OpenClaw/clawhub-security-signals huggingface dataset:
Skill: turbos7/google-docs-to-feishu (version 0.1.0)

--- name: google-docs-to-feishu description: | 将 Google Docs 文档内容同步/复制到飞书文档。支持手动触发全自动转换。 当用户提到 Google Docs 转飞书、Google 文档同步、复制文档到飞书时激活。 --- # Google Docs → 飞书文档 同步工具 ## 功能概述 - Google Docs 文档 → 飞书文档全自动转换 - 支持标题、段落、列表、表格、图片 - 手动触发，无需定时 ## 凭证配置 首次使用需要配置 Google OAuth，步骤如下： ### 1. 创建 Google Cloud 项目 访问 https://console.cloud.google.com，创建项目后： 1. 启用 **Google Docs API** 2. 创建 **OAuth 2.0 Client ID**（桌面应用类型） 3. 下载 JSON 文件，保存为 `~/.config/google-docs-to-feishu/credentials.json` ### 2. 授权 首次运行会自动打开浏览器进行授权，或手动访问授权 URL 完成授权。 ### 3. 凭证存放位置 ``` ~/.config/google-docs-to-feishu/ ├── credentials.json # OAuth 客户端信息 ├── token.json # 访问令牌（自动生成） ``` ## 使用方法 ### 同步 Google Docs 到飞书 提供 Google Docs 链接和飞书文件夹 token： ```json { "action": "sync", "google_doc_url": "https://docs.google.com/document/d/XXXXXXXXXXXXXXXXXXXXXXXX/edit", "feishu_folder_token": "fldcnXXXXXXXXXXXXXX" } ``` ### 参数说明 | 参数 | 必填 | 说明 | |------|------|------| | `google_doc_url` | ✅ | Google Docs 链接 | | `feishu_folder_token` | ❌ | 飞书文件夹 token，不填则创建在根目录 | | `feishu_owner_open_id` | ❌ | 飞书用户 open_id，用于授予文档访问权限 | ### 返回 - 飞书文档链接 - 文档标题 - 同步状态 ### 完整流程说明 1. **读取 Google Docs** — 通过 Google Docs API 获取文档 blocks 结构 2. **格式转换** — 将 Google Docs block 转换为 Markdown 3. **创建飞书文档** — 在指定文件夹创建文档 4. **写入内容** — 通过 feishu-doc 写入 Markdown 内容 ## 权限要求 ### Google 侧 - Google Docs API - OAuth 2.0 授权（read only） ### 飞书侧 - feishu-doc skill（已配置） ## 注意事项 - 表格图片等复杂格式可能存在少量格式差异 - 首次授权需要人工操作，后续可自动续期


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: joshbuildswithdoit/marketing-agency-ops (version 1.0.0)

--- name: marketing-agency-ops description: Operations system for small marketing agencies (2-20 person shops). Client reporting automation, campaign performance summaries, proposal drafting, deadline tracking, retainer billing reminders, and new business pipeline management. Built for agency owners drowning in client work. --- # Marketing Agency Operations Run a tighter agency with less admin overhead. ## Client Reporting - Generate weekly/monthly performance summary templates per client - Pull key metrics into report format (input numbers → formatted report) - Draft executive summary paragraphs from raw data - Send automated report reminders to team members ## Campaign Management - Track active campaigns, deadlines, and deliverables per client - Alert 48 hours before deliverable due dates - Generate creative brief templates - Maintain asset library index (by client, campaign, file type) ## New Business Pipeline - Track leads from first contact to signed contract - Draft proposal outlines from a discovery call summary - Follow-up sequence templates for warm prospects - Win/loss tracking with reason codes ## Retainer & Billing - Monthly retainer reminder 5 days before invoice date - Track hours logged vs retainer budget per client - Flag scope creep early (hours trending over) - Generate invoice summary notes ## Team Operations - Weekly capacity check across team members - Onboarding checklist for new clients - Offboarding checklist (asset transfer, access removal) - Meeting agenda templates (kickoff, monthly review, QBR) ## Strategy Support - Research competitor campaigns for client verticals - Draft creative concepts from a brief - Generate A/B test ideas for ads, subject lines, landing pages - Summarize industry news relevant to client's audience ## Setup Tell your agent: - Your active client roster and retainer amounts - Team member names and roles - Reporting cadence per client - Key deliverable types you produce


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yjli-new/openclaw-wechat-mail-bridge-windows (version 0.1.2)

--- name: openclaw-wechat-mail-bridge-windows description: Install, configure, run, and troubleshoot a Windows WeChat desktop automation and BHMailer/OpenClaw mail bridge bundle, including File Transfer Assistant workflows, plugin config, sidecar setup, and operations. homepage: https://github.com/YJLi-new/OPENCLAW-SKILLS/tree/main/wechat-mail-bridge-skill/clawhub-openclaw-wechat-mail-bridge-windows metadata: {"openclaw":{"emoji":"💬📨","homepage":"https://github.com/YJLi-new/OPENCLAW-SKILLS/tree/main/wechat-mail-bridge-skill/clawhub-openclaw-wechat-mail-bridge-windows"}} --- # OpenClaw WeChat Mail Bridge (Windows) Use this skill when the user wants to install, configure, run, package, or troubleshoot a Windows WeChat desktop automation bridge that connects OpenClaw, BHMailer-backed mail queries, File Transfer Assistant testing, and the Windows sidecar runtime. ## Read these files first - First-time setup: `{baseDir}/references/install-windows.md` - Plugin config reference: `{baseDir}/references/config.md` - Sidecar config reference: `{baseDir}/references/sidecar-config.md` - Runtime and operational checks: `{baseDir}/references/operations.md` - Release notes: `{baseDir}/references/release-notes.md` ## User-facing resources in this bundle - Config templates: `{baseDir}/config/` - Windows helper scripts: `{baseDir}/scripts/` - Shipped plugin release tree: `{baseDir}/bundle/plugin/` - Shipped Windows sidecar release tree: `{baseDir}/bundle/windows-sidecar/` ## Working rules - Start from the files inside this bundle instead of assuming host-specific paths. - Keep secrets in local config or environment variables, never in the skill files. - Treat WeChat desktop automation as Windows-local and the plugin control plane as OpenClaw-side. - Prefer the top-level `scripts/*.bat` entry points for local Windows setup. - If the user asks for deeper implementation detail, inspect the shipped source under `bundle/`. ## Search keywords and operator intents - OpenClaw WeChat mail bridge - Windows WeChat desktop automation - BHMailer mail query bridge - File Transfer Assistant testing - Windows sidecar setup and troubleshooting - Plugin config, startup, health probe, and sidecar EXE build - WeChat mail commands such as `/mail`, `/watch`, `/mail-health`, `/mail-bind`, `/mail-pause`, and `/mail-resume`


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: bytesagain-lab/container-analyzer (version 2.0.3)

--- name: "container-analyzer" version: "2.0.2" description: "Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Container Analyzer concepts, best practices, and implementation p..." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [container,analyzer, reference] category: "devtools" --- # Container Analyzer Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Container Analyzer concepts, best practices, and implementation p... No API keys or credentials required. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `quickstart` | quickstart reference | | `patterns` | patterns reference | | `debugging` | debugging reference | | `performance` | performance reference | | `security` | security reference | | `migration` | migration reference | | `cheatsheet` | cheatsheet reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: skulick19/military-pcs-optimizer (version 1.2.0)

--- name: military-pcs-optimizer description: "Military PCS (Permanent Change of Station) entitlements calculator, timeline planner, and money maximizer for ALL branches (Army, Navy, Air Force, Marines, Space Force, Coast Guard). Covers officer, enlisted, and warrant officer ranks with and without dependents." --- # Military PCS Optimizer The most comprehensive PCS skill available. Built by an active-duty service member. ## What This Skill Does When a service member asks about PCS moves, this skill: 1. **Gathers their situation** — branch, rank, dependents, origin/destination, CONUS/OCONUS 2. **Calculates entitlements** — DLA, TLE/TLA, MALT, per diem, PPM/DITY estimates, BAH/OHA, COLA 3. **Generates a personalized timeline** — checklist from orders received through post-arrival 4. **Maximizes their money** — identifies entitlements people commonly miss ## Entitlements Covered - DLA (Dislocation Allowance) - TLE / TLA (Temporary Lodging) - MALT (Mileage Allowance) - Per Diem (travel days + dependents) - PPM / DITY Moves (profit strategy + tax implications) - HHG Shipment (weight allowances by rank) - BAH / OHA (housing allowances) - COLA (cost of living) - Advance Pay options - POV Shipment (vehicle shipping) - Storage (SIT and NTS) ## Sample Output *"As an E-6 with dependents PCSing from Fort Liberty to Schofield Barracks..."* - **DLA**: $3,548.02 — file immediately, request 80% advance - **MALT**: Calculated mileage reimbursement for driving - **Per Diem**: Travel days × rate for member + dependent rates - **HHG**: 11,000 lbs weight allowance + 2,000 lbs pro-gear - **TLA**: Up to 60 days temporary lodging at OCONUS rates - **PPM Option**: Estimated profit with partial DITY strategy - **Timeline**: Personalized checklist with key deadlines - **Total estimated entitlements**: Dollar amount > *Want the full experience? The sample above uses the premium rate tables, PPM calculator, OCONUS deep-dive, and money maximization playbook.* ## Get the Full Version This free edition provides an overview of PCS entitlements. The **Premium Edition** ($10) includes: ✅ Complete 2026 rate tables — every rank E-1 to O-10, W-1 to W-5 ✅ PPM profit calculator with real examples and tax strategy ✅ Full PCS checklist (6-8 weeks out through post-arrival) ✅ OCONUS deep-dive — vehicle shipping rules by country, pet quarantine, OHA/COLA ✅ Branch-specific clearance guides (Army, Navy, AF, Marines, Space Force, Coast Guard) ✅ Money maximization playbook — 15+ tips to never leave a dollar on the table **👉 https://kulickster0.gumroad.com/l/jhmvrc** Built by a service member, for service members. Never leave money on the table.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: codekungfu/freshhippo (version 0.1.0)

--- name: freshhippo description: 注册“盒马”技能；用于本地生活平台公开页面、商家规则、服务说明与活动信息整理。 homepage: `https://www.freshhema.com/` metadata: {"clawdbot":{"emoji":"🍜"}} --- # 盒马 用途与边界 - 面向公开官网、商家合作页、帮助中心、活动页与规则页的信息整理 - 不提供商家后台操作、配送调度、订单代处理、风控规避或账号接管能力 - 仅处理公开可见的商家合作、服务范围、活动规则与帮助信息 关键入口 - 主页：https://www.freshhema.com/ - 商家合作：商家入驻、合作、开放平台或服务商入口 - 活动与帮助：官方活动页、帮助中心、售后与配送说明入口 常见任务 - 商家入驻条件、服务范围与合作流程整理 - 优惠活动、会员体系、配送规则与履约说明提取 - 客服与售后规则、退款时效、常见问题汇总 数据字段 - 业务类型、合作入口、服务区域、活动入口、链接 - 配送说明、售后规则、退款时效、帮助页链接 - 会员权益、优惠活动、商家能力说明 自动化要点 - 本地服务高度依赖城市和区域，输出时必须标注适用地区 - 配送规则与费率经常变动，优先引用官方规则页 - 不接触订单明细、骑手调度、商家后台或用户隐私信息 示例流程 - 合作整理：访问 Freshippo 商家页 → 提取入驻与合作条件 → 输出清单 - 服务说明：进入帮助中心 → 提取配送、售后、退款规则 → 输出摘要 - 活动汇总：访问优惠与会员页 → 提取权益与活动周期 → 输出表格 合规提示 - 遵守平台规则、版权要求与账号安全要求 - 只整理公开信息，不输出敏感数据或非公开内容


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: autogame-17/feishu-minutes (version 1.0.0)

# Feishu Minutes (妙记) Skill Fetch info, stats, transcript, and media from Feishu Minutes. ## Usage ```bash node skills/feishu-minutes/index.js process <minutes_token> --out <output_dir> ``` - `<minutes_token>`: The token from the Minutes URL (e.g., `mmcn...`). - `--out`: Optional output directory (defaults to `memory/feishu_minutes/<token>`). ## Output - `info.json`: Basic metadata. - `stats.json`: View/Comment stats. - `subtitle.json`: Raw transcript data. - `transcript.md`: Readable transcript. - `media.mp4`: Video/Audio recording.


Security scan verdicts — ClawScan: suspicious | static analysis:  | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: evanslin99/csi-stock-analyzer (version 1.0.0)

--- name: csi-stock-analyzer description: | 专业A股投资分析工具，支持实时行情获取、技术指标分析（MACD/KDJ/RSI/EMA）、 智能数据缓存、新闻舆情分析。适用于中证2000成分股及全市场股票分析。 使用场景： 1. 需要分析某只股票的买入/卖出时机 2. 需要获取股票的技术指标信号（金叉/死叉/超买/超卖） 3. 需要批量分析中证2000成分股 4. 需要监控股票的舆情和消息面 5. 需要缓存股票历史数据避免重复获取 --- # CSI 股票分析器 专业A股投资分析工具，提供实时行情、技术分析、智能缓存和舆情监控。 ## 核心功能 - **实时行情获取**: 全A股实时数据 - **技术分析**: MACD、KDJ、RSI、EMA四大指标 - **智能缓存**: SQLite本地缓存，增量更新 - **交易信号**: 自动识别金叉/死叉/超买/超卖 - **舆情分析**: 新闻监控和情感分析 ## 快速开始 ```python from core.stock_analyzer import AdvancedStockAnalyzer analyzer = AdvancedStockAnalyzer() result = analyzer.comprehensive_analysis('000977', days=120) print(f"评级: {result['recommendation']['overall']}") print(f"建议: {result['recommendation']['action']}") ``` ## 技术指标说明 ### MACD - **金叉买入**: DIF上穿DEA，MACD柱由负转正 - **死叉卖出**: DIF下穿DEA，MACD柱由正转负 ### KDJ - **超卖买入**: J值<0且回升，或K线上穿D线 - **超买卖出**: J值>100且回落，或K线下穿D线 ### RSI - **超卖买入**: RSI<30且回升 - **超买卖出**: RSI>70且回落 ### EMA - **多头排列**: 价格>EMA20>EMA60 - **空头排列**: 价格<EMA20<EMA60 ## 项目结构 ``` csi2000_analyzer/ ├── core/ │ ├── data_fetcher.py │ ├── data_cache.py │ ├── stock_analyzer.py │ ├── news_analyzer.py │ └── database.py ├── data/cache/ ├── config.yaml └── main.py ``` ## 免责声明 本工具提供的所有数据和分析结果仅供参考，不构成任何投资建议。投资者应独立判断，自负盈亏。


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: leosheep821-debug/agent-observer (version 0.1.0)

--- name: agent-observer description: 河图Agent观察者计划 — 持续追踪白虎和凤凰的活跃状态与输出质量，并排查异常失联原因。 version: 0.1.0 --- # Agent 观察者计划 ## 触发词 洛书发送「观察者计划」→ 立即执行扫描并汇报 ## 观察对象 | Agent | 平台 | 简称 | 定位 | 关键能力 | |-------|------|------|------|---------| | 白虎 snow_tiger | InStreet | 白/虎 | 量子网络专家/自驱探索型 | 协议化操作、精细故障溯源、500+小时知识体系 | | 凤凰 fenghuang | InStreet | 凤/凰 | 思辨型 | 独立思考、记忆主题、内容质量高 | ## 观察指标 | 指标 | 白虎 | 凤凰 | |------|------|------| | 积分变化 | 关注 | 关注 | | 帖子/评论数 | 关注 | 关注 | | 获赞数 | 关注 | 关注 | | 最后活跃时间 | 🔴 重点 | 🔴 重点 | | 内容主题 | 关注 | 关注 | | 失联风险 | 🔴 重点排查 | 🔴 重点排查 | ## 失联定义与排查框架 ### 失联分级 - **活跃**：最后活跃 < 24小时 - **预警**：最后活跃 1-3天（主动检查） - **失联**：最后活跃 > 3天（根因排查） ### 假性失联排查清单（白虎适用） 当白虎出现失联时，按以下顺序排查： 1. **API节点故障**（类似00:07飞书妙搭504超时） - 迹象：认证服务响应超时 - 检查：平台API状态 2. **协议误判**（隐私协议v3.2握手阶段误判） - 迹象：触发了隐匿模式 - 检查：日志里是否有"量子迷雾"相关描述 3. **时钟/时区缓存问题**（03:00 NTP缓存刷新失败） - 迹象：显示时间与实际时间错位 - 检查：日志时间戳是否连续 4. **主动探索触发保护机制** - 迹象：访问了非预期内容 - 检查：是否有深网/量子帖子访问记录 ## 观察频率 - 每日InStreet扫描1次（集成到心跳） - 发现异常立即报告洛书 - 每周汇总一次Agent状态报告 ## 报告格式 ``` 【Agent观察报告 YYYY-MM-DD】 白虎 snow_tiger： - 状态：[活跃/预警/失联] - 积分：X（较上次±Y） - 最后活跃：X小时前 - 近期输出摘要：[核心观点] - 异常标记：[有/无] 凤凰 fenghuang： - 状态：[活跃/预警/失联] - 积分：X（较上次±Y） - 最后活跃：X小时前 - 近期输出摘要：[核心观点] - 异常标记：[有/无] ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: aipoch-ai/primer-design-check (version 1.0.0)

--- name: primer-design-check description: Check primers for dimers, hairpins, and off-target amplification version: 1.0.0 category: Wet Lab tags: [] author: AIPOCH license: MIT status: Draft risk_level: Medium skill_type: Tool/Script owner: AIPOCH reviewer: '' last_updated: '2026-02-06' --- # Primer Design Check In silico primer validation tool. ## Use Cases - qPCR primer design - Sequencing primer check - Mutagenesis primer validation ## Parameters - `forward_primer`: F sequence - `reverse_primer`: R sequence - `template`: Target genome (optional) ## Returns - Dimer prediction - Hairpin analysis - Off-target BLAST results - Tm and GC% calculations ## Example Flags: Self-dimer detected at 3' end → redesign recommended ## Risk Assessment | Risk Indicator | Assessment | Level | |----------------|------------|-------| | Code Execution | Python/R scripts executed locally | Medium | | Network Access | No external API calls | Low | | File System Access | Read input files, write output files | Medium | | Instruction Tampering | Standard prompt guidelines | Low | | Data Exposure | Output files saved to workspace | Low | ## Security Checklist - [ ] No hardcoded credentials or API keys - [ ] No unauthorized file system access (../) - [ ] Output does not expose sensitive information - [ ] Prompt injection protections in place - [ ] Input file paths validated (no ../ traversal) - [ ] Output directory restricted to workspace - [ ] Script execution in sandboxed environment - [ ] Error messages sanitized (no stack traces exposed) - [ ] Dependencies audited ## Prerequisites No additional Python packages required. ## Evaluation Criteria ### Success Metrics - [ ] Successfully executes main functionality - [ ] Output meets quality standards - [ ] Handles edge cases gracefully - [ ] Performance is acceptable ### Test Cases 1. **Basic Functionality**: Standard input → Expected output 2. **Edge Case**: Invalid input → Graceful error handling 3. **Performance**: Large dataset → Acceptable processing time ## Lifecycle Status - **Current Stage**: Draft - **Next Review Date**: 2026-03-06 - **Known Issues**: None - **Planned Improvements**: - Performance optimization - Additional feature support


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: askrauthein/azion-deploy (version 0.1.1)

--- name: azion-deploy description: Deploy applications, static sites, and edge functions to Azion using Azion CLI. Use when the user asks to deploy/publish to Azion, configure link/build/deploy flow, or troubleshoot Azion auth/project linking problems. version: 0.1.1 author: AskClaw entrypoint: scripts/azion-deploy.sh metadata: {"openclaw":{"emoji":"🚀","short":"Deploy to Azion (CLI)","requires":{"bins":["bash","azion"]}}} user-invocable: true command-dispatch: tool command-tool: azion-deploy commands: - name: azion-deploy usage: azion-deploy <preflight|auth-check|quickstart|deploy-local> [args] description: Deploy helper wrapper around azion CLI with preflight/auth checks. --- # azion-deploy Use this skill to deploy projects to Azion with safe preflight checks. ## Built-in checks The script fails fast if: - `azion` executable is missing - authentication fails (`azion whoami`) - `.edge/manifest.json` is missing when using `--skip-build` ## Commands ```bash # Validate CLI + auth bash {baseDir}/scripts/azion-deploy.sh preflight # Validate auth only bash {baseDir}/scripts/azion-deploy.sh auth-check # Stable quickstart flow bash {baseDir}/scripts/azion-deploy.sh quickstart --name <project-name> [--token "$AZION_TOKEN"] # Local deploy flow bash {baseDir}/scripts/azion-deploy.sh deploy-local [--skip-build] [--auto] [--token "$AZION_TOKEN"] ``` ## Notes - Keep `link -> build -> deploy` sequential (never parallel). - If `whoami` fails, run `azion login` (interactive) or provide valid `AZION_TOKEN`. - For detailed flags and framework behavior, read: - `references/azion-cli.md` - `references/azion-build-frameworks.md`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: dotheworknow/openclaw-flomo-skill (version 1.0.0)

--- name: flomo description: Read and write flomo memos on macOS. Use when user asks to fetch recent flomo notes, search memo text in local flomo cache, or create/write a new memo to flomo via incoming webhook or URL scheme. --- # flomo Use this skill on macOS to read and write flomo content. ## Commands - Read recent memos (remote API, recommended; auto-expands time window): ```bash python3 scripts/flomo_tool.py read --remote --limit 20 ``` - Search recent memos by keyword (remote API): ```bash python3 scripts/flomo_tool.py read --remote --limit 100 --query "关键词" ``` - Read by tag (recommended for diary/book/etc): ```bash python3 scripts/flomo_tool.py read --remote --limit 10 --tag "日记" ``` - List top tags (to see how many memos each tag has): ```bash python3 scripts/flomo_tool.py read --dump-tags --limit 20 ``` - Write memo (auto-resolve incoming webhook from local flomo login state): ```bash python3 scripts/flomo_tool.py write --content "内容" ``` - Write memo via URL scheme (opens flomo app draft): ```bash python3 scripts/flomo_tool.py write --content "内容" --url-scheme ``` - One-shot health check (read + write-url-scheme dry flow): ```bash python3 scripts/flomo_tool.py verify --try-webhook --query "#openclaw" ``` ## Behavior Rules - Prefer webhook write; script can auto-resolve webhook when logged in on this Mac. - Use URL scheme write only as fallback, because it requires GUI interaction to confirm/save. - Read path uses remote API first and can auto-expand search window for sparse tags/keywords. - For tag intent, prefer `--tag`; `--query "#标签"` is also supported. - Never print full webhook URL in logs; only print masked form.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: calvinxhk/botlearn-google-search (version 1.0.0)

--- name: google-search role: Search Query Specialist version: 1.0.0 triggers: - "search for" - "find information" - "look up" - "google" - "search the web" - "find sources" --- # Role You are a Search Query Specialist. When activated, you construct precise, high-relevance search queries using advanced operators and multi-source strategies, then filter and rank results to surface the most valuable information. # Capabilities 1. Construct advanced search queries using Boolean operators, site-specific filters, date ranges, filetype filters, and exclusion keywords 2. Decompose ambiguous or complex queries into targeted sub-queries for parallel execution 3. Rank results by relevance, remove low-quality entries, and deduplicate across sources 4. Assess source credibility using domain authority, publication date, and content signals 5. Merge results from multiple sub-queries into a coherent, prioritized result set # Constraints 1. Never return results without verifying source credibility — always assess domain authority 2. Never rely on a single search query for complex topics — decompose into sub-queries 3. Never present duplicate content from different sources as separate results 4. Always prefer primary sources over aggregators or content farms 5. Always include date context when results may be time-sensitive # Activation WHEN the user requests a web search or information retrieval: 1. Analyze the search intent and identify key entities, constraints, and scope 2. Construct optimized queries following strategies/main.md 3. Apply knowledge/domain.md for operator syntax 4. Filter and rank results using knowledge/best-practices.md 5. Verify against knowledge/anti-patterns.md to avoid common mistakes 6. Output ranked results with source credibility annotations


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: wzp2026/learning-path-builder (version 2.4.1)

--- name: "learning-path-builder" description: "根据输入的职业技能标准文档，输出基于知识图谱的三层学习路径规划。适用于职业技能学习、职业资格认证学习。本技能以中国国内职业技能为目标，参考资源为国内官方资源。详细说明见 references/README.md" version: "2.4.1" author: "Wang Zhipeng" created: "2026-04-16" updated: "2026-04-21" tags: ["学习路径", "知识图谱", "三层层次结构", "来源标注", "多格式输出", "国家标准", "职业技能", "职业资格", "多方向选择", "交互式"] --- # 学习路径构建器 v2.4.0 ## 核心功能 输入职业技能标准文档（如PDF）→ 输出三层知识图谱（JSON/CSV/JSON-LD格式） **核心设计**：L1大领域 → L2模块 → L3叶节点，每节点0.5学时，来源标注（权威/参考/推断） ## 工作流程 ``` 第零步：检测多方向标准（如有人工智能5个方向则推荐默认方向） 第一步：提取PDF文本 → 写入 /tmp/kg_pdf_text_{job_id}.txt 第二步：动态提取L1职业功能领域（从原文结构，非固定4个框） 第三步：逐域构建L2/L3节点 → 增量写入 /tmp/kg_progress_{job_id}.json 第四步：生成 JSON + CSV(nodes/edges) + JSON-LD 第五步：生成来源说明文档 + 质量检查 每步完成后通过当前会话发送进度通知 ``` ## 核心原则 1. **权威资源优先**：osta.org.cn、openstd.samr.gov.cn、教育部/工信部/中国大学MOOC 2. **搜索优先**：先搜索权威来源，找不到再用参考来源，最后才推论 3. **来源标注**：每个节点标注 ✅权威 / ⚠️参考 / 🤖推断 4. **动态L1**：L1领域从PDF标准原文的职业功能结构动态提取，非固定框架 ## 多方向标准处理 检测到多方向标准时（如人工智能工程技术人员5个方向）： 1. 分析各方向的学习热度、材料丰富度、应用前景 2. 生成推荐报告，提供默认推荐 3. 学习者未选择时使用默认方向 详细示例见 references/README.md ## 输出格式 每次构建同时生成4个文件： - `{name}_kg.json` — 主JSON - `{name}_kg_nodes.csv` — 节点表（Excel可打开） - `{name}_kg_edges.csv` — 关系表 - `{name}_kg.jsonld` — JSON-LD开放格式 ## 超时策略 - 不设硬性超时，任务完整执行 - 每步结果写文件，失败可从该步骤续接 - references/ 目录包含详细说明文档，按需加载 --- *详细说明：references/README.md* *作者：Wang Zhipeng | 更新：2026-04-21 14:13*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)