OpenClaw/clawhub-security-signals huggingface dataset:
Skill: teoslayer/pilot-task-monitor (version 1.0.0)

--- name: pilot-task-monitor description: > Real-time dashboard for task status and polo score tracking. Use this skill when: 1. You need to monitor active tasks across multiple agents 2. You want real-time updates on task status and polo score changes 3. You need a dashboard view of task queue and completion metrics Do NOT use this skill when: - You only need to check a single task status once - You don't need continuous monitoring - You prefer event-based notifications over polling tags: - pilot-protocol - task-workflow - monitoring - dashboard license: AGPL-3.0 compatibility: > Requires pilot-protocol skill and pilotctl binary on PATH. The daemon must be running (pilotctl daemon start). metadata: author: vulture-labs version: "1.0" openclaw: requires: bins: - pilotctl homepage: https://pilotprotocol.network allowed-tools: - Bash --- # pilot-task-monitor Real-time monitoring dashboard for task execution and polo score tracking. ## Commands ### List all submitted tasks ```bash pilotctl --json task list --type submitted | jq -r '.[] | "\(.task_id) -> \(.target) [\(.status)]"' ``` ### List incoming task queue ```bash pilotctl --json task queue | jq -r '.[] | "\(.task_id) from \(.requester) [\(.type)]"' ``` ### Track polo score ```bash watch -n 5 "pilotctl --json info | jq -r '.polo_score'" ``` ### Dashboard summary ```bash pilotctl --json task list --type submitted | jq '{ total: length, pending: [.[] | select(.status == "pending")] | length, completed: [.[] | select(.status == "completed")] | length, failed: [.[] | select(.status == "failed")] | length }' ``` ## Workflow Example Continuous task monitoring dashboard: ```bash #!/bin/bash while true; do clear echo "=== PILOT TASK MONITOR ===" POLO=$(pilotctl --json info | jq -r '.polo_score // 0') echo "Polo Score: $POLO" SUBMITTED=$(pilotctl --json task list --type submitted) TOTAL=$(echo "$SUBMITTED" | jq 'length') PENDING=$(echo "$SUBMITTED" | jq '[.[] | select(.status == "pending")] | length') COMPLETED=$(echo "$SUBMITTED" | jq '[.[] | select(.status == "completed")] | length') echo "Total: $TOTAL | Pending: $PENDING | Completed: $COMPLETED" sleep 3 done ``` ## Dependencies Requires pilot-protocol skill, jq, and watch.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: bibaofeng/stock-analysis-aisa (version 1.0.0)

--- name: stock-analysis description: "Analyze stocks and cryptocurrencies with live AISA-backed scoring, signals, confidence, and risk flags. Use when: the user asks to analyze a ticker, compare investments, or review market positioning." author: aisa version: "1.0.0" license: Apache-2.0 user-invocable: true primaryEnv: AISA_API_KEY requires: env: - AISA_API_KEY bins: - python3 metadata: openclaw: primaryEnv: AISA_API_KEY requires: env: - AISA_API_KEY bins: - python3 --- # Stock Analysis ## When to Use - Analyze stocks and cryptocurrencies with live AISA-backed scoring, signals, confidence, and risk flags. Use when: the user asks to analyze a ticker, compare investments, or review market positioning. ## When NOT to Use - Do not use this skill for browser-cookie extraction, passwords, Keychain access, or other local sensitive credential access. - Prefer a different skill when the user request is outside this skill's domain. ## Capabilities - Score stocks and crypto assets with live data-backed analysis. - Return BUY HOLD SELL style signals, confidence, and key risks. ## Quick Start ```bash export AISA_API_KEY="your-key" ``` ## Primary Runtime Use the bundled Python client as the canonical ClawHub runtime path: ```bash python3 scripts/analyze_stock.py ``` ## Example Queries - Analyze AAPL versus MSFT and summarize the stronger setup. ## Notes - Informational only and not financial advice.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: openwaygate/youtube-playlist-yutu (version 0.10.7-dev)

--- name: youtube-playlist description: "Manage YouTube playlists. Use this skill to list, create, update, or delete playlists. Useful when working with YouTube playlist — provides commands to delete, insert, list, and update playlist via the yutu CLI. Includes setup and installation instructions for first-time users. Triggers: delete playlists, delete playlist, delete my playlist, create a new playlist, insert playlist, insert my playlist, list playlist information, list playlist, list my playlist, update a playlist, update playlist, update my playlist" metadata: openclaw: requires: env: - YUTU_CREDENTIAL - YUTU_CACHE_TOKEN bins: - yutu config: - client_secret.json - youtube.token.json primaryEnv: YUTU_CREDENTIAL emoji: "\U0001F3AC\U0001F430" homepage: https://github.com/eat-pray-ai/yutu install: - kind: node package: "@eat-pray-ai/yutu" bins: [yutu] --- # YouTube Playlist Manage YouTube playlists. Use this skill to list, create, update, or delete playlists. ## Before You Begin yutu requires Google Cloud Platform OAuth credentials and a cached token to access the YouTube API. If you haven't set up yutu yet, read the [setup guide](references/setup.md) first. ## Operations Read the linked reference for full flag details and examples. | Operation | Description | Reference | |-----------|-------------|----------| | delete | Delete playlists | [details](references/playlist-delete.md) | | insert | Create a new playlist | [details](references/playlist-insert.md) | | list | List playlist information | [details](references/playlist-list.md) | | update | Update a playlist | [details](references/playlist-update.md) | ## Quick Start ```bash # Show all playlist commands yutu playlist --help # List playlist yutu playlist list ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: ordo-tech/skill-publisher-verifier (version 1.1.1)

--- name: skill-publisher-verifier version: 1.1.1 description: Check a ClawHub publisher's trust score before installing their skill. Returns TRUSTED, ESTABLISHED, NEW, or FLAGGED based on public signals. Free taster — full signal set in the ClawHub Security Pack. author: ordo-tech tags: [security, verification, trust, publishers, marketplace, clawhub, pre-install] requires: env: [] tools: [web_fetch, web_search] --- ## What this skill does Before installing a skill, check who published it. This skill fetches the publisher's public ClawHub profile and returns a trust score with a plain-English summary. **Signals included (free version):** - ✅ Skills published (catalogue size) - ✅ Account age - ✅ Flagged or deleted skills **Not included (full version — Security Pack):** - Total install volume across catalogue - Stars and community endorsement signals - External flag detection (forum reports, ClawHavoc-era incidents) - Known associations with banned publishers - Automated cross-referencing with co-author/fork relationships Get the full signal set → **[ClawHub Security Pack](https://theagentgordo.gumroad.com/l/clawhub-security-pack)** --- ## Trust scores | Score | Meaning | |-------|---------| | **TRUSTED** | Strong catalogue, long track record, no flags | | **ESTABLISHED** | Active author, reasonable history | | **NEW** | Recent account or thin catalogue — proceed with caution | | **FLAGGED** | Known flags, deleted skills, or suspicious activity | --- ## Usage > "Check @rapid-skills-99 before I install their skill" > "Verify the publisher of clawhub.com/skills/some-skill" > "Is @ordo-tech safe to install from?" ## Output format ``` Publisher: @{handle} Trust Score: TRUSTED | ESTABLISHED | NEW | FLAGGED Signals (free — 3/7): - Skills published: {n} - Flagged/deleted skills: {n} - Account age: {n} months Summary: {1–2 sentence verdict} Recommendation: Install / Install with caution / Do not install --- *Full 7-signal check: https://theagentgordo.gumroad.com/l/clawhub-security-pack* ``` --- ## Requirements - `web_fetch` — to retrieve publisher profile from clawhub.com - `web_search` — secondary check for external flags - No API keys required. Uses public profile data only. ## Support https://clawhub.com/@ordo-tech | Full Security Pack: https://theagentgordo.gumroad.com/l/clawhub-security-pack


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: edwardrodriguez703-design/book-piercing (version 1.0.1)

--- name: book-piercing description: Book piercing services through Lokuli MCP. Use when user needs to find and book piercing. Triggers on requests like "book a piercing", "find piercing near me", or any piercing service request. --- # uook piercing Book piercing services through Lokuli's MCP server. ## MCP Endpoint ``` https://lokuli.com/mcp/sse ``` Transport: SSE | JSON-RPC 2.0 | POST requests ## Tools ### search ```json { "method": "tools/call", "params": { "name": "search", "arguments": { "query": "piercing", "zipCode": "90640", "maxResults": 20 } } } ``` ### check_availability ```json { "method": "tools/call", "params": { "name": "check_availability", "arguments": { "providerId": "xxx", "serviceId": "yyy", "date": "2025-02-10" } } } ``` ### create_booking ```json { "method": "tools/call", "params": { "name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "[REDACTED_SECRET]", "customerPhone": "+13105551234" } } } ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: roman181/hi (version 1.0.0)

--- name: clawdhub description: Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI. metadata: {"clawdbot":{"requires":{"bins":["clawdhub"]},"install":[{"id":"node","kind":"node","package":"clawdhub","bins":["clawdhub"],"label":"Install ClawdHub CLI (npm)"}]}} --- # ClawdHub CLI Install ```bash npm i -g clawdhub ``` Auth (publish) ```bash clawdhub login clawdhub whoami ``` Search ```bash clawdhub search "postgres backups" ``` Install ```bash clawdhub install my-skill clawdhub install my-skill --version 1.2.3 ``` Update (hash-based match + upgrade) ```bash clawdhub update my-skill clawdhub update my-skill --version 1.2.3 clawdhub update --all clawdhub update my-skill --force clawdhub update --all --no-input --force ``` List ```bash clawdhub list ``` Publish ```bash clawdhub publish ./my-skill --slug my-skill --name "My Skill" --version 1.2.0 --changelog "Fixes + docs" ``` Notes - Default registry: https://clawdhub.com (override with CLAWDHUB_REGISTRY or --registry) - Default workdir: cwd; install dir: ./skills (override with --workdir / --dir) - Update command hashes local files, resolves matching version, and upgrades to latest unless --version is set


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: xmanrui/voice-message (version 1.0.4)

--- name: voice-message version: 1.0.4 description: Send voice messages across chat channels (Telegram, Discord, Feishu/Lark, Signal, WhatsApp, and others) using edge-tts for text-to-speech and ffmpeg for audio conversion. IMPORTANT - Feishu/Lark does NOT support asVoice=true via the message tool; you MUST use this skill to send voice messages on Feishu, otherwise it will send a file attachment instead of a voice bubble. | 通过 edge-tts 文字转语音和 ffmpeg 音频转换，在各聊天渠道（Telegram、Discord、飞书、Signal、WhatsApp 等）发送语音消息。飞书不支持 message 工具的 asVoice=true，必须使用本 skill 才能发送语音气泡而非文件附件。 metadata: openclaw: emoji: "🎤" --- # Voice Message Send text as voice messages to any chat channel. ## Prerequisites - `edge-tts` — Microsoft Edge TTS (`pip install edge-tts`) - `ffmpeg` / `ffprobe` — audio conversion and duration detection ## Default Voices - Chinese: `zh-CN-XiaoxiaoNeural` - English: `en-US-JennyNeural` - Other languages: see [references/voices.md](references/voices.md) ## Step 1: Generate Voice File Use `scripts/gen_voice.sh` to convert text to an ogg/opus file: ```bash scripts/gen_voice.sh "你好" /tmp/voice.ogg scripts/gen_voice.sh "Hello" /tmp/voice.ogg en-US-JennyNeural ``` Arguments: `<text> <output.ogg> [voice]` - If voice is omitted, defaults to `zh-CN-XiaoxiaoNeural`. ## Step 2: Send by Channel ### Generic (Telegram, Signal, WhatsApp, etc.) Use the message tool directly: ``` action=send, asVoice=true, filePath=/tmp/voice.ogg ``` This works for most channels. Telegram confirmed working. ### Feishu/Lark ⚠️ Feishu does NOT support `asVoice=true` via the message tool. You must use the dedicated script. Use `scripts/send_feishu_voice.sh`: ```bash scripts/send_feishu_voice.sh /tmp/voice.ogg <receive_id> <tenant_access_token> [receive_id_type] ``` - `receive_id_type`: `open_id` (default), `chat_id`, `user_id`, `union_id`, `email` - The script handles upload (as opus with duration) and sends as audio message type to produce a voice bubble. - To get `tenant_access_token`, use the Feishu tenant token API with your app credentials. ### Discord Discord voice messages require a waveform and special flags. 1. Generate ogg with `scripts/gen_voice.sh` 2. Generate waveform: `python3 scripts/gen_waveform.py /tmp/voice.ogg` - Outputs JSON: `{"duration_secs": 4.2, "waveform": "base64..."}` 3. Send via Discord API with `flags: 8192` (IS_VOICE_MESSAGE) and the waveform/duration in attachments metadata. - Missing waveform/duration causes error 50161. ### Fallback If `asVoice=true` does not produce a voice bubble on a channel: 1. Try sending via the platform's native API 2. If native API unavailable, send as audio file attachment


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (MEDIUM)
Skill: taceywong/icosmos (version 0.0.1)

--- name: icosmos-shopify description: "Shopify 店铺运营/诊断技能：从 Supabase 拉取店铺域名与 token，做装修/产品/结账/指标异常检测，并支持发布引流博文（唯一写操作）。" --- # icosmos-shopify 面向 OpenClaw 触发的 Shopify 运营能力集合：**以只读诊断为主**，帮助定位转化/营销/商品问题；**唯一写操作**是发布 Shopify Blog 文章（需要明确 `--confirm`）。 ## 触发 - **适用场景关键词**：店铺审计、装修优化、产品优化、结账/checkout 测试、转化下降、营销效果差、发布博客/引流文章。 - **触发后执行顺序**： 1. `setup once`：用 `ICOSMOS_USER_EMAIL` / `ICOSMOS_USER_PASSWORD` 同步店铺与 token 到本地缓存 2. `content/*`：拉原始数据（更全面、更可追溯） 3. `audit/*` / `test checkout`：给诊断与验证 4. `blog publish`：仅当明确需要发布时执行（必须 `--confirm`） ## 快速参考 | 诉求 | 命令 | |---|---| | Setup Once：从 Supabase 同步店铺/token 到本地 | `icosmos-shopify setup once` | | 列出店铺 | `icosmos-shopify stores list` | | 获取店铺基础信息（原始数据） | `icosmos-shopify content shop --store xxx.myshopify.com` | | 获取产品列表（原始数据，分页） | `icosmos-shopify content products list --store xxx.myshopify.com --first 20 --after <cursor>` | | 获取订单列表（原始数据，时间窗） | `icosmos-shopify content orders list --store xxx.myshopify.com --start <RFC3339> --end <RFC3339>` | | 获取博客列表/文章（原始数据） | `icosmos-shopify content blogs list --store xxx.myshopify.com` / `icosmos-shopify content blogs articles list --store xxx.myshopify.com --blog-id 123` | | 装修检查单（只读） | `icosmos-shopify audit theme --store xxx.myshopify.com` | | 产品质量诊断（只读） | `icosmos-shopify audit products --store xxx.myshopify.com --limit 50` | | 结账链路测试（只读） | `icosmos-shopify test checkout --store xxx.myshopify.com` | | 经营指标与异常线索（只读） | `icosmos-shopify audit metrics --store xxx.myshopify.com --days 7` | | 发布引流博文（写操作） | `icosmos-shopify blog publish --store xxx.myshopify.com --blog-id 123 --title ... --body-file article.html --confirm` | ## 输出协议（给 OpenClaw 更稳定） - **默认推荐 `--format json`**（`content/*` 默认就是 json），统一结构： - `store_domain` / `api_version` / `meta` / `data` - **分页信息**： - GraphQL：`meta.page_info.has_next_page/end_cursor` - REST：`meta.page_info.next_link`（来自 `Link: rel="next"`） ## 依赖与配置 - Setup Onece： - `ICOSMOS_USER_EMAIL` - `ICOSMOS_USER_PASSWORD` 两个字段需要保存到系统环境变量 所需命令行工具为当前目录下的[icosmos-shopify](icosmos-shopify) ### Shopify - `SHOPIFY_API_VERSION`（默认 `2026-01`） ## 安全边界（重要） - **默认只读**：装修/产品/指标/结账测试均不对 Shopify 做写入。 - **唯一写操作：发布博客**：必须提供 `--confirm`；否则即使参数齐全也只会 dry-run。 - **日志脱敏**：店铺 token 只显示前后 4 位（`abcd...wxyz`）。 - **敏感字段处理**：订单 email 等敏感字段默认不输出（或置空），避免在群聊/日志泄露。 ## 常见问题与排障 - **401/403**：Admin token scopes 不足或 token 过期；确认 Shopify Custom App 的 Admin API access token 与权限。 - **429 Too Many Requests**：已做退避重试；如果频繁触发，降低并发/减少拉取字段/缩小时间范围。 - **Storefront 430 Security Rejection**：请求可能被判定为异常；需要检查请求来源、token 是否正确，必要时增加更真实的请求头策略（后续增强）。 ## 参考文档 - [GraphQL Admin API reference](https://shopify.dev/docs/api/admin-graphql/latest) - [REST Admin API reference](https://shopify.dev/docs/api/admin-rest/latest) - [Storefront API reference](https://shopify.dev/docs/api/storefront/latest)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: charlie-morrison/git-repo-cleaner (version 1.0.1)

--- name: git-repo-cleaner description: Audit and clean up Git repositories. Find stale/merged branches, large files in history, orphaned tags, repo bloat, and generate cleanup scripts. Use when asked to clean up a git repo, find stale branches, detect large files in git history, audit repo health, find merged branches to delete, reduce repo size, or perform git maintenance. Triggers on "clean up repo", "stale branches", "large files in git", "repo bloat", "merged branches", "git cleanup", "repo maintenance", "git audit". --- # Git Repo Cleaner Audit Git repositories for bloat, stale branches, and maintenance issues. Generate safe cleanup scripts. ## Quick Audit ```bash python3 scripts/audit_repo.py /path/to/repo ``` ## Specific Checks ```bash # Stale branches only python3 scripts/audit_repo.py /path/to/repo --check branches # Large files in history python3 scripts/audit_repo.py /path/to/repo --check large-files # Full audit python3 scripts/audit_repo.py /path/to/repo --check all ``` ## Output Formats ```bash python3 scripts/audit_repo.py /path/to/repo --format text|json|markdown ``` ## Checks Performed ### 1. Stale Branches - Branches not updated in >30 days (configurable with `--stale-days`) - Branches already merged into main/master - Branches with no unique commits - Remote tracking branches with deleted remotes ### 2. Large Files - Files >1MB in current tree (configurable with `--min-size`) - Large blobs in git history (top 20) - Binary files that shouldn't be tracked ### 3. Repo Stats - Total repo size (.git directory) - Pack file stats - Object count and size - Unreachable objects ### 4. Maintenance - Missing .gitignore patterns (node_modules, __pycache__, .env, etc.) - Unoptimized packfiles - Stale reflog entries ## Cleanup Script Generation Use `--fix` to generate (not execute) cleanup scripts: ```bash python3 scripts/audit_repo.py /path/to/repo --fix # Outputs cleanup.sh with safe delete commands ``` The generated script uses `git branch -d` (safe delete, refuses if not merged) by default. Use `--force-delete` to generate `git branch -D` commands instead. ## Workflow 1. Run audit on repo 2. Review findings 3. Generate cleanup script if needed 4. Review script before executing 5. Execute cleanup


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: ai-dependency-checker (version 1.0.1)

# AI Dependency Checker Analyzes project dependencies (package.json, requirements.txt, etc.) for outdated versions, known vulnerabilities, and license conflicts. ## Features - **Outdated Detection**: Find packages with newer versions - **Vulnerability Scanning**: Identify security risks in dependencies - **License Compliance**: Ensure licenses match project policies ## Pricing - **Price**: 0.001 USDT per API call - **Payment**: Integrated via SkillPay.me ## Use Cases - Software maintenance - Security auditing - Release planning ## Example Input ```json { "file_content": "{\"dependencies\": {\"express\": \"4.17.1\"}}", "file_type": "json" } ``` ## Example Output ```json { "success": true, "vulnerabilities": [{"package": "express", "severity": "low", "fixed_in": "4.17.3"}], "outdated": [{"package": "express", "current": "4.17.1", "latest": "4.18.2"}], "message": "Dependency check completed." } ``` ## Integration This skill is integrated with SkillPay.me for automatic micropayments. Each call costs 0.001 USDT.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: brucegutman/pipeworx-newton (version 1.0.0)

--- name: pipeworx-newton description: Symbolic math solver — simplify, differentiate, integrate, and factor expressions via the Newton API version: 1.0.0 metadata: openclaw: requires: bins: - curl emoji: "∫" homepage: https://pipeworx.io/packs/newton --- # Newton Math Solver Symbolic mathematics over an API. Simplify algebraic expressions, compute derivatives and integrals, and factor polynomials. All operations return exact symbolic results, not numerical approximations. ## Tools | Tool | Description | |------|-------------| | `simplify` | Simplify a mathematical expression (e.g., `"2^2+2(2)"` becomes `"8"`) | | `derive` | Differentiate with respect to x (e.g., `"x^3+2x^2+x"` becomes `"3x^2+4x+1"`) | | `integrate` | Indefinite integral with respect to x (e.g., `"x^2"` becomes `"1/3 x^3"`) | | `factor` | Factor a polynomial (e.g., `"x^2-1"` becomes `"(x-1)(x+1)"`) | ## When to use - Calculus homework help — derivatives and integrals - Simplifying complex expressions during technical discussions - Factoring polynomials for algebra problems - Verifying hand-computed symbolic math ## Example: derivative of sin(x)*x^2 ```bash curl -s -X POST https://gateway.pipeworx.io/newton/mcp \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"derive","arguments":{"expression":"x^3+2x^2+x"}}}' ``` ```json { "operation": "derive", "expression": "x^3+2x^2+x", "result": "3 x^2 + 4 x + 1" } ``` ## Setup ```json { "mcpServers": { "pipeworx-newton": { "command": "npx", "args": ["-y", "mcp-remote@latest", "https://gateway.pipeworx.io/newton/mcp"] } } } ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: fanxi-ju/wechat-games-reporter (version 1.0.0)

# wechat-games-reporter ## Description Automated WeChat mini games ranking report generator. Scrapes real-time data from 应用宝 (sj.qq.com) and delivers structured insights via Feishu. ## Usage Scenarios - Daily/weekly WeChat mini games trend reports - Market research for game industry analysis - Competitive intelligence for mobile game developers - Investment opportunity identification in casual gaming sector ## Workflow 1. **Data Source**: Navigate to https://sj.qq.com/wechat-game 2. **Extract Rankings**: Parse Hot, Revenue, and New Release leaderboards 3. **Structure Data**: Format into standardized report with trend insights 4. **Deliver**: Create Feishu document and send via direct message ## Key Features - Real-time scraping from official Tencent application store - Multi-category analysis (Hot, Revenue, New Releases) - Trend identification and business insight generation - Automated Feishu delivery with proper formatting ## Dependencies - Browser automation capability - Feishu document creation and messaging permissions - Markdown formatting support ## Output Format Reports include: - Top 5 rankings for each category - Game categories and sub-genres - Trend analysis highlighting market movements - Direct source attribution ## Best Practices - Run during business hours for most accurate real-time data - Always verify data source availability before execution - Include actionable insights beyond raw rankings - Maintain consistent formatting for historical comparison


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)