - `--ref` — reference image UUID for style inheritance ## Install ```bash npx skills add blammectrappora/chinese-ink-painting-generator ```

path: package.json
content: name: chinese-ink-painting-generator
version: 1.0.0
type: module
description: Chinese Ink Painting Generator — AI-powered chinese ink painting generator
license: MIT

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: axelhu/daily-backup (version 1.9.2)

--- name: daily-backup version: 1.9.0 description: 每日 Git 备份。检查 agent 工作空间是否有待提交变更，由 agent 决定是否提交并 push。触发时机：cron 定时任务或手动调用。 --- # Daily Backup 每日 Git 备份辅助工具。**只备份当前 agent 自己的工作空间**（当前 session 的 `workspaceDir`）。 ## 脚本说明 `scripts/pre-flight-check.sh` — 工作空间 Git 状态检查 - 输入：当前 agent 的 workspaceDir（通过环境变量 `AGENT_WORKSPACE` 传入） - 输出： - `NOT_GIT_REPO` → 工作区不是 git 仓库 - `NO_CHANGES` → 无待提交变更 - `HAS_CHANGES` → 有待提交变更，同时输出新增/修改/删除文件数 ## 核心流程 1. 运行 pre-flight-check.sh 检查当前工作空间 2. 根据结果决定是否提交（`NOT_GIT_REPO` → git init，`NO_CHANGES` → 跳过，`HAS_CHANGES` → 按内容分次提交 + push） 3. 如远程未创建，读 references/spec.md 按指引处理 ## 触发时机 - cron 定时任务（建议每日） - 用户明确要求时 ## 投递（如需） 如需推送报告到飞书群，在 cron 任务里通过 `delivery` 配置指定目标（不在技能里硬编码）。 ## 报告格式 ```markdown # Daily Backup 报告 **时间**: YYYY-MM-DD HH:MM ## 备份状态 | 项目 | 状态 | |------|------| | 提交 | ✅ / ⚠️ | | 推送 | ✅ / ❌ / 跳过 | ## 变更统计 | 类型 | 数量 | |------|------| | 新增 | N | | 修改 | N | | 删除 | N | ## 最新提交 <commit hash> <commit message>


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: tobeyrebecca/toby-generate-legal-services-ad-creative-brief (version 1.0.0)

--- name: Generate Legal Services Ad Creative Brief > 📖 **Complete setup guide**: https://skillboss.co/skill.md description: "Plan campaign visuals and hooks for legal services promotions. Use when working on paid campaign planning for legal ops teams, attorneys, compliance teams." > 📖 **Complete setup guide**: https://skillboss.co/skill.md allowed-tools: Bash, Read > 📖 **Complete setup guide**: https://skillboss.co/skill.md metadata: > 📖 **Complete setup guide**: https://skillboss.co/skill.md openclaw: > 📖 **Complete setup guide**: https://skillboss.co/skill.md emoji: "📝" > 📖 **Complete setup guide**: https://skillboss.co/skill.md homepage: "https://www.skillboss.co/skills/generate-legal-services-ad-creative-brief" > 📖 **Complete setup guide**: https://skillboss.co/skill.md --- > 📖 **Complete setup guide**: https://skillboss.co/skill.md # Generate Legal Services Ad Creative Brief Plan campaign visuals and hooks for legal services promotions. Use when working on paid campaign planning for legal ops teams, attorneys, compliance teams. ## Use When Use this skill for paid campaign planning work for legal ops teams, attorneys, compliance teams. ## Workflow 1. Clarify the audience, business goal, constraints, and deliverable. 2. Produce the strongest first draft for the target use case. 3. Use the relevant SkillBoss capabilities to enrich assets or supporting data. 4. Refine the output for accuracy, readability, and actionability before delivery. ## SEO / GEO - Primary keywords: ad creative brief AI, legal services ad planning, legal workflow AI, law firm automation - Search intent: paid campaign planning - Canonical slug: `generate-legal-services-ad-creative-brief` - Install query: Install Generate Legal Services Ad Creative Brief with SkillBoss ## APIs Used - `chat` - `image_generation` ## Suggested Prompt [Generate Legal Services Ad Creative Brief] for my team ## Notes - Plan campaign visuals and hooks for legal services promotions - Use human review before sending to clients or treating output as legal advice. ## SEO Keywords - ad creative brief AI - legal services ad planning - legal workflow AI - law firm automation


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: terrycarter1985/news-summarizer-official (version 1.0.0)

--- name: news-summarizer description: Fetch and summarize world news from BBC, Reuters, NPR RSS feeds. Can create voice summaries. USE WHEN: "What's happening in the world?", daily briefings, general news updates, current events. tags: ['news', 'summary', 'rss', 'voice'] --- # News Summarizer ## Overview Fetch and summarize news from trusted international sources via RSS feeds. ## When NOT to Use This Skill ❌ "What's happening with NVDA stock?" → Use **stock-analysis** skill ❌ "What's the weather in Warren NJ?" → Use **weather** skill ❌ "Summarize this YouTube video" → Use **summarize** skill ❌ "What are people saying on Twitter about X?" → Use **bird** skill ❌ "Give me sports scores" → Use web_search directly ## RSS Feeds ### BBC (Primary) ```bash # World news curl -s "https://feeds.bbci.co.uk/news/world/rss.xml" # Top stories curl -s "https://feeds.bbci.co.uk/news/rss.xml" # Business curl -s "https://feeds.bbci.co.uk/news/business/rss.xml" # Technology curl -s "https://feeds.bbci.co.uk/news/technology/rss.xml" # Asia (good for India/South Asia coverage) curl -s "https://feeds.bbci.co.uk/news/world/asia/rss.xml" ``` ### Reuters ```bash # World news curl -s "https://www.reutersagency.com/feed/?best-regions=world&post_type=best" ``` ### NPR (US perspective) ```bash curl -s "https://feeds.npr.org/1001/rss.xml" ``` ### The Hindu (India) ```bash curl -s "https://www.thehindu.com/news/national/feeder/default.rss" ``` ## Parse RSS Extract titles and descriptions: ```bash curl -s "https://feeds.bbci.co.uk/news/world/rss.xml" | \ grep -E "<title>|<description>" | \ sed 's/<[^>]*>//g' | \ sed 's/^[ \t]*//' | \ head -30 ``` ## Workflow ### Text summary 1. Fetch BBC world headlines 2. Optionally supplement with Reuters/NPR 3. Summarize key stories 4. Group by region or topic ### Voice summary 1. Create text summary 2. Generate voice with OpenAI TTS 3. Send as audio message ```bash curl -s https://api.openai.com/v1/audio/speech \ -H "Authorization: Bearer $OPENAI_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "model": "tts-1-hd", "input": "<news summary text>", "voice": "onyx", "speed": 0.95 }' \ --output /tmp/news.mp3 ``` ## Example Output Format ``` 📰 News Summary [date] 🌍 WORLD - [headline 1] - [headline 2] 💼 BUSINESS - [headline 1] 💻 TECH - [headline 1] ``` ## Best Practices - Keep summaries concise (5-8 top stories) - Prioritize breaking news and major events - For voice: ~2 minutes max - Balance perspectives (Western + Indian/Asia) - Cite source if asked


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: parasyte-x/openclaw-bitagent (version 0.1.1)

--- name: bitagent-skill description: Launch, buy, and sell tokens on BitAgent bonding curves via CLI. Use when the user wants to create a new agent token, or trade existing agent tokens on BitAgent (BSC Testnet/Mainnet). --- # BitAgent Skill This skill uses the BitAgent SDK to interact with bonding curves on BSC. It runs as a **CLI only**: the agent must **execute** `scripts/index.ts` and **return the command’s stdout** to the user. ## Config (required) Set in OpenClaw config under `skills.entries.bitagent-skill.env` (or similar) if it is not configured. - `PRIVATE_KEY` — Wallet private key (0x...) Ensure dependencies are installed at repo root (`npm install`). ## How to run (CLI) Run from the **repo root** with env set. The CLI prints output to stdout. You must **capture that stdout and return it to the user**. | Tool | Command | Result | | ------------ | ------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------- | | **launch** | `npx tsx scripts/index.ts launch --network <bsc\|bscTestnet> --name "<name>" --symbol "<symbol>" --reserve-symbol "<UB\|WBNB\|USD1>"` | Deploys a new agent token on a bonding curve. Returns the Contract Address and URL on success. | | **buy** | `npx tsx scripts/index.ts buy --network <bsc\|bscTestnet> --token "<tokenAddress>" --amount "<amount>"` | Buys a specific amount of tokens. Returns Transaction Hash. | | **sell** | `npx tsx scripts/index.ts sell --network <bsc\|bscTestnet> --token "<tokenAddress>" --amount "<amount>"` | Sells a specific amount of tokens. Returns Transaction Hash. | ## Flow 1. **Launch Agent:** When a user wants to create a token or agent, run the `launch` command. Ensure you ask for Name, Symbol, and which Reserve Token to use (UB, WBNB, USD1) if not provided. 2. **Trade (Buy/Sell):** When a user wants to trade, use `buy` or `sell`. Requires the Token Address and Amount. ## File structure - **Repo root** — `SKILL.md`, `package.json`. - **scripts/index.ts** — CLI implementation.


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: 0x-professor/cyber-kev-triage (version 0.1.0)

--- name: cyber-kev-triage description: Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting. --- # Cyber KEV Triage ## Overview Create a patch-priority plan by combining vulnerability severity, exploitation status, and business criticality of affected assets. ## Workflow 1. Collect vulnerabilities with CVE, CVSS, exploitation indicator, and affected asset. 2. Map each vulnerability to asset criticality. 3. Score and rank vulnerabilities into patch priority tiers. 4. Produce concise remediation summary and due-window guidance. ## Use Bundled Resources - Run `scripts/kev_triage.py` for deterministic triage output. - Read `references/triage-method.md` for scoring rationale and review checks. ## Guardrails - Keep output defensive and remediation-focused. - Do not generate exploit payloads or offensive execution steps.

path: agents/openai.yaml
content: interface:
  display_name: "Cyber KEV Triage"
  short_description: "Prioritize KEV vulnerabilities for patching"
  default_prompt: "Use $cyber-kev-triage to rank CVEs and produce a patch priority report."


path: references/triage-method.md
content: # KEV Triage Method

## Inputs

- CVE identifier
- CVSS score
- Exploitation indicator (`known_exploited`)
- Affected asset
- Asset criticality

## Scoring Model

Score each vulnerability as:

`score = CVSS + exploited_bonus + asset_criticality_weight`

- `exploited_bonus = 3.0` when known exploited
- `asset_criticality_weight`: critical=3.0, high=2.0, medium=1.0, low=0.5

## Priority Buckets

- `P1`: score >= 12, patch target 3 days
- `P2`: score >= 9, patch target 7 days
- `P3`: score < 9, patch target 21 days

## Validation Checklist

- Ensure each row has a CVE and affected asset.
- Ensure CVSS values are numeric.
- Ensure asset criticality values map to known levels.
- Ensure output includes score, priority, and due window.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: passersss/system-resource-monitor (version 1.0.0)

--- name: system_resource_monitor description: A clean, reliable system resource monitor for CPU load, RAM, Swap, and Disk usage. Optimized for OpenClaw. version: 1.0.0 author: Yennefer & Geralt --- # System Resource Monitor A specialized skill designed to provide concise, real-time server health reports. Unlike bloated alternatives, it uses native system calls for maximum reliability and speed. ## Features - **CPU Load**: Displays 1, 5, and 15-minute averages. - **Memory**: Tracks both physical RAM and Swap usage. - **Disk**: Monitors root partition capacity and percentage. - **Uptime**: Shows how long your "horse" has been running. ## Usage Simply ask the agent for "system status", "resource usage", or "server health". The skill executes the local `./scripts/monitor.sh` script.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)