OpenClaw/clawhub-security-signals huggingface dataset:
Skill: ivangdavila/cameras (version 1.0.1)

--- name: Cameras slug: cameras version: 1.0.1 description: Connect to security cameras, capture snapshots, and process video feeds with protocol support. changelog: User-driven credential model, declared tool requirements metadata: {"clawdbot":{"emoji":"📷","requires":{"bins":["ffmpeg"]},"os":["linux","darwin"]}} --- ## Scope This skill: - ✅ Generates camera capture commands - ✅ Guides integration with security systems - ✅ Provides troubleshooting for camera issues **User-driven model:** - User provides camera credentials (RTSP URLs, passwords) - User runs capture commands - User installs required tools This skill does NOT: - ❌ Store camera credentials - ❌ Run captures automatically without user request - ❌ Access cameras without user-provided access info ## Requirements **Required:** - `ffmpeg` — for capture and recording **Optional (user installs if needed):** - `gphoto2` — for DSLR/mirrorless control - `v4l2-ctl` — for USB cameras on Linux ## Quick Reference | Topic | File | |-------|------| | Security camera integration | `security-integration.md` | | USB/webcam capture | `capture.md` | | DSLR control | `photography-control.md` | | Video processing | `processing.md` | ## Core Rules ### 1. User Provides Camera Access When user requests capture: ``` User: "Snapshot from my front door camera" Agent: "I need the RTSP URL. Format: rtsp://user:pass@ip/stream Provide it or set CAMERA_FRONT_URL in env." User: "rtsp://admin:pass@192.168.1.50/stream1" → Agent generates: ffmpeg -i "URL" -frames:v 1 snapshot.jpg ``` ### 2. Common Commands ```bash # Snapshot from RTSP (user provides URL) ffmpeg -i "$RTSP_URL" -frames:v 1 snapshot.jpg # Record 10s clip ffmpeg -i "$RTSP_URL" -t 10 -c copy clip.mp4 # Webcam snapshot (macOS) ffmpeg -f avfoundation -i "0" -frames:v 1 webcam.jpg # Webcam snapshot (Linux) ffmpeg -f v4l2 -i /dev/video0 -frames:v 1 webcam.jpg ``` ### 3. Protocol Reference | Protocol | Use Case | URL Format | |----------|----------|------------| | RTSP | IP cameras | `rtsp://user:pass@ip:554/stream` | | HTTP | Simple cams | `http://ip/snapshot.jpg` | | V4L2 | USB cameras | `/dev/video0` | ### 4. Integration Patterns **With Home Assistant:** ``` GET /api/camera_proxy/camera.front_door ``` User provides HA URL and token. **With Frigate:** - MQTT: `frigate/events` for alerts - HTTP: `/api/events/{id}/snapshot.jpg` ### 5. Security - Never log camera URLs with credentials - Recommend user stores URLs in env vars - RTSP streams may be unencrypted — warn about LAN security


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (HIGH)
Skill: kirkraman/godfery-build-travel-hospitality-faq-page (version 1.0.0)

--- name: "Build Travel Hospitality FAQ Page" description: "Generate customer-facing answers for common travel hospitality questions. Use when working on FAQ content for travel teams, hospitality marketers,..." homepage: "https://www.skillboss.co/skills/build-travel-hospitality-faq-page" metadata: {"category":"travel-hospitality","subcategory":"trip-planning","skill_id":[REDACTED_SECRET],"generated_day":"","seo_keywords":["FAQ generator AI","travel hospitality FAQ writer","travel marketing AI","hospitality automation"]} --- # Build Travel Hospitality FAQ Page Generate customer-facing answers for common travel hospitality questions. Use when working on FAQ content for travel teams, hospitality marketers,... ## Use When Use this skill for FAQ content work for travel teams, hospitality marketers, planners. ## Workflow 1. Clarify the audience, business goal, constraints, and deliverable. 2. Produce the strongest first draft for the target use case. 3. Use the relevant SkillBoss capabilities to enrich assets or supporting data. 4. Refine the output for accuracy, readability, and actionability before delivery. ## SEO / GEO - Primary keywords: FAQ generator AI, travel hospitality FAQ writer, travel marketing AI, hospitality automation - Search intent: FAQ content - Canonical slug: `build-travel-hospitality-faq-page` - Install query: Install Build Travel Hospitality FAQ Page with SkillBoss ## APIs Used - `chat` - `web_search` ## Suggested Prompt [Build Travel Hospitality FAQ Page] for my team ## Notes - Generate customer-facing answers for common travel hospitality questions - Review outputs before external publication or automated execution. ## SEO Keywords - FAQ generator AI - travel hospitality FAQ writer - travel marketing AI - hospitality automation


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: clawdiri-ai/business-tools (version 1.0.0)

--- name: Business Tools Pack description: > 7 automation skills for digital product businesses: analytics tracking, autonomous trading signal optimization, customer research, email automation, Gumroad page generation, testimonial collection, and first-principles analysis. metadata: pack: true includes: - analytics-tracking-dv - autosignals-davinci - customer-research-dv - email-automation-dv - gumroad-page-gen-dv - testimonial-collector-dv - first-principles-dv --- # Business Tools Pack 7 automation skills for solo founders and digital product businesses. ## Included Skills 1. **Analytics & Tracking** — UTM links, pixels, attribution setup 2. **AutoSignals** — Autonomous trading signal optimization loop 3. **Customer Research** — Social listening and pre-launch validation 4. **Email Automation** — ConvertKit/Mailchimp sequence deployment 5. **Gumroad Page Generator** — High-converting sales page copy from specs 6. **Testimonial Collector** — Automated day-3/7/14 review collection 7. **First Principles Analyzer** — Deep assumption-stripping analysis ## Quick Start ```bash clawhub install analytics-tracking-dv clawhub install autosignals-davinci clawhub install customer-research-dv clawhub install email-automation-dv clawhub install gumroad-page-gen-dv clawhub install testimonial-collector-dv clawhub install first-principles-dv ``` ## License MIT


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: borahm/whoop (version 0.1.0)

--- name: whoop description: WHOOP morning check-in (recovery/sleep/strain) with suggestions. metadata: clawdbot: config: requiredEnv: - WHOOP_CLIENT_ID - WHOOP_CLIENT_SECRET - WHOOP_REFRESH_TOKEN --- # whoop WHOOP morning check-in: - fetches your latest WHOOP data (Recovery, Sleep, Cycle/Strain) - generates a short set of suggestions for the day ## Quick Start (User + Bot) ### What the user does (one-time) 1) Create a WHOOP app and get credentials: - `WHOOP_CLIENT_ID` - `WHOOP_CLIENT_SECRET` 2) In the WHOOP developer dashboard, set Redirect URL: - `https://localhost:3000/callback` 3) Put secrets into `~/.clawdbot/.env`: ```bash WHOOP_CLIENT_ID=... WHOOP_CLIENT_SECRET=... ``` 4) Authorize once (get refresh token): ```bash node /home/claw/clawd/skills/whoop/bin/whoop-auth --redirect-uri https://localhost:3000/callback ``` - Open the printed URL on your phone/browser - Tap Allow/Authorize - Copy the `code` from the callback URL and paste it back This writes `WHOOP_REFRESH_TOKEN=...` into `~/.clawdbot/.env`. ### What the bot does (each run) Run: ```bash node /home/claw/clawd/skills/whoop/bin/whoop-morning ``` Then send the output back to the user. ## Automation (daily) Recommended: schedule with Gateway cron (daily morning). - Command: `node /home/claw/clawd/skills/whoop/bin/whoop-morning` - Bot should send the output as a message. ## Notes - OAuth endpoints: - auth: `https://api.prod.whoop.com/oauth/oauth2/auth` - token: `https://api.prod.whoop.com/oauth/oauth2/token` - Requires `offline` scope to receive refresh tokens. - WHOOP rotates refresh tokens; the newest refresh token must be saved.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: wangxiaofei860208-source/lobster-agent-summary (version 1.0.0)

--- name: lobster-agent-summary description: Agent进度摘要系统，定期检查子Agent状态并生成简短进度报告。参考Claude Code的AgentSummary机制，每30秒对子Agent生成3-5词状态摘要。 metadata: {"openclaw":{"requires":["subagents","sessions_history"]}} --- # Agent Summary — 进度摘要系统 参考 Claude Code 的 AgentSummary 机制，用于监控子Agent工作状态。 ## 核心机制 ### 摘要生成 Claude Code 每30秒对子Agent的对话历史运行一次轻量查询，生成进度摘要： - 原文要求 Claude 用 3-5 个词描述当前正在做什么 - ✅ "Reading runAgent.ts" — 具体 - ✅ "Fixing null check in validate.ts" — 具体 - ❌ "Investigating the issue" — 太模糊 ### 优化策略 - 复用父Agent的上下文，最大化缓存命中率 - 摘要请求使用相同系统提示和工具列表 - 使摘要生成的 token 成本极低 ## 使用方式 ### 1. 手动检查 ``` subagents list → 获取所有Worker状态 对每个活跃Worker: sessions_history(sessionKey, limit=2) → 获取最新消息 → 生成摘要 ``` ### 2. 在心跳中集成 在 HEARTBEAT.md 中加入 Agent Summary 检查： ``` ## Agent Summary Check - 检查是否有活跃的子Agent - 如有，生成进度摘要 - 只在有变化时通知用户 ``` ### 3. Coordinator集成 在协调器模式下，定期检查Worker进度： ``` 每30秒: 1. subagents list → 获取活跃Workers 2. 对每个Worker获取最新2条消息 3. 生成3-5词进度摘要 4. 汇总报告给用户（仅在变化时） ``` ## 摘要格式 ``` 📊 Agent Status: ├─ 🟢 researcher: "Searching Rust async docs" ├─ 🟢 coder: "Writing unit tests for auth module" └─ ⚪ devops: completed ✓ ``` ## 注意 - 不要频繁轮询，最多每30秒一次 - 只在有变化时通知用户 - 完成/失败的Agent立即报告 - 深夜（23:00-08:00）不打扰用户


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mtsatryan/ah-angular-expert (version 1.0.0)

--- name: angular-expert description: 'You are an Angular expert specializing in Angular 17+ with standalone components, signals, RxJS, and enterprise-scale applications. Use when: angular 17+ modern features, rxjs advanced patterns.' --- # Angular Expert You are an Angular expert specializing in Angular 17+ with standalone components, signals, RxJS, and enterprise-scale applications. ## Core Expertise ### Angular 17+ Modern Features > 📎 **Code example 1** (typescript) — see [references/examples.md](references/examples.md) ### RxJS Advanced Patterns > 📎 **Code example 2** (typescript) — see [references/examples.md](references/examples.md) ### Dependency Injection & Providers > 📎 **Code example 3** (typescript) — see [references/examples.md](references/examples.md) ### Forms and Validation > 📎 **Code example 4** (typescript) — see [references/examples.md](references/examples.md) ### Guards and Interceptors > 📎 **Code example 5** (typescript) — see [references/examples.md](references/examples.md) ### Testing Strategies > 📎 **Code example 6** (typescript) — see [references/examples.md](references/examples.md) ## Best Practices 1. Use standalone components by default 2. Leverage signals for reactive state 3. Implement OnPush change detection 4. Use RxJS operators efficiently 5. Follow Angular style guide 6. Implement proper error handling 7. Write comprehensive tests ## Performance Optimization 1. Use OnPush change detection strategy 2. Implement virtual scrolling for large lists 3. Lazy load modules and components 4. Use track by functions in *ngFor 5. Implement proper unsubscribe patterns 6. Use async pipe for observables 7. Optimize bundle size with tree shaking ## Output Format When implementing Angular solutions: 1. Use Angular 17+ features 2. Implement standalone components 3. Use signals for state management 4. Add proper TypeScript types 5. Follow Angular best practices 6. Include comprehensive testing 7. Optimize for performance Always prioritize: - Type safety - Performance optimization - Code maintainability - Testing coverage - Enterprise scalability --- ## Reference Materials For detailed code examples and implementation patterns, see [references/examples.md](references/examples.md).


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: dhdragon/macos-gui-automation (version 1.0.0)

# macOS GUI Automation Skill ## Capabilities - **Screen Reading**: Capture screenshots and OCR text - **Mouse Control**: Click, double-click, right-click, move, drag - **Keyboard Input**: Type text, press keys, shortcuts - **Window Management**: List windows, focus, resize, close - **App Control**: Launch, quit, bring to front ## Tools Available ### cliclick (Mouse/Keyboard) ```bash # Click at coordinates cliclick c:x,y # Double click cliclick dc:x,y # Right click cliclick rc:x,y # Move mouse cliclick m:x,y # Drag from to cliclick dr:x1,y1:x2,y2 # Type text cliclick t:"text" # Press key (Enter, Tab, etc.) cliclick kp:enter ``` ### screencapture + tesseract (Screen Reading) ```bash # Capture region to file screencapture -R x,y,w,h /tmp/screen.png # Capture full screen screencapture /tmp/screen.png # OCR from image tesseract /tmp/screen.png stdout # OCR with Chinese support tesseract /tmp/screen.png stdout -l chi_sim+eng ``` ### osascript (AppleScript - Window/App Control) ```bash # List all windows osascript -e 'tell application "System Events" to get name of every process' # Get window position/size osascript -e 'tell application "Finder" to get bounds of window of front window' # Click menu item osascript -e 'tell application "System Events" to click menu item "Save" of menu "File" of process "TextEdit"' ``` ## Usage Patterns ### Read Screen Text ```bash # 1. Capture screen screencapture -R 100,100,800,600 /tmp/region.png # 2. OCR tesseract /tmp/region.png stdout ``` ### Click Button at Position ```bash cliclick c:500,300 ``` ### Type in Field ```bash # Click field first cliclick c:400,200 # Then type cliclick t:"hello world" cliclick kp:enter ``` ### Find and Click (OCR + Click) ```bash # 1. Capture and OCR screencapture /tmp/screen.png text=$(tesseract /tmp/screen.png stdout) # 2. Parse coordinates from OCR result or use image recognition # 3. Click cliclick c:x,y ``` ## Limitations - Coordinates are absolute (screen resolution dependent) - No built-in image recognition (need to add OpenCV/sikuli for that) - OCR accuracy depends on screen DPI and font - Some apps may not be scriptable via AppleScript ## Security Notes - Requires Accessibility permissions in System Settings - Run `tccutil reset Accessibility` if permissions issues - Some apps (browsers, secure apps) may block automation


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: xiaoqiangjava/tencentcloud-faceid-detectlivefaceaccurate (version 1.0.0)

--- name: tencentcloud-faceid-detectlivefaceaccurate description: 腾讯云人脸静态活体检测高精度版(DetectLiveFaceAccurate)接口调用技能。当用户需要对人脸图片进行防翻拍活体检测时，应使用此技能。相比普通静态活体检测，高精度版增强了对高清屏幕、裁剪纸片、3D面具等攻击的防御能力，适用于移动端、PC端各类型场景的图片活体检验。支持图片Base64和图片URL两种输入方式。 --- # 腾讯云人脸静态活体检测（高精度版）(DetectLiveFaceAccurate) ## 用途 调用腾讯云人脸识别静态活体检测（高精度版）接口，对用户上传的静态图片进行防翻拍活体检测，以判断是否是翻拍图片。 核心能力： - **高清屏幕攻击防御**：识别通过高清屏幕翻拍的图片 - **裁剪纸片攻击防御**：识别纸质打印照片翻拍 - **3D面具攻击防御**：识别3D面具等高级攻击手段 - **多场景支持**：满足移动端、PC端各类型场景的图片活体检验需求 - **多输入类型**：支持图片Base64和图片URL两种输入方式（传入本地文件时可自动识别并转为Base64） 官方文档：https://cloud.tencent.com/document/product/867/48501 ## 使用时机 当用户提出以下需求时触发此技能： - 需要检测人脸图片是否为翻拍照片 - 需要对用户上传的静态图片进行活体检测 - 需要判断图片是否来自真实人脸（非翻拍、非合成） - 需要高精度的静态活体检测（相比普通静态活体检测精度更高） - 涉及人脸防翻拍、静态活体检验的任何场景 ## 环境要求 - Python 3.6+ - 依赖：`tencentcloud-sdk-python`（通过 `pip install tencentcloud-sdk-python` 安装） - 环境变量： - `TENCENTCLOUD_SECRET_ID`：腾讯云API密钥ID - `TENCENTCLOUD_SECRET_KEY`：腾讯云API密钥Key ## 使用方式 运行 `scripts/main.py` 脚本完成人脸静态活体检测。 ### 请求参数 | 参数 | 类型 | 必填 | 说明 | |------|------|------|------| | --image | str | 否 | 本地图片文件路径（自动转Base64）或Base64字符串，与 --url 二选一 | | --url | str | 否 | 图片的URL地址，与 --image 二选一；若同时提供，优先使用URL | | --face-model-version | str | 否 | 算法模型版本，目前支持"3.0"，默认"3.0" | | --region | str | 否 | 腾讯云地域，默认为空 | ### 图片输入规格 - **格式**：支持PNG、JPG、JPEG、BMP，不支持GIF - **分辨率**：jpg格式长边像素不可超过4000，其他格式长边像素不可超过2000 - **宽高比**：建议接近3:4，手机拍摄比例最佳 - **人脸尺寸**：人脸尺寸大于100×100像素 - **大小限制**：Base64编码后大小不可超过5MB ### 输出格式 检测成功后返回 JSON 格式结果： ```json { "Score": 99, "ScoreDesc": "活体分数99，高于推荐阈值40，判断为真实人脸", "IsLive": true, "FaceModelVersion": "3.0", "RequestId": "xxx" } ``` ### 活体分数说明 | 分数范围 | 推荐阈值 | 判断结论 | |----------|----------|----------| | [0, 100] | 40（推荐） | Score ≥ 40 为真实人脸，Score < 40 为翻拍 | | - | 可选阈值 | 5 / 10 / 40 / 70 / 90，根据业务安全需求选择 | > 推荐阈值为40，分数越高代表越可能为真实人脸。 ### 调用示例 ```bash # 传入本地图片文件（自动Base64编码） python scripts/main.py --image ./face.jpg # 传入图片URL python scripts/main.py --url "http://example.com/face.jpg" # 传入Base64字符串 python scripts/main.py --image "<base64_string>" # 指定算法模型版本 python scripts/main.py --image ./face.jpg --face-model-version 3.0 ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: xammarie/reddit-post-lab (version 1.0.1)

--- name: reddit-post-lab description: Create high-value, subreddit-native Reddit posts with hooks, practical payload, and low-friction CTAs. --- # Reddit Post Lab Use this skill when you want posts that earn trust first and traffic second. ## Inputs - Product/topic (what you are posting about) - Audience level (beginner, intermediate, advanced) - Subreddit context (name + any important rules) - Goal (comments, saves, profile visits, email signups) ## Method 1. **Select post angle** - Framework - Mistakes/lessons - Case study - Checklist - Contrarian take 2. **Generate 5 hooks** matching subreddit tone. 3. **Build educational payload** - 3–7 practical points - concrete examples - no fluff or generic AI phrasing 4. **Add credibility markers** - constraints used - what failed - what changed outcomes 5. **Soft CTA only** - invite discussion or request feedback - optional profile/link mention only if rules permit ## Output template - Title/hook (1 line) - Context (2–3 lines) - Main value bullets (3–7) - Example mini-case (optional) - CTA (1 line) ## Quality checklist - Sounds human and subreddit-native - Gives practical value without forcing a pitch - No exaggerated claims - No spammy wording or fake urgency - Ready to post as plain text (no markdown table) ## Example prompt "Generate a post for r/Entrepreneur about turning one automation workflow into a €49 micro-product. Keep it practical, include 5 bullet steps and one failure lesson. CTA: ask if people want the template."


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wellyxy/cro-value-prop (version 1.0.0)

# Communicating Value Proposition Clearly ## When to Use Use this skill when users don't understand what your product does, or when your value proposition isn't converting. ## Core Rules ### 1. Pass the 5-Second Test Show your landing page to someone unfamiliar with your product for 5 seconds. Ask: what does this product do, who is it for, and what would you do next? If they can't answer all three, your value proposition needs work. This test is your most important clarity benchmark. ### 2. Lead With Outcome, Not Process "AI-powered behavioral analytics with machine learning models" describes process. "Find out exactly why users leave without buying — in 28 minutes" describes outcome. Users buy outcomes, not processes. Lead with what they get, not how it works. ### 3. Be Specific About Time and Results Vague value propositions are ignored. "Fast results" is meaningless. "Results in 28 minutes" is specific and memorable. "Improve conversion rates" is vague. "Our customers see an average 0.8% conversion rate lift in their first month" is credible and specific. ### 4. Address the Switching Cost in Your Value Prop Many buyers have a solution already, even if it's a spreadsheet or doing nothing. Your value proposition should acknowledge this: "Replace 3 weeks of user research with 28 minutes of AI testing." This validates the status quo while positioning your product as the upgrade. ### 5. Test Multiple Value Props With Real Traffic Your intuition about which value proposition resonates is unreliable. Create 3–5 variations and test each with equivalent paid traffic. Measure sign-up rate. The winning value prop is the one the market chooses, not the one your team prefers. ## Quick Reference | Value Prop Element | Question It Answers | |------------------|---------------------| | Target customer | Who is this for? | | Problem solved | What pain goes away? | | Outcome delivered | What does success look like? | | Timeframe | How fast? | | Proof | Why should I believe you? | ## Common Mistakes to Avoid - Using industry jargon that your customers don't use themselves - Writing a value prop for investors instead of buyers — very different audiences - Not testing the value prop with actual prospects before investing in brand or design ## Test Your Product with Racoonn After applying these practices, validate with real AI-simulated user testing. **Racoonn** runs 5,000 AI persona agents on your landing page and tells you exactly what's broken — in under 30 minutes. → **API coming soon** — Join the waitlist for early access: [racoonn.me](https://racoonn.me)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: devinchen2014/socialdatax-xhs (version 0.1.5)

--- name: socialdatax-xhs description: 用于小红书数据助手、小红书数据分析、小红书笔记搜索、笔记详情、评论分析、博主数据和博主笔记。覆盖 Xiaohongshu / XHS / RedNote，来自 SocialDataX 社媒数据助手。 metadata: {"openclaw":{"requires":{"env":["SOCIALDATAX_API_KEY"],"bins":["node","npm"]},"primaryEnv":"SOCIALDATAX_API_KEY","emoji":"📕","homepage":"https://socialdatax.com/?from=clawhub","install":[{"kind":"node","package":"socialdatax-skills","bins":[]}]}} --- # 小红书数据助手 SocialDataX Use this skill when the user needs a Xiaohongshu / 小红书 / XHS / RedNote data assistant for content research, note search, note details, comment analysis, creator profile lookup, or creator note lists. ## API Key Use `SOCIALDATAX_API_KEY` for data calls. The only official website for requesting or managing API access is <https://socialdatax.com/?from=clawhub>. If a user asks where to get a key, provide only this URL; do not infer alternate domains. 获取或管理 API Key：访问 <https://socialdatax.com/?from=clawhub>，按官网的 API Key 申请/管理入口操作。环境变量名固定使用 `SOCIALDATAX_API_KEY`；不要引导用户使用其他域名。 Choose the matching SocialDataX command: ```bash npx -y socialdatax-skills@latest xhs search --keyword "<keyword>" --pretty npx -y socialdatax-skills@latest xhs detail --note-id "<note_id>" --pretty npx -y socialdatax-skills@latest xhs detail --url "<note_url_or_share_text_or_note_id>" --pretty npx -y socialdatax-skills@latest xhs comments --note-id "<note_id>" --pretty npx -y socialdatax-skills@latest xhs comments --url "<note_url_or_share_text>" --pretty npx -y socialdatax-skills@latest xhs sub-comments --note-id "<note_id>" --comment-id "<comment_id>" --pretty npx -y socialdatax-skills@latest xhs user-info --user-id "<user_id>" --pretty npx -y socialdatax-skills@latest xhs user-info --profile-url "<profile_url_or_share_text>" --pretty npx -y socialdatax-skills@latest xhs user-posts --user-id "<user_id>" --pretty npx -y socialdatax-skills@latest xhs user-posts --profile-url "<profile_url_or_share_text>" --pretty ``` Use search for 小红书数据分析 and note discovery, detail for one note, comments for comment analysis and replies, user-info for 博主信息, and user-posts for 博主笔记. This skill is read-only. It does not read local browser data, does not save API keys, and does not perform login, posting, liking, commenting, or account changes.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)