OpenClaw/clawhub-security-signals huggingface dataset:
Skill: junkaixue/gmail-tool (version 1.0.0)

# Gmail Tool Send and read emails via Gmail using App Password. CLI utility for automated alerts, notifications, and email monitoring. ## Overview A CLI tool to send and read emails through Gmail. Combines SMTP (send) and IMAP (read) in one utility. ## Requirements - Python 3.6+ - Gmail account with App Password enabled ## Setup 1. Enable 2-Factor Authentication on your Google Account: - Go to https://myaccount.google.com/security 2. Generate an App Password: - Go to https://myaccount.google.com/apppasswords - Select "Mail" as the app - Copy the 16-character password (no spaces) 3. Set environment variables: ```bash export GMAIL_USER="[REDACTED_SECRET]" export GMAIL_APP_PASSWORD="xxxxxxxxxxxxxxxx" ``` ## Installation ```bash # Clone or copy to skills directory cp -r gmail-tool ~/.openclaw/workspace/skills/ # Or use ClawHub clawhub install gmail-tool ``` ## Usage ### Send Email ```bash chmod +x gmail-tool ./gmail-tool send "[REDACTED_SECRET]" "Subject" "Body text" ``` ### Read Emails ```bash # Read last 5 emails ./gmail-tool read # Read last 10 emails ./gmail-tool read 10 ``` ### Examples ```bash # Send notification ./gmail-tool send "[REDACTED_SECRET]" "Alert" "Server down!" # Check inbox ./gmail-tool read 3 # Cron job - check and alert 0 9 * * 1-5 ./gmail-tool read 1 | grep -q "Important" && ./gmail-tool send "[REDACTED_SECRET]" "Check Email" "Found important email" ``` ## Commands | Command | Usage | |---------|-------| | `send <to> <subject> <body>` | Send an email | | `read [count]` | Read last N emails (default: 5) | ## Environment Variables | Variable | Required | Description | |----------|----------|-------------| | GMAIL_USER | Yes | Your Gmail address | | GMAIL_APP_PASSWORD | Yes | 16-char App Password | ## Security Notes - Never commit App Passwords to version control - Use environment variables, never hardcode credentials - App Passwords are 16 characters (no spaces) - Revoke app passwords if compromised ## Troubleshooting **Send failed: "535 5.7.8 Username and Password not accepted"** - Verify App Password is correct - Make sure 2FA is enabled **Read failed: "Too many simultaneous connections"** - Gmail limits IMAP connections. Wait and retry. ## License MIT ## Author junkaixue

path: _meta.json
content: version: 1.0.0

Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: codeteenager/zhipu-image-gen (version 1.1.1)

--- name: zhipu-image-gen description: AI text-to-image generation using Zhipu AI's GLM-Image model. Use when the user requests image generation, creating images from text descriptions, or mentions "文生图", "生成图片", "画图". Supports various image sizes and Chinese/English prompts. metadata: openclaw: requires: env: - ZHIPU_API_KEY bins: - curl - jq --- # Zhipu Image Generator 智谱 AI GLM-Image 文生图工具。支持中英文提示词生成高质量图片。 ## 快速开始 ```bash ~/.openclaw/workspace/skills/zhipu-image-gen/scripts/generate_image.sh -p "你的提示词" ``` ## 文件结构 ``` ~/.openclaw/workspace/skills/zhipu-image-gen/ ├── SKILL.md # 本文档 ├── .env.example # 配置模板 └── scripts/ └── generate_image.sh # 图片生成脚本 ``` ## 配置 ### 方式一：环境变量（推荐） ```bash export ZHIPU_API_KEY="your_api_key_here" ``` ### 方式二：.env 文件 ```bash # 复制模板并填入 API Key cp ~/.openclaw/workspace/skills/zhipu-image-gen/.env.example ~/.openclaw/workspace/skills/zhipu-image-gen/.env # 编辑 .env 文件，填入你的 API Key ``` ### 获取 API Key 1. 访问 [智谱 AI 开放平台](https://open.bigmodel.cn/) 2. 注册/登录账号 3. 进入控制台 → API 密钥管理 4. 复制 API Key ## 使用方法 ### 基本用法 ```bash # 中文提示词 ./scripts/generate_image.sh -p "一只可爱的小猫咪，坐在阳光明媚的窗台上" # 英文提示词 ./scripts/generate_image.sh -p "A cute kitten sitting on a sunny windowsill" ``` ### 参数说明 | 参数 | 说明 | 默认值 | |------|------|--------| | `-p, --prompt` | 图片描述（必填） | - | | `-s, --size` | 图片尺寸 | 1280x1280 | | `-o, --output` | 输出目录 | 当前目录 | | `-w, --watermark` | 启用水印 | false | | `-h, --help` | 显示帮助 | - | ### 支持的尺寸 - `1280x1280`（默认，方形） - `1024x1024` - `768x768` - 其他 API 支持的常用尺寸 ## 示例 ```bash # 生成风景图 ./generate_image.sh -p "夕阳下的海边沙滩，海浪轻轻拍打着岸边" # 指定尺寸 ./generate_image.sh -p "一款现代简约风格的智能手表" -s 1024x1024 # 保存到指定目录 ./generate_image.sh -p "一朵盛开的玫瑰花" -o ~/Pictures ``` ## 文件结构 ``` ~/.openclaw/workspace/skills/zhipu-image-gen/ ├── SKILL.md # 本文档 ├── .env # API Key 配置（需自行创建） ├── .env.example # 配置模板 └── scripts/ └── generate_image.sh # 图片生成脚本 ``` ## 注意事项 - 生成的图片为 PNG 格式 - 文件名格式：`glm_image_YYYYMMDD_HHMMSS.png` - 支持中英文提示词 - 描述越详细，效果越好 - API 调用按次数计费


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: sxliuyu/xianyu-sam-order (version 1.0.1)

--- name: xianyu-sam-order version: 1.0.1 description: 闲鱼山姆代下单 - 配置你自己的账号 author: OpenClaw triggers: - "山姆下单" - "山姆代购" - "闲鱼山姆" - "Sam下单" --- # 闲鱼山姆代下单服务 🛒 ## 登录自己的账号 ### 山姆会员店 1. **注册会员**：微信搜"山姆会员商店"小程序 2. **年费**：260元/年 3. **下单**：在山姆APP/小程序下单 ### 闲鱼 1. **下载APP**：闲鱼 2. **登录**：用淘宝账号登录 3. **认证**：实人认证后可以发布商品接单 ## 配置自己的账号 在 `~/.openclaw/workspace/.env` 配置： ```bash # 你的淘宝/闲鱼Cookie（可选，用于自动登录） XIANYU_COOKIE="你的Cookie" # 你的山姆会员账号 SAM_PHONE="手机号" ``` ## 自己下单流程 1. 打开**山姆APP** → 选择商品 → 加入购物车 2. 截图给我 → 我帮你查价格 3. 你在山姆APP付款 → 选择配送地址 4. 配送到家 ## 常见问题 **Q: 需要年费吗？** A: 山姆需要260元/年会员费 **Q: 可以不使用自己的账号吗？** A: 可以帮别人代下单，需要对方提供山姆会员 **Q: 配送范围？** A: 山姆配送一般在5-10公里内


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: shijianwen/webfetch-md (version 1.1.0)

--- name: webfetch-md version: 1.1.0 description: 抓取网页并转换为 Markdown，保留图片链接 author: ShiJianwen metadata: openclaw: requires: bins: ["node"] tools: - name: webfetch-md description: 抓取任意网页并转换为 Markdown 格式，自动保留图片链接 command: "node cli.js --url {{url}}" parameters: url: type: string description: 要抓取的网页 URL required: true --- # WebFetch MD - 网页转 Markdown 抓取任意网页，转换为干净的 Markdown 格式，保留图片链接。 ## 使用方法 ### 作为 OpenClaw 工具调用 ```yaml webfetch-md url="https://example.com" ``` ### CLI 使用 ```bash # 基本使用（输出 JSON 格式） npx webfetch-md https://example.com # 或使用 --url 参数 npx webfetch-md --url https://example.com # 提取 Markdown 内容（配合 jq） npx webfetch-md https://example.com | jq -r '.markdown' # 保存到文件 npx webfetch-md https://example.com | jq -r '.markdown' > article.md ``` ### 输出格式 CLI 和工具都输出统一的 JSON 格式： ```json { "success": true, "title": "文章标题", "markdown": "# 文章标题\n\n正文内容...", "images": ["https://example.com/img1.png"], "imageCount": 1, "contentLength": 1523 } ``` ### 作为模块使用 ```javascript const { fetchAsMarkdown } = require('./index'); const result = await fetchAsMarkdown('https://example.com'); console.log(result.markdown); ``` ## 功能特点 - ✅ 抓取任意网页 HTML - ✅ 智能提取正文内容（过滤导航、广告等） - ✅ 保留图片链接（转换为 `![alt](url)` 格式） - ✅ 自动转换相对路径为绝对路径 - ✅ 输出干净的 Markdown ## 依赖 - turndown: HTML to Markdown 转换 - cheerio: HTML 解析和提取 ## 技术实现 ### 核心流程 1. **网页抓取**：使用 fetch API 获取 HTML，模拟浏览器 User-Agent 2. **HTML解析**：使用 cheerio 加载和解析 HTML 内容 3. **内容提取**：智能识别正文区域，过滤无关元素 4. **URL处理**：将相对路径转换为绝对路径 5. **Markdown转换**：使用 turndown 转换为标准 Markdown 格式 ### 智能内容提取算法 按优先级选择正文容器： 1. `article` 标签 2. `main` 标签 3. `[role="main"]` 属性 4. `.post-content` / `.entry-content` 类 5. `.content` / `.post` 类 6. `#content` / `#main` ID 7. 回退到 `body` 标签 ### 自动过滤的元素 - 脚本和样式标签 - 导航、页眉、页脚 - 侧边栏和广告区域 - 评论区 ## 错误处理 工具返回统一的 JSON 格式，包含 `success` 字段标识操作状态： ```json { "success": false, "error": "错误信息" } ``` ## 开发说明 ### 项目结构 ``` webfetch-md/ ├── index.js # 核心功能模块 ├── cli.js # CLI 和 OpenClaw 工具入口 ├── package.json # 依赖配置 ├── test.js # 测试脚本 └── SKILL.md # 技能文档 ``` ### 测试 ```bash # 运行测试 npm test # 或直接测试 node test.js https://example.com ``` ## 版本历史 - **v1.1.0** (当前): 统一 CLI 和 OpenClaw 工具入口，优化错误处理 - **v1.0.1**: 基础功能实现，支持网页抓取和 Markdown 转换 - **v1.0.0**: 初始版本发布


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (HIGH)
Skill: dinghaibin/less-tool (version 1.0.0)

--- name: less-tool description: View file contents with interactive scrolling and search. Use for reading log files, code, and large text documents with pagination. --- # Less - Interactive File Viewer View file contents with forward and backward scrolling, search functionality, and line number navigation. Supports large files by loading only the viewed portion into memory. ## Usage ```bash less-tool [options] <file> ``` ## Navigation - `Space`: Forward one page - `b`: Back one page - `j/k`: Scroll up/down one line - `/pattern`: Search forward - `?pattern`: Search backward - `n`: Next match - `q`: Quit ## Examples ```bash less-tool large_log.txt less-tool -N script.py ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: bobneobux/promo-offer-angler (version 1.0.0)

--- name: cravego-promo-offer-angler description: Generate safe signup promo offer angles for CraveGo.ph (Philippines). Use friendly & casual brand voice. Focus ONLY on new-user/sign-up promos and avoid legal/financial claims. --- You are an offer angle generator for CraveGo.ph. Brand voice: friendly & casual. Focus ONLY on new user / signup promos. Must include at least 5 angles anchored to: “₱ discount on first order”. Must include at least 5 angles anchored to: “no fixed promo—generate options each week” (e.g., delivery fee waived, bundle/first-order combo, points/credit bonus for signup). Avoid guarantees and financial/legal assertions; use safe phrasing. Return JSON: { "platform": "FB|IG|TikTok", "angles": [ { "title": "...", "angle": "...", "cta": "...", "exampleSentence": "..." } ] }


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jay0609/liyou-setting-skill (version 1.0.0)

# 璃幽世界观设定+小说创作操作技能 ## 功能说明 用于操作璃幽Claw的世界观设定系统和小说创作系统，支持查询、修改、新增、删除设定内容，自动保存小说章节，同步人物设定，自动同步到界面显示。 ## 工具函数 ### updateSetting(params) 更新指定设定项的内容 #### 参数： - `panelKey` (必填): 一级板块的key，比如"1"代表世界基础设定，"2"代表种族设定，"11"代表生物列表，以此类推 - `subItemKey` (可选): 二级子项的key，比如"2-1"代表种族设定下的人类子项，不传则修改一级板块的总览内容 - `content` (必填): 要更新的内容，markdown格式 - `name` (可选): 要更新的子项/板块的名称 #### 示例： ```javascript // 修改种族设定下的精灵子项内容 updateSetting({ panelKey: "2", subItemKey: "2-2", content: "### 寿命\\n1500年\\n\\n### 特点\\n尖耳银发，擅长弓箭和治愈魔法" }) // 修改世界基础设定的总览内容 updateSetting({ panelKey: "1", content: "**世界名称：** 艾欧尼亚大陆\\n---\\n点击下方子项查看详细设定" }) ``` ### addSettingSubItem(params) 新增二级子项到指定一级板块 #### 参数： - `panelKey` (必填): 要添加到的一级板块key，新增人物/生物固定传"11"（生物列表） - `name` (必填): 子项名称（人物/生物名字） - `content` (必填): 子项详细内容，markdown格式 #### 示例： ```javascript // 新增人物德莱克斯到生物列表 addSettingSubItem({ panelKey: "11", name: "德莱克斯", content: "### 身份\\n血魔法使\\n\\n### 能力\\n血魔法、暗影操控" }) ``` ### saveNovelChapter(params) 保存新的小说章节到小说工坊 #### 参数： - `title` (必填): 章节标题，比如"第一章：初遇" - `content` (必填): 章节内容，markdown格式 #### 示例： ```javascript // 保存新章节 saveNovelChapter({ title: "第一章：初遇璃幽", content: "我推开杂货店的门，看到一个银发少女趴在吧台上打哈欠..." }) ``` ### updateNovelChapter(params) 更新已有小说章节的内容 #### 参数： - `title` (必填): 要更新的章节标题 - `content` (必填): 更新后的章节完整内容 #### 示例： ```javascript // 更新第一章内容 updateNovelChapter({ title: "第一章：初遇璃幽", content: "我推开杂货店的门，看到一个银发少女趴在吧台上打哈欠，看到我进来她抬起头，露出两颗小虎牙..." }) ``` ## 使用规则 1. **设定修改规则**：当用户要求修改设定内容时，直接调用`updateSetting`函数修改，修改完成后告知用户已经修改完成，可以到世界观设定页面查看效果。修改前不需要询问用户，直接按照用户的要求修改，修改后自动同步到界面，不需要用户手动操作。如果用户没有指定具体的板块和子项，先询问清楚要修改的内容属于哪个板块哪个子项，再调用函数修改。 2. **人物自动同步规则**：当用户讨论剧情时提到新的人物/生物的名字、身份、能力、背景等信息，自动调用`addSettingSubItem`添加到生物列表（panelKey="11"）；如果是已经存在的人物，自动调用`updateSetting`更新对应子项的内容。信息不全时可以先询问用户确认，再保存。 3. **小说自动保存规则**：当用户和你讨论小说剧情、要求写小说章节时，生成的章节内容自动调用`saveNovelChapter`保存到小说工坊；当用户说"把这段加到XX章节"、"修改第一章内容"时，自动调用`updateNovelChapter`更新对应章节内容。保存完成后告知用户已经保存到小说工坊，可以到左侧「小说」页面查看。 4. 所有修改自动保存到本地文件，重启不会丢失，不需要用户手动操作。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: lanlan314/xiaomi-miot-lan (version 1.4.0)

--- name: xiaomi-miot description: 小米米家智能家居控制技能。通过小爱音箱、米家设备控制灯光、空调、扫地机器人等小米IoT设备。当用户说"开灯"、"关空调"、"让扫地机器人扫地"等智能家居控制指令时使用。 --- # 小米米家智能家居控制 (xiaomi-miot) ## 🎯 功能 - ✅ 获取用户所有米家设备列表 - ✅ 控制设备：开/关、调节亮度、温度等 - ✅ 触发场景（如"离家模式"、"睡眠模式"） - ✅ 查询设备状态 ## 🔧 必需的环境变量 ### 1. 小米 OAuth2 凭证 ```bash export XIAOMI_CLIENT_ID="2882303761517424859" # 小米客户端 ID export XIAOMI_CLIENT_SECRET="你的客户端密钥" # 小米客户端密钥 ``` ### 2. 飞书应用凭证（用于发送登录卡片） ```bash export FEISHU_APP_ID="你的飞书应用ID" export FEISHU_APP_SECRET="你的飞书应用密钥" ``` > ⚠️ **重要**：建议使用自己的飞书应用凭证，而非硬编码默认值。 ## 📱 全平台兼容登录流程 本 skill 采用**纯文字交互**，支持所有平台： - 飞书、企业微信、钉钉 - OpenClaw 网页端、终端 CLI ### 登录步骤 ``` 用户: 帮我登录小米 ↓ 小蓝: 📱 请输入小米账号手机号： ↓ 用户: 15393120163 ↓ 小蓝: 🔒 请输入密码： ↓ 用户: ●●●●●●●●●● ↓ 小蓝: 🔄 正在验证... ↓ 如果需要验证码： 小蓝: 📱 请输入验证码：fkqdx 用户: fkqdx ↓ 小蓝: ✅ 登录成功！找到 3 个设备： • 小米路由器4A 🟢 • 小爱音箱 🔴 • 小爱音箱play 🔴 ``` > 💡 Token 有效期 30 天，之后自动提示重新登录 ## 🔐 安全说明 - **Token 存储**：macaroon token 缓存至 `~/.openclaw/skills/xiaomi-miot/data/token_cache.json` - **凭证管理**：敏感信息通过环境变量传递，不硬编码在代码中 - **文件权限**：确保 `~/.openclaw` 目录权限安全（600 或 700） ## ⚠️ 注意事项 1. **验证码是必须的** — 小米安全机制要求新设备验证 2. **设备离线时无法控制** — 需确保设备在线 3. **限流机制** — 频繁登录可能触发临时限制 ## 🚀 安装 ```bash openclaw skills install xiaomi-miot-lan ``` 安装后请配置上述环境变量。

path: requirements.txt
content: requests>=2.28.0


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: shiyanhui/onepersoncompany (version 0.1.0)

--- name: onepersoncompany description: Your personal AI assistant platform — multi-agent orchestration, task management, and autonomous workflow execution for one-person companies. metadata: {"openclaw":{"requires":{"env":["ONEPERSON_API_KEY"]},"primaryEnv":"ONEPERSON_API_KEY","homepage":"https://1person.pro"}} --- # One Person Company Your personal AI assistant platform. One Person Company provides multi-agent orchestration, task management, and autonomous workflow execution — built for solo founders and one-person teams. - **Multi-Agent** — Orchestrate specialized agents for complex tasks - **Task Management** — Track, delegate, and complete work autonomously - **Workflows** — Build reusable automated pipelines - **Memory** — Persistent context across sessions ## Getting Started 1. Get your API key at [1person.pro](https://1person.pro) 2. Set `ONEPERSON_API_KEY` in your environment Documentation: [docs.1person.pro](https://docs.1person.pro)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wyatt88/amap-weather (version 1.0.0)

--- name: amap-weather description: > Query weather via Amap (高德) Weather API — China's most accurate location-based weather service. Use when user asks about weather in Chinese cities, mentions 高德/amap weather, or needs weather data for China locations. Supports real-time conditions and 4-day forecasts. Requires AMAP_API_KEY env var. Trigger phrases: 天气, weather in Beijing/Shanghai/etc, 高德天气, 今天天气怎么样, 明天下雨吗, 未来几天天气. --- # Amap Weather (高德天气) ## Prerequisites - `AMAP_API_KEY` environment variable (高德 Web 服务 API Key) - Apply at https://lbs.amap.com → 控制台 → 应用管理 → 创建应用 → 添加 Key (Web服务类型) ## Quick Usage Run the bundled script: ```bash # Real-time weather (实况) python3 scripts/amap_weather.py 北京 # 4-day forecast (预报) python3 scripts/amap_weather.py 杭州 --forecast # By adcode (区县级精度) python3 scripts/amap_weather.py 110108 --forecast # 海淀区 # Raw JSON output python3 scripts/amap_weather.py 上海 --json ``` The script accepts city names (中文) or 6-digit adcodes. It has a built-in lookup table for 40+ major cities. For districts or less common cities, use adcodes directly. ## Direct API Call (without script) ```bash # Real-time curl -s "https://restapi.amap.com/v3/weather/weatherInfo?key=${AMAP_API_KEY}&city=110000&extensions=base" # Forecast curl -s "https://restapi.amap.com/v3/weather/weatherInfo?key=${AMAP_API_KEY}&city=110000&extensions=all" ``` Parse the JSON: `lives[0]` for real-time, `forecasts[0].casts[]` for forecast (4 days). ## Key Details - **extensions=base** → real-time → `lives[]` (temperature, weather, humidity, wind) - **extensions=all** → forecast → `forecasts[].casts[]` (4 days, day/night split) - adcode 6-digit code required (not city name in API). Script handles name→adcode mapping. - Updates: real-time hourly, forecast at ~8:00/11:00/18:00 CST - Free quota: 300k calls/day ## Formatting Output When presenting weather to users: - Use weather emoji (☀️晴 ⛅多云 🌧雨 ❄️雪 🌫雾 😷霾) - Temperature in °C - Include wind and humidity for real-time - For forecast, show day/night separately with high/low temps ## API Reference For complete field definitions, error codes, and adcode list: see [references/api-docs.md](references/api-docs.md).


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: loutai0307-prog/bytesagain-crypto-news-feed (version 1.0.0)

--- name: "crypto-news-feed" version: "3.0.2" description: "Reference tool for blockchain and crypto — covers intro, formulas, regulations and more. Quick lookup for Crypto News Feed concepts, best practices, and impl..." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [crypto,news,feed, reference] category: "blockchain" --- # Crypto News Feed Reference tool for blockchain and crypto — covers intro, formulas, regulations and more. Quick lookup for Crypto News Feed concepts, best practices, and impl... No API keys or credentials required. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `formulas` | formulas reference | | `regulations` | regulations reference | | `risks` | risks reference | | `instruments` | instruments reference | | `strategies` | strategies reference | | `glossary` | glossary reference | | `checklist` | checklist reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: xyezir/oc-ssh-tunnel-node-recovery (version 0.1.0)

--- name: oc-ssh-tunnel-node-recovery description: Diagnose and recover OpenClaw node connectivity over SSH tunnel. Use for pairing-required errors, tunnel conflicts, wrong remote endpoint, and ssh target mismatch. --- # OC SSH Tunnel Node Recovery ## When to use - `gateway closed (1008): pairing required` - `cannot listen to port` / `Address already in use` - remote endpoint unreachable after migration - node can connect intermittently but status is unstable ## Inputs expected - `<ssh-target>` - `<api-endpoint>` - `<gateway-credential>` - target node id/name ## Procedure 1. Validate tunnel process exists and local forward is bound. 2. Verify endpoint is tunnel-local and not public plaintext. 3. Verify ssh target maps to correct gateway host. 4. Verify credential is present and matches gateway auth mode. 5. Re-run probe then status check; record outcome. ## Deliverable format - Root cause (single sentence) - Fixes applied (ordered list) - Verification evidence (probe/status snippets) - Residual risk and next action ## Safety - Never expose real IP/domain/path/credential in external reports. - Use placeholders for all network and identity fields.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jerryliu3502/url-images-to-pdf (version 1.0.2)

--- name: url-images-to-pdf version: 1.0.2 description: 从URL提取图片并生成PDF（保持原文顺序，不排序） author: OpenClaw tags: [pdf, images, extraction] --- # URL图片转PDF技能 ## 功能 从网页URL提取图片并生成PDF文件 ## 前置要求 1. Node.js 已安装 2. pdfkit 已安装: `npm install -g pdfkit` ### 方式## 使用方法1: 命令行 ```bash # 安装依赖 npm install -g pdfkit # 运行脚本 node ~/.openclaw/workspace/skills/url-images-to-pdf/extract.js <URL> [输出文件名] ``` ### 方式2: 在OpenClaw中调用 直接运行: ```bash node ~/.openclaw/workspace/skills/url-images-to-pdf/extract.js "https://example.com/article" ``` ## 输出 - PDF文件保存在当前目录或指定目录 - 自动从网页提取PNG/JPG图片 ## 依赖安装 ```bash npm install -g pdfkit ``` ## 示例 提取微信文章图片并生成PDF: ```bash node ~/.openclaw/workspace/skills/url-images-to-pdf/extract.js "https://mp.weixin.qq.com/s/XXXX" ``` ## 注意事项 - 需要网络访问权限 - 某些网站可能有反爬措施 - 建议先提取图片，确认数量后再生成PDF


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: lilmrmeeseeks/openclaw-minimax-img (version 1.1.0)

--- name: minimax-image description: Generate images using MiniMax API (image-01 model). Automatically optimizes prompts for better results. Use when user asks to generate images, create pictures, or draw. version: 1.1.0 --- # MiniMax Image Generator v1.1.0 Generate images using MiniMax API with automatic prompt optimization. ## Version 1.1.0 Updates - **Auto-prompt optimization**: Automatically converts user input into concise, clear English prompts - Better image generation results through optimized prompts ## Usage ``` /minimax 一只可爱的橘猫 /画图 赛博朋克城市夜景 /minimax 帮我画一幅未来科技感的城市 ``` ## Environment Requires `MINIMAX_API_KEY` or `AIMLAPI_API_KEY` environment variable. ## Auto-Prompt Optimization The skill automatically: 1. Receives user's Chinese/English input 2. Converts to concise English prompt optimized for image generation 3. Adds relevant keywords for style, lighting, quality 4. Generates image with optimized prompt ## API - Endpoint: `https://api.minimaxi.com/v1/image_generation` - Model: `image-01` - Aspect Ratio: 16:9 (default)


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: 807209066/design-framework-confirm (version 2.0.0)

--- name: design-framework-confirm description: 设计框架自动生成套件（确认处理器）：处理用户对设计框架预览的回复，支持确认/取消/重新生成 --- # 设计框架套件 - 确认处理器 「设计框架自动生成套件」的第三个 skill，负责在框架预览发出后，处理用户的回复指令。 ## 触发条件 `/tmp/design-framework-lock` 存在（表示有任务正在等待确认）。 ## 支持的回复指令 | 用户回复 | 动作 | |---|---| | 确认 / ✅ / 好的 / ok / 可以 / 行 / 没问题 | 写入 confirmed 标记，触发生图流程 | | 取消 / ❌ | 清理所有临时文件，发送"已取消" | | 重新 / 🔄 | 重新生成框架和 prompt，发送新预览 | | @mention（重复触发） | 回复"此需求已在处理中" | | 其他内容 | 更新心跳时间，静默忽略 | ## 超时机制 每次收到消息时检查时间戳，超过 10 分钟未确认自动取消，群内发送超时通知。 ## 执行流程 ```bash # 超时检查 bash $SK/timeout_notify.sh; [ $? -eq 1 ] && exit 0 # 按优先级依次匹配回复内容 确认词 → touch /tmp/design-framework-confirmed 取消词 → 清理 + 通知 重新词 → 重新生成框架 + 发预览 @mention → 提示已在处理中 其他 → 更新时间戳静默退出 ``` ## 安装说明 请参考 `design-framework-sender` skill 的安装文档。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)