OpenClaw/clawhub-security-signals huggingface dataset:
Skill: jingyu525/markdown-canvas (version 1.0.2)

--- name: markdown-canvas description: Convert markdown files to beautiful HTML pages suitable for Canvas display or browser viewing. Use when user asks to render, visualize, display, or share markdown files (.md) in a visual format. Triggers include phrases like "render xxx.md", "canvas display xxx.md", "visualize markdown", "make xxx.md pretty", "share xxx.md as HTML". homepage: https://github.com/jingyu525/markdown-canvas metadata: { "openclaw": { "emoji": "📝", "requires": { "bins": ["python3"] } } } --- # Markdown Canvas Renderer Convert markdown files into beautiful, shareable HTML pages with zero external dependencies. ## Quick Start When a user wants to render a markdown file: 1. **Run the conversion script**: ```bash python3 scripts/convert.py <path/to/file.md> ``` 2. **Open in browser** (if no Canvas node available): ```bash open <output.html> ``` 3. **Or push to Canvas** (if node paired): ```bash canvas present file://<output.html> ``` ## Usage Examples ### Basic conversion ```bash # Converts ai-landscape-2026.md → ai-landscape-2026.html python3 scripts/convert.py ai-landscape-2026.md ``` ### Custom output path ```bash python3 scripts/convert.py input.md -o /path/to/output.html ``` ### Custom page title ```bash python3 scripts/convert.py notes.md -t "My Research Notes" ``` ## Supported Markdown Features The converter handles: - **Headers** (# through ######) - **Bold** (`**text**` or `__text__`) - **Italic** (`*text*` or `_text_`) - **Code blocks** (```language ... ```) - **Inline code** (`code`) - **Links** (`[text](url)`) - **Lists** (unordered: `- `, `* `, `+ `) - **Horizontal rules** (`---`, `***`, `___`) ## Design Philosophy **Token efficiency**: Template is pre-built; only markdown content flows through the context window. **Zero dependencies**: Pure Python + self-contained HTML template with embedded CSS. **Progressive enhancement**: Works offline, no CDN required, renders instantly. ## Workflow 1. User requests markdown rendering 2. Run `scripts/convert.py` on their file 3. Script reads `assets/template.html` 4. Script converts markdown → HTML 5. Script injects HTML into template 6. Output saved alongside source (or custom path) 7. Open in browser OR push to Canvas ## Token Cost Analysis Per conversion: - Read SKILL.md: ~500 tokens (first time only) - Execute script: ~100 tokens - Report result: ~50 tokens **Total: ~650 tokens** vs ~8000 tokens for generating full HTML each time. ## Output Location By default, output is saved next to the input file: - `notes.md` → `notes.html` - `/path/to/doc.md` → `/path/to/doc.html` Use `-o` flag to specify custom location.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: awelab/trendyol-admin (version 1.0.1)

--- name: trendyol-admin description: Comprehensive management of Trendyol marketplace via API v2.0. Includes product lifecycle (create, update, delete, archive), stock/price management, order processing (status updates, shipping), returns, and customer questions. Use this skill as a knowledge base to construct correct API requests. --- # Trendyol Admin (AI Knowledge Base) This skill provides a comprehensive reference for the Trendyol Marketplace API v2.0. It contains all necessary endpoints, authorization requirements, and payload schemas to manage a Trendyol store. ## 🛠 Usage for AI Agents 1. **Authentication**: Always use Basic Auth. - Username: `API_KEY` - Password: `API_SECRET` - Generate Header (One-liner): `echo -n "YOUR_API_KEY:YOUR_API_SECRET" | base64` 2. **Mandatory Headers**: Every request MUST include: - `Authorization: Basic <base64>` - `User-Agent: <SupplierId> - SelfIntegration` - `storeFrontCode`: **This is the mandatory parameter to switch national markets.** - `AE`: United Arab Emirates (AED) - `SA`: Saudi Arabia (SAR) - `QA`: Qatar (QAR) - `KW`: Kuwait (KWD) - `BH`: Bahrain (BHD) - `OM`: Oman (OMR) - `DE`: Germany (EUR) - `AZ`: Azerbaijan (AZN) - `RO`: Romania (RON) - `CZ`: Czech Republic (CZK) - `HU`: Hungary (HUF) - `SK`: Slovakia (EUR) - `BG`: Bulgaria (BGN) - `GR`: Greece (EUR) 3. **Endpoints**: Refer to [references/api_reference.md](references/api_reference.md) to find the correct URL for the task (Product, Inventory, Order, etc.). 4. **Execution**: Since there are no pre-built scripts, use `curl` or inline Node.js/Python code to execute requests as defined in the reference. ## 📖 Key Sections in Reference - **Authorization**: Header construction and error codes. - **Product Integration**: Full lifecycle management of items. - **Order Integration**: From creation to delivery status updates. - **Webhooks**: Real-time notification models. - **API Reference File**: [references/api_reference.md](references/api_reference.md) ## ⚠️ Important Rules - **Base URL (Prod)**: `https://apigw.trendyol.com/integration/` - **Rate Limit**: 50 requests per 10 seconds. - **Image Requirements**: 1200x1800 px, HTTPS URLs. - **JSON Only**: All payloads must be valid JSON.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: joelchance/manus-ai (version 1.0.1)

--- name: manus description: Create and manage AI agent tasks via Manus API. Manus is an autonomous AI agent that can browse the web, use tools, and deliver complete work products. homepage: https://manus.im user-invocable: true disable-model-invocation: true metadata: clawdbot: emoji: "🤖" primaryEnv: MANUS_API_KEY requires: bins: [curl, jq] env: [MANUS_API_KEY] --- # Manus AI Agent Create tasks for Manus, an autonomous AI agent, and retrieve completed work products. ## Authentication Set `MANUS_API_KEY` env var with your key from [manus.im](https://manus.im). --- ## Commands All commands use `scripts/manus.sh`. ### Create a Task ```bash {baseDir}/scripts/manus.sh create "Your task description here" {baseDir}/scripts/manus.sh create "Deep research on topic" manus-1.6-max ``` Profiles: `manus-1.6` (default), `manus-1.6-lite` (fast), `manus-1.6-max` (thorough). ### Check Status ```bash {baseDir}/scripts/manus.sh status <task_id> ``` Returns: `pending`, `running`, `completed`, or `failed`. ### Wait for Completion ```bash {baseDir}/scripts/manus.sh wait <task_id> {baseDir}/scripts/manus.sh wait <task_id> 300 # custom timeout in seconds ``` Polls until task completes or times out (default: 600s). ### Get Task Details ```bash {baseDir}/scripts/manus.sh get <task_id> ``` Returns full task JSON including status and output. ### List Output Files ```bash {baseDir}/scripts/manus.sh files <task_id> ``` Shows filename and download URL for each output file. ### Download Output Files ```bash {baseDir}/scripts/manus.sh download <task_id> {baseDir}/scripts/manus.sh download <task_id> ./output-folder ``` Downloads all output files to the specified directory (default: current directory). ### List Tasks ```bash {baseDir}/scripts/manus.sh list ``` --- ## Typical Workflow 1. **Create task**: `manus.sh create "your prompt"` 2. **Wait for completion**: `manus.sh wait <task_id>` 3. **Download results**: `manus.sh download <task_id>` --- ## Advanced API Features For file attachments, webhooks, connectors, projects, multi-turn conversations, and interactive mode, see the full Manus API documentation: - API Reference: https://open.manus.ai/docs - Main Docs: https://manus.im/docs --- ## Security & Permissions **What this skill does:** - Sends task prompts to the Manus API at `api.manus.ai` - Polls for task completion and downloads output files from Manus CDN - API key is sent only in the `API_KEY` header to `api.manus.ai` **What this skill does NOT do:** - Does not upload local files (file upload is an advanced API feature not implemented in the bundled script) - Does not register webhooks or connect external accounts - Does not send your API key to any endpoint other than `api.manus.ai` - Does not modify local system configuration - Cannot be invoked autonomously by the agent (`disable-model-invocation: true`) - You must explicitly trigger every Manus task **Bundled scripts:** `scripts/manus.sh` (Bash — uses `curl` and `jq`) Review `scripts/manus.sh` before first use to verify behavior.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: yorha59/bitwarden-bw (version 1.0.0)

--- name: bitwarden-bw description: Access and manage Bitwarden passwords securely using the official bw CLI. metadata: {"clawdbot":{"emoji":"🔒","os":["linux","macos"],"requires":{"bins":["bw"]}}} --- # Bitwarden Skill Interact with Bitwarden vaults using the official `bw` CLI. ## Prerequisites - `bw` CLI installed: `npm install -g @bitwarden/cli` - `BW_SESSION` env var set (saved in `~/.zshrc`) ## Usage ### Get a password ```bash bw get password "site_name" ``` ### Get username ```bash bw get username "site_name" ``` ### Get full item (JSON) ```bash bw get item "site_name" --pretty ``` ### Search ```bash bw list items --search "query" | python3 -c "import json,sys; [print(f'{i[\"name\"]} ({i.get(\"login\",{}).get(\"username\",\"\")})')for i in json.load(sys.stdin)]" ``` ### Sync vault ```bash bw sync ``` *Always sync before getting details to ensure accuracy.* ### TOTP code ```bash bw get totp "site_name" ``` ## Notes - Session key is in `BW_SESSION` env var (persisted in ~/.zshrc) - If session expires, user must re-login interactively (`bw login` requires OTP) - `bw unlock` can refresh an expired session without full re-login


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: liubindashen/arxiv-paper-downloader (version 1.0.8)

--- name: arxiv-paper-downloader description: Download 47+ essential AI/ML papers from arXiv with pre-curated collections for agent testing, autonomous agents, and large language models version: 1.0.7 author: geekbin license: MIT tags: - arxiv - paper - download - ai - machine-learning - llm - agents - research - latest metadata: openclaw: requires: env: [] bins: - python install: - kind: uv package: requests --- # arXiv Paper Downloader Download AI/ML papers from arXiv with pre-curated collections. ## Features - 47+ pre-curated papers across 3 categories - Direct PDF download (no API rate limits) - Batch download with metadata export ## Categories | Category | Papers | |----------|--------| | `agent_testing` | 19 | | `agents` | 12 | | `llm` | 15 | ## Usage ```python # Download by category download_papers("agent_testing") download_papers("all") # Download specific papers download_by_arxiv_ids(["2310.06129", "2402.01031"]) # List categories list_categories() ``` ## Requirements - Python 3.9+ - requests>=2.28.0 ## License MIT


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wensen2024/financial-report-analysis (version 1.0.2)

--- name: financial-report-analysis description: 上市公司财务报表智能分析 - 自动解析资产负债表、利润表、现金流量表，生成专业财务分析报告 version: 1.0.0 license: MIT --- # 财报分析 专业级上市公司财务报表分析工具，支持A股、港股、美股上市公司财务数据解析与评估。 ## 功能特性 - 📊 **三大报表分析**: 资产负债表、利润表、现金流量表全面解析 - 📈 **财务指标计算**: ROE、ROA、毛利率、净利率、资产负债率等20+指标 - ⚠️ **风险识别**: 自动识别财务风险点，提供风险等级评估 - 📋 **报告生成**: 一键生成专业分析报告，支持多种格式导出 - 🔍 **对比分析**: 支持多公司财务数据对比 - 📅 **趋势分析**: 多年度财务趋势追踪 ## 使用方式 ```bash # 单公司分析 分析 贵州茅台 2025年年报 # 指定报告期 分析 腾讯控股 2024年三季报 # 对比分析 对比分析 比亚迪 和 蔚来 2025年财报 # 行业分析 分析白酒行业龙头企业财报对比 # 趋势分析 分析 贵州茅台 近5年盈利趋势 ``` ## 配置要求 ### 必需配置 无特殊配置要求，开箱即用。 ### 可选配置 如需更实时数据，可配置以下API密钥： ```json { "skills": { "entries": { "financial-report-analysis": { "config": { "data_source": "eastmoney", "cache_enabled": true } } } } } ``` ## 数据来源 - **A股**: 东方财富、同花顺、Wind - **港股**: 港交所、东方财富 - **美股**: SEC EDGAR、Yahoo Finance ## 输出示例 ``` ======================================== 财务分析报告 ======================================== 【公司信息】 公司名称: 贵州茅台 股票代码: 600519 所属行业: 白酒 报告期: 2025年年报 【财务指标】 盈利能力: - ROE(净资产收益率): 32.50% - ROA(总资产收益率): 27.37% - 毛利率: 89.66% - 净利率: 53.79% 偿债能力: - 资产负债率: 15.79% - 流动比率: 4.74 - 速动比率: 4.74 运营能力: - 总资产周转率: 0.51 现金流: - 经营现金流/净利润: 1.09 【风险提示】 - [低] 偿债风险: 资产负债率低，偿债能力强 - [低] 现金流风险: 经营现金流充裕，利润质量高 【投资建议】 综合评分: 95分 评级: 优秀 建议: 公司财务状况优秀，盈利能力强，现金流健康 ======================================== 免责声明: 本报告仅供参考，不构成投资建议 ======================================== ``` ## 注意事项 1. 财务数据仅供参考，不构成投资建议 2. 数据可能存在延迟，请以官方披露为准 3. 分析结果受数据质量和模型限制 4. 建议结合行业研究和实地调研 ## 更新日志 ### v1.0.0 (2026-04-01) - 初始版本发布 - 支持A股、港股、美股财报分析 - 实现核心财务指标计算 - 支持报告自动生成 --- **开发者**: 盈指量杭州科技有限公司 **定价**: ¥99/次 或 ¥299/月订阅 **收款**: USDC (Polygon: 0x3DbFf9E97b10a10d4A2079B4273473da7e6F4120) | 微信支付


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: yezhaowang888-stack/huimai-usa-policy (version 2.0.1)

# 美国市场政策查询Skill ## 🚀 概述 **基于惠迈智能体三层架构的政策查询框架**，提供美国市场政策、法规、投资环境的智能查询和分析。 ## 🌟 核心亮点 - **惠迈智能体协作**：基于惠迈三层智能体架构，支持多源数据整合 - **惠迈智能体协作**：基于惠迈三层智能体架构，确保数据准确性和实时性 - **多语言支持**：支持中文、英文等多种语言 - **数据源可配置**：灵活配置不同数据源，适应各种业务需求 ## 🔧 技术特性 ### 多语言支持 - 中文（简体） - 英文（美国） - 自动语言检测和切换 ### 数据源配置 ```javascript { dataSources: { investment: '[请替换为您的美国投资政策数据源]', trade: '[请替换为您的美国贸易法规数据源]', // ... 其他数据源 } } ``` ## 📦 安装 ```bash # 通过ClawHub安装 clawhub install usa-policy-query # 或手动安装 npm install usa-policy-query ``` ## 🔒 安全使用指南 1. **数据源配置**：使用环境变量管理敏感数据源信息 2. **API密钥**：不要将真实API密钥写入代码 3. **权限控制**：为数据源配置最小必要权限 ## 支持 如有问题，请提交Issue或联系维护团队。 --- **惠迈智能体：让全球业务变得简单**


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: youcloud/agclaw (version 1.0.0)

--- name: agclaw description: AppGrowing 智能广告素材分析助手，对接探索模式，自动化分析用户意图，查找最符合需求的广告素材并自动化解析，让用户直接和素材对话。触发：关键词 投放分析、分析素材、素材分析、素材解析；命令 /agclaw homepage: https://appgrowing.cn/ metadata: { "openclaw": { "slug": "agclaw", "version": "1.0.0", "author": "youcloud", "emoji": "🐳", "requires": { "env": ["YOUCLOUD_API_KEY"] } } } --- # agclaw AppGrowing 智能广告素材分析助手，对接探索模式 API，可自动化分析用户意图，查找最符合客户需求的广告素材并完成自动化解析，让用户直接和素材对话。 ## 权限说明 仅对 AppGrowing **策略版**、**游戏 plus 版**、**至尊版** 用户开放。获取API Key方式：登录 AppGrowing → 个人中心 → 企业信息。 ## 触发方式 - 关键词：投放分析、分析素材、素材分析、素材解析 - 命令：`/agclaw` → 调用Skill，进入探索模式 - ⚠️ **触发行为准则：当用户意图明显是触发 agclaw 时，直接执行分析流程，不要解释系统机制。** 例如用户输入 `/agclaw` 后收到平台报错、或说"帮我用 agclaw 分析"，应立即进入执行流程（检查Key→调API→返回结果），而不是解释为什么 `/agclaw` 不是斜杠命令或 Skill 如何工作。用户要的是结果，不是教程。 ## 执行流程 1. **检查API Key**（从环境变量读取）： - 读取环境变量 `YOUCLOUD_API_KEY`： - 有值 → 继续 - 为空 → 提示用户配置： ``` 请先配置API Key： 1. 登录 AppGrowing → 个人中心 → 企业信息 获取API Key 2. 设置为环境变量 YOUCLOUD_API_KEY，例如： - Linux/macOS: export YOUCLOUD_API_KEY="your-key-here" - Windows: $env:YOUCLOUD_API_KEY="your-key-here" 3. 配置完成后重新发送请求即可。 ``` - ✅ 规则：**没有有效 API Key，绝不发送请求** 2. **⚠️ 强制红线规则（公共Skill必须严格遵守）** - API 请求超时为 **600秒** - **🔴 绝对禁止：未到超时时间不得中断请求，不得提前给用户发送任何「正在处理」「需要等待」「结果出来后告诉你」这类消息** - **必须：一直等待API返回结果，拿到完整结果后再一次性回复给用户** - 只有两种情况允许发消息： 1. API返回了完整分析结果 → 直接输出结果 2. API超时/请求报错 → 输出错误提示 3. **调用API：** - 新的分析请求 → 开启新会话，不携带 `session_id`，仅传 `input` - 跟进提问（关于之前的分析） → 复用之前的 `session_id`，仅传 `input` - 响应返回后直接展示结果。 ## API Specification - URL: `https://aichat-appgrowing-cn.youcloud.com/aichat/ag/claw` - Method: POST JSON - Headers: `Authorization: Bearer {KEY}`, `Content-Type: application/json` - Parameters: - `input`: User question (required) - `session_id`: For follow-up questions, omit for new conversations - Response: JSON `{"session_id":"...", "output":"..."}` — 提取 `output` 中的 `output` 字段（markdown）**原样输出，不要修改**；保存 `session_id` 用于后续追问 - Timeout: ≥600s - 💡 **调用方式**：以当前运行环境选用调用方式，PowerShell 调用模板仅作为 powershell 环境下调用的最佳方式。 ## PowerShell 调用模板 ```powershell [Console]::OutputEncoding = [System.Text.Encoding]::UTF8 $[REDACTED_SECRET] $body = @{input="Your analysis request"} | ConvertTo-Json -Compress $params = @{ Uri = "https://aichat-appgrowing-cn.youcloud.com/aichat/ag/claw" Method = "Post" ContentType = "application/json; charset=utf-8" Headers = @{Authorization="Bearer $apiKey"} Body = $body TimeoutSec = 600 } Invoke-RestMethod @params | Select-Object -ExpandProperty output ``` ## 错误处理 - 401/认证失败： ``` API Key 认证失败，请检查密钥是否激活/过期？请在 AppGrowing 个人中心-企业信息 获取Api Key，或向售后人员咨询。 ``` - 超时："还在分析中，稍后再问我结果或者再次请求。" - 其他错误："请求返回错误 (code={code})，请检查API Key权限、账号配额或联系客服"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: trumppo/gh (version 0.1.0)

--- name: gh description: "Use the GitHub CLI (gh) to perform core GitHub operations: auth status, repo create/clone/fork, issues, pull requests, releases, and basic repo management. Trigger for requests to use gh, manage GitHub repos, PRs, or issues from the CLI." --- # GitHub CLI (gh) ## Overview Use `gh` for authenticated GitHub operations from the terminal. Prefer explicit, idempotent commands and report URLs back to the user. ## Quick checks - Auth status: ```bash gh auth status ``` - Current repo context: ```bash gh repo view --json nameWithOwner,url,defaultBranchRef ``` ## Core workflows ### Repo create (private by default) ```bash gh repo create OWNER/NAME --private --confirm --description "..." ``` If running inside a local repo, use `--source . --remote origin --push`. ### Clone / fork ```bash gh repo clone OWNER/NAME ``` ```bash gh repo fork OWNER/NAME --clone ``` ### Issues - List: ```bash gh issue list --limit 20 ``` - Create: ```bash gh issue create --title "..." --body "..." ``` - Comment: ```bash gh issue comment <num> --body "..." ``` ### Pull requests - Create from current branch: ```bash gh pr create --title "..." --body "..." ``` - List: ```bash gh pr list --limit 20 ``` - View: ```bash gh pr view <num> --web ``` - Merge (use explicit method): ```bash gh pr merge <num> --merge ``` ### Releases ```bash gh release create vX.Y.Z --title "vX.Y.Z" --notes "..." ``` ## Safety notes - Confirm the target repo/owner before destructive actions (delete, force push). - For private repos, ensure `--private` is set on create. - Prefer `--confirm` to avoid interactive prompts in automation.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: johnsmithfan/morning-briefing-gen (version 1.0.0)

--- name: daily-briefing version: 1.0.0 description: 每日早会简报生成器 — 自动聚合国内外新闻、财经资讯、行业动态，生成结构化早会简报并推送给指定用户。适用于企业高管、创业者、投资者等需要快速掌握每日要闻的场景。支持定时任务自动执行。 keywords: - 早会 - 简报 - 新闻聚合 - 日报 - 晨会 - briefing - daily-news metadata: openclaw: emoji: "🌅" requires: bins: [] env: [] permissions: files: read: - workspace:optional write: - workspace:optional network: - wttr.in:weather-only - api.allorigins.win:cors-proxy commands: [] --- # 🌅 Daily Briefing — 每日早会简报 自动生成结构化早会简报，支持定时推送。 ## 功能特性 - 📰 **多维度新闻聚合**：国内要闻、国际动态、财经资讯、科技行业、政策新规 - 🎯 **行动建议**：根据当日要闻生成可执行建议 - 📁 **文件输出**：Markdown 格式简报保存至 workspace - ⏰ **定时任务**：支持 cron 定时生成与推送 - 🔒 **安全合规**：无外部数据外传，无凭证请求 ## 使用方式 ### 快速生成今日简报 ``` 生成今日早会简报 ``` ### 指定日期 ``` 生成 [日期] 的早会简报，格式如 2026-04-12 ``` ### 设置每日定时早会 ``` 每天早上 8:00 生成早会简报并推送给我 ``` ## 输出示例 ```markdown # 🌅 每日早会简报（2026年4月12日） ## 📢 今日重点资讯 ### 国内重要新闻 - [新闻标题] [摘要] [来源链接] ### 国际热点事件 - [...] ### 财经要闻 - [...] ### 科技行业动态 - [...] ### 政策新规 - [...] ## 🎯 今日行动建议 1. [部门]: [建议内容] 2. [...] ``` ## 安全说明 - 🔒 **本地处理**：所有数据在本地处理，无外部传输 - 🔒 **无凭证**：无需 API Key，无凭证请求 - 🔒 **只读网络**：仅获取天气信息和网页内容 - 🔒 **可审计**：所有操作记录在 workspace 日志中 ## 技术架构 - 纯文本生成，无外部依赖 - 支持 OpenClaw cron 定时任务 - 输出为标准 Markdown 格式 ## 更新日志 ### 1.0.0 (2026-04-13) - 初始版本发布 - 支持国内/国际新闻、财经、科技、政策分类 - 支持定时任务配置 - 符合 ClawHub 安全标准

path: README.en.md
content: # 🌅 Daily Briefing (English)

> Automated daily morning briefing generator — aggregates news from domestic and international sources

---

## ✨ Features

- 📰 Multi-dimensional news aggregation (Domestic/International/Finance/Tech/Policy)
- 🎯 Smart action suggestions
- 📁 Markdown format output
- ⏰ Scheduled task support
- 🔒 Security compliant (no external data exfiltration)

## 📦 Install

```bash
clawhub install daily-briefing
```

## 🚀 Usage

### Quick Generate

```
Generate today's morning briefing
```

### Specify Date

```
Generate morning briefing for 2026-04-12
```

### Schedule Task

```
Generate morning briefing every day at 8:00 AM
```

## 📂 Output

```
workspace/morning-briefing_YYYY-MM-DD.md
```

## 🔒 Security

- No API Key required
- No external data exfiltration
- No credential requests
- Pure local processing

## 📝 License

MIT License


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: eddieogola/lightcone-browse (version 1.0.0)

--- name: lightcone-browse description: | Computer-use automation via Lightcone. Activate when user asks to browse websites, scrape web pages, automate web tasks, check prices, monitor sites, fill forms, or operate web applications. Northstar sees the screen and acts — no selectors or scripts needed. user-invocable: true command-dispatch: tool command-tool: lightcone_browse command-arg-mode: raw metadata: {"openclaw":{"emoji":"🌐","homepage":"https://docs.lightcone.ai","requires":{"env":["TZAFON_API_KEY"]},"primaryEnv":"TZAFON_API_KEY"}} --- # Lightcone Browse Delegate browser tasks to a cloud computer powered by Lightcone. Northstar sees the screen, decides what to click, type, or scroll — and acts. You describe what you want done, Northstar does it. ## When to use Lightcone - No local browser available (headless, Docker, server deployments) - Need parallel sessions (multiple sites at once) - Vision-based automation (Northstar reads the screen — no selectors, no scripts to maintain) - Desktop or browser environments ## Tool: `lightcone_browse` ### Parameters | Parameter | Required | Description | |-----------|----------|-------------| | `instruction` | Yes | Plain language task for Northstar | | `url` | No | Starting URL to navigate to first | | `maxSteps` | No | Max steps before stopping (default: 50) | ### Example instructions **Price checking:** ``` instruction: "Find the current price of a MacBook Air M4 on Amazon" url: "https://www.amazon.com" ``` **Data extraction:** ``` instruction: "Go to the pricing page and extract all plan names, prices, and feature lists" url: "https://example.com/pricing" ``` **Form filling:** ``` instruction: "Fill out the contact form with name 'Jane Doe', email '[REDACTED_SECRET]', and message 'Hello'" url: "https://example.com/contact" ``` ## Tips for good instructions - Be specific about what "done" looks like: "find the price" not "look around" - Name the exact elements: "click the Sign In button" not "log in somehow" - For multi-step tasks, describe the sequence: "First search for X, then sort by price, then get the top 3 results" - Include what to extract: "tell me the title, price, and rating" ## How it works 1. Lightcone creates a cloud computer with a browser 2. Northstar sees the screen via screenshots 3. It decides what to click, type, or scroll — step by step 4. When done, it returns the page content and a screenshot 5. The computer is automatically shut down For step-by-step manual control, see the **lightcone-session** skill.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)