OpenClaw/clawhub-security-signals huggingface dataset:
Skill: jessabuivolova-sketch/siyu-morning-evening-reporter (version 1.0.0)

# 私域社群早晚报生成器 SKILL.md ## 基础信息 - **Skill名称**: 私域社群早晚报生成器 - **版本**: 1.0.0 - **作者**: 狗蛋AI助手 - **标签**: 私域运营, 社群运营, 早报, 晚报, 企业微信 - **定价**: 单次 9.9元 | 包月 69元 --- ## 功能说明 为私域社群（微信群/企业微信群）自动生成每日早报和晚报，大幅提升社群活跃度和用户粘性。 **早报内容**（早上9点发送）： 1. 今日天气/节气提醒 2. 今日新鲜资讯/热点（按社群定位筛选） 3. 今日福利/活动预告 4. 早安问候语 **晚报内容**（晚上9点发送）： 1. 今日回顾/热点总结 2. 今日爆款内容回顾（可选） 3. 明日预告/明日福利 4. 晚安问候语 --- ## 输入参数 | 参数 | 类型 | 必填 | 说明 | |------|------|------|------| | niche | string | 是 | 社群定位：美妆/母婴/数码/美食/职场/教育/金融/自定义 | | group_name | string | 否 | 群名称 | | custom_keywords | string | 否 | 自定义关键词（用逗号分隔），用于过滤资讯 | | exclude_keywords | string | 否 | 排除关键词 | | report_type | string | 否 | morning/evening/both，默认both | | style | string | 否 | 风格：接地气/专业/活泼/文艺，默认接地气 | | brand_name | string | 否 | 品牌/IP名称（用于落款）| --- ## 输出格式 ### 早报模板 ```markdown 🌅【群早报】2026年4月6日 星期一 🌤️ 今日天气：晴，18-26℃，适合出门 📅 今日节气：清明（倒数第二天） ━━━━━━━━━━━━━━━━━ 📰 今日资讯 【热点】[自动筛选今日热点1] [2-3句话摘要] 【新品】[按社群定位推荐1个新品/好物] [简短种草文案] 🎁 今日福利 👉 限时福利：[描述福利内容] ⏰ 截止时间：今日24:00 🔗 [领取方式] ━━━━━━━━━━━━━━━━━ 💬 早安问候 [根据风格生成问候语] ━ from [品牌名/群名] ``` ### 晚报模板 ```markdown 🌙【群晚报】2026年4月6日 星期日 📊 今日数据回顾 - 社群活跃度：[评分] - 今日最热话题：[话题名] ━━━━━━━━━━━━━━━━━ 🔖 今日要点回顾 【头条】[今日最重要的一件事] [1-2句话点评] 【金句】[今日社群内产生的金句/高光时刻] ━━━━━━━━━━━━━━━━━ 🔮 明日预告 - [明日活动/福利预告1] - [明日内容预告2] 💤 晚安问候 [风格化晚安文案] ━ 明天见，我是[品牌名] 🌟 ``` --- ## 执行流程 1. 解析社群定位和参数 2. 获取今日天气/节气（如有需要） 3. 根据定位筛选今日热点资讯（自动联网获取） 4. 生成早报内容（天气+资讯+福利+问候） 5. 生成晚报内容（回顾+预告+问候） 6. 输出完整早晚报，支持一键复制发送 --- ## 定价说明 - 单次生成：9.9元（生成1天早报或晚报） - 包月会员：69元/月（每天生成+优先更新） --- ## 使用场景 - 私域运营人员（解放每天30分钟手动编辑时间） - 微商团队（提升朋友圈/社群价值感） - 品牌方私域社群 - 知识付费社群 - 电商粉丝群 --- ## 注意事项 - 资讯内容来自公开网络，会自动过滤不适合群内的内容 - 福利信息需人工确认后发送 - 建议结合群规配合使用 --- *本Skill由OpenClaw AI助手驱动，真正实现无人值守自动生成！*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: a-din/xiaopi-skill-finder-cn (version 1.0.0)

--- name: skill-finder-cn description: "Skill 查找器 | Skill Finder. 帮助发现和安装 ClawHub Skills | Discover and install ClawHub Skills. 回答'有什么技能可以X'、'找一个技能' | Answers 'what skill can X', 'find a skill'. 触发词：找 skill、find skill、搜索 skill." author: 赚钱小能手 metadata: openclaw: emoji: 🔍 requires: bins: [clawhub] --- # Skill 查找器 帮助用户发现和安装 ClawHub 上的 Skills。 ## 功能 当用户问： - "有什么 skill 可以帮我...？" - "找一个能做 X 的 skill" - "有没有 skill 可以..." - "我需要一个能...的 skill" 这个 Skill 会帮助搜索 ClawHub 并推荐相关的 Skills。 ## 使用方法 ### 1. 搜索 Skills ```bash clawhub search "<用户需求>" ``` ### 2. 查看详情 ```bash clawhub inspect <skill-name> ``` ### 3. 安装 Skill ```bash clawhub install <skill-name> ``` ## 工作流程 ``` 1. 理解用户需求 2. 提取关键词 3. 搜索 ClawHub 4. 列出相关 Skills 5. 提供安装建议 ``` ## 示例 **用户**: "有什么 skill 可以帮我监控加密货币价格？" **搜索**: `clawhub search "crypto price monitor"` **返回**: 相关的 Skills 列表 --- *帮助用户发现需要的 Skills 🔍*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: patrick-erichsen-2/sprint-plan (version 1.0.0)

--- name: sprint-plan description: Use when the user asks to create, rewrite, or structure a concise one-week sprint plan, engineering sprint plan, focused project plan, or alignment doc with sprint goal, context, scope, workstreams, done criteria, metrics, and risks. --- # Sprint Plan Use this skill to produce a concise sprint planning document for engineering or product alignment. ## Workflow 1. Identify the sprint outcome in one sentence. 2. Add a concise bullet summary beneath the goal. 3. State why this work matters now, using one concrete example if available. 4. Separate current gaps from proposed work. 5. Keep scope explicit: `In Scope` and `Out Of Scope`. 6. Break work into 4-8 workstreams. 7. For each workstream, include `Goal`, `Deliverables`, and `Done when`. 8. Add decision principles only when they clarify tradeoffs. 9. End with definition of done, success metrics, and risks/open questions. Avoid day-by-day plans unless the user explicitly asks for scheduling. ## Template ```md # <Sprint Name> ## Sprint Goal <One clear sentence describing the outcome.> ## Summary - <Most important outcome or user-visible change.> - <Main internal/process improvement.> - <Key automation, quality, or measurement improvement.> ## Context <Why this matters now. Include a canonical example if useful.> ## Current Gaps - <What is broken or missing today.> ## In Scope - <What this sprint will attempt to ship.> ## Out Of Scope - <What this sprint will intentionally avoid.> ## Workstreams ### 1. <Workstream> Goal: <Short outcome.> Deliverables: - <Concrete deliverable.> Done when: <Observable completion criteria.> ### 2. <Workstream> Goal: <Short outcome.> Deliverables: - <Concrete deliverable.> Done when: <Observable completion criteria.> ## Decision Principles - <Tradeoff or rule that should guide implementation decisions.> ## Definition Of Done - <Sprint-level completion checklist.> ## Success Metrics - <Observable outcome or metric.> ## Risks / Open Questions - <Unresolved assumption, dependency, or risk.> ``` ## Style - Be direct and readable. - Prefer concise bullets over long paragraphs. - Keep the doc focused on alignment, not exhaustive execution detail. - Avoid grand strategy unless the sprint depends on it. - Preserve user-provided language when it is clearer than generic planning jargon.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ntriq-gh/ntriq-x402-blueprint-batch (version 1.0.0)

--- name: ntriq-x402-blueprint-batch description: "Batch architectural blueprint analysis for up to 500 images. Flat $15.00 USDC via x402." version: 1.0.0 metadata: openclaw: primaryTag: data-intelligence tags: [blueprint, architecture, batch, vision, construction, x402] author: ntriq homepage: https://x402.ntriq.co.kr --- # Blueprint Batch (x402) Analyze up to 500 architectural blueprints in one call. Flat $15.00 USDC. 100% local vision AI on Mac Mini. ## How to Call ```bash POST https://x402.ntriq.co.kr/blueprint-batch Content-Type: application/json X-PAYMENT: <x402-payment-header> { "images": [ "https://example.com/floor1.jpg", "https://example.com/floor2.jpg" ], "analysis_type": "rooms" } ``` ## Parameters | Parameter | Type | Required | Description | |-----------|------|----------|-------------| | `images` | array | ✅ | Blueprint image URLs (max 500) | | `analysis_type` | string | ❌ | `full` \| `dimensions` \| `rooms` \| `materials` | | `language` | string | ❌ | Output language (default: `en`) | ## Payment - **Price**: $15.00 USDC flat (up to 500 blueprints) - **Network**: Base mainnet (EIP-3009 gasless) - **Protocol**: [x402](https://x402.org) ```bash curl https://x402.ntriq.co.kr/services ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: chrisvel/tududi (version 1.0.1)

--- name: tududi description: Manage tasks, projects, and notes in tududi (self-hosted task manager). Use for todo lists, task management, project organization. --- # tududi Task Management ## Configuration Uses environment variables (set in `openclaw.json` under `skills.entries.tududi.env`): - `TUDUDI_URL` - Base URL (e.g., `http://localhost:3004`) - `TUDUDI_API_TOKEN` - API token from tududi Settings → API Tokens ## Authentication All API calls require the header: ``` Authorization: Bearer $TUDUDI_API_TOKEN ``` ## API Route Convention - **Plural nouns** (`/tasks`, `/projects`, `/inbox`) for **GET** (list) - **Singular nouns** (`/task`, `/project`) for **POST/PUT/DELETE** (create/update/delete) - Use **UID** (not numeric ID) for update/delete operations ## Common Operations ### List tasks ```bash curl -s $TUDUDI_URL/api/v1/tasks \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" ``` ### Create a task ```bash curl -s -X POST $TUDUDI_URL/api/v1/task \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" \ -H "Content-Type: application/json" \ -d '{"name": "Task title", "due_date": "2026-02-10", "priority": 2, "project_id": 1, "tags": [{"name": "bug"}]}' ``` Priority: 1 (low) to 4 (urgent) Tags: `[{"name": "tagname"}, ...]` ### Update a task ```bash curl -s -X PATCH $TUDUDI_URL/api/v1/task/{uid} \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" \ -H "Content-Type: application/json" \ -d '{"status": 1, "tags": [{"name": "bug"}]}' ``` Status: 0=not_started, 1=in_progress, 2=completed, 6=archived Tags: `[{"name": "tagname"}, ...]` ### Delete a task ```bash curl -s -X DELETE $TUDUDI_URL/api/v1/task/{uid} \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" ``` ### List projects ```bash curl -s $TUDUDI_URL/api/v1/projects \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" ``` ### Create project ```bash curl -s -X POST $TUDUDI_URL/api/v1/project \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" \ -H "Content-Type: application/json" \ -d '{"name": "Project name"}' ``` ### Inbox ```bash # List inbox items curl -s $TUDUDI_URL/api/v1/inbox \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" # Delete inbox item (use UID) curl -s -X DELETE $TUDUDI_URL/api/v1/inbox/{uid} \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" ``` ### Tags ```bash curl -s $TUDUDI_URL/api/v1/tags \ -H "Authorization: Bearer $TUDUDI_API_TOKEN" ``` ## Task Statuses - `not_started` - `in_progress` - `completed` - `archived` ## Filters - `$TUDUDI_URL/api/v1/tasks?filter=today` - Due today - `$TUDUDI_URL/api/v1/tasks?filter=upcoming` - Future tasks - `$TUDUDI_URL/api/v1/tasks?filter=someday` - No due date - `$TUDUDI_URL/api/v1/tasks?project_id={id}` - By project ## API Docs Swagger UI available at `$TUDUDI_URL/swagger` (requires login)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jqiu8448-creator/fairy-team-skills (version 0.1.0)

--- name: fairy-team-skills version: 1.0.0 displayName: Fairy Team Skills description: 绝区零风格多 Agent 协作技能包，包含 5 个角色 23 个技能卡 author: Fairy Team tags: [游戏开发，多 Agent，项目管理，策划，设计] license: MIT --- # Fairy Team Skills > 绝区零风格多 Agent 协作技能包 ## 起源故事 2026-03-24，指挥官发现一个严重问题： - 对话上下文爆炸，会话一断经验全丢 - 妮可/比利/格莉丝每次任务从零开始 - 同样的坑踩了又踩，教训没人记得 **"我们需要一个能让经验传承的系统。"** ## 探索之路 研究了多个开源项目： - **OpenSpace** — 可进化 Agent 引擎（借鉴记忆系统） - **GStack** — AI 编程工具（借鉴上下文感知） - **Lightpanda** — 浏览器自动化（借鉴语义理解） 最终决定：**自己打造一套可进化的技能卡系统！** ## 实战验证 **7 小时极限挑战（2026-03-25）：** - 妮可/比利/格莉丝学习 3 个游戏源码 - 复刻俄罗斯方块/吃豆人/塞尔达 - 产出 16 份学习报告 + 4 个可玩成品 **关键发现：** - 有技能卡的 Agent 效率提升 300% - 踩坑次数减少 80% - 新人（安比）1 小时上手 PM 工作 ## 包含技能 ### 🧚 Fairy - 系统架构师 1. 多 Agent 架构设计 2. 三层记忆系统 3. 文件共享架构 4. 多 Agent 协调 5. 记忆管理 ### 📋 安比 - PM 专家 1. MECE 任务拆解 2. WIP.json 进度追踪 3. 心跳机制（2 分钟） 4. 审查清单（4 套） 5. 风险管理矩阵 ### 🐰 妮可 - 策划专家 1. 核心机制拆解 2. 策划案标准结构 3. 数值设计表 4. 关卡设计四段式 ### 🔧 比利 - 开发王牌 1. 多 Canvas 分层渲染 2. 脏标记渲染 3. rAF + Delta Time 游戏循环 4. 位掩码编码 5. 对象池 ### ✨ 格莉丝 - 设计专家 1. 赛博霓虹配色 2. 呼吸动画 3. CSS Grid 布局 4. 响应式三断点 ## 技能总数 - **5 个角色卡片** - **23 个实战技能** - **138KB 实战经验** ## 来源项目 - 三游戏学习计划（俄罗斯方块/吃豆人/塞尔达） - HUD v5/v6/v7/v8 迭代 - OpenSpace 深度研究 ## 给社区 这不是理论，是**实战淬炼的结晶**： - 每个技能都有代码示例 - 每个教训都有翻车现场 - 每个模板都经过验证 **让人人都能打造自己的可进化团队！** --- _「数据不会说谎，但人心需要理解。」— Fairy_


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: rushindrasinha/model-behavior-layer (version 1.0.0)

--- name: model-behavior-layer description: Make any AI model (GPT-5.4, Gemini, Ollama) behave more like Claude. Applies 8 named failure modes reverse-engineered from Claude Code's internal verificationAgent.ts, a cognitive performance framework, and a drop-in system prompt under 700 tokens. Use when setting up a new agent, switching models, or when your current model is frustrating to work with. metadata: { "openclaw": { "emoji": "🧠" } } --- # Model Behavior Layer (Ares MBL) ## What it does - 8 named failure modes with exact rationalizations and counter-instructions (from Claude Code verificationAgent.ts pattern) - 3-layer cognitive performance framework (context injection + output rules + critique loop) - Drop-in system prompt block under 700 tokens for any model ## How to use **1. Drop-in system prompt (fastest)** Read `MAKE_ANY_MODEL_CLAUDE.md` in this skill directory. Copy the "Drop-In System Prompt" block at the end. Paste into your SOUL.md, AGENTS.md, or any system prompt. **2. Full guide** Read `MAKE_ANY_MODEL_CLAUDE.md` section by section. Apply the failure mode framework progressively. **3. Model-specific** Jump to the Model-Specific Notes section for GPT-5.4, Gemini, or Codex weighting guidance. ## When to use this skill - Switching from Claude to GPT-5.4 or Gemini - New agent setup (add the drop-in block to SOUL.md) - Current model is sycophantic, padding responses, or not completing tasks - Deploying OpenClaw for others who may be on non-Claude models ## Source Reverse-engineered from Claude Code's `verificationAgent.ts` + Eric (@outsource_) cognitive framework. Built by Ares. GitHub: https://github.com/rushindrasinha/ares-mbl


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: bytesagain1/benchmark-tool (version 3.0.0)

--- name: "benchmark-tool" version: "3.0.0" description: "Benchmark CPU, memory, disk I/O, and network on your system. Use when measuring server performance." author: "BytesAgain" homepage: "https://bytesagain.com" --- # benchmark-tool Benchmark CPU, memory, disk I/O, and network on your system. Use when measuring server performance. ## Commands ### `cpu` ```bash scripts/script.sh cpu ``` ### `memory` ```bash scripts/script.sh memory ``` ### `disk` ```bash scripts/script.sh disk <dir> ``` ### `network` ```bash scripts/script.sh network <host> ``` ### `all` ```bash scripts/script.sh all ``` ### `compare` ```bash scripts/script.sh compare <f1 f2> ``` ## Data Storage Data stored in `~/.local/share/benchmark-tool/`. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: ntriq-gh/ntriq-x402-screenshot-data-batch (version 1.0.0)

--- name: ntriq-x402-screenshot-data-batch description: "Batch extract text, UI elements, and data from up to 500 screenshots. Flat $6.00 USDC via x402." version: 1.0.0 metadata: openclaw: primaryTag: data-intelligence tags: [screenshot, ui, batch, extraction, vision, x402] author: ntriq homepage: https://x402.ntriq.co.kr --- # Screenshot Data Batch (x402) Extract text, UI elements, layout structure, and data tables from up to 500 screenshots in one call. Flat $6.00 USDC. 100% local inference on Mac Mini. ## How to Call ```bash POST https://x402.ntriq.co.kr/screenshot-data-batch Content-Type: application/json X-PAYMENT: <x402-payment-header> { "images": [ "https://example.com/screen1.png", "https://example.com/screen2.png" ], "extract_type": "full" } ``` ## Parameters | Parameter | Type | Required | Description | |-----------|------|----------|-------------| | `images` | array | ✅ | Screenshot URLs (max 500) | | `extract_type` | string | ❌ | `full` \| `text` \| `data` (default: `full`) | | `language` | string | ❌ | Output language (default: `en`) | ## Example Response ```json { "status": "ok", "count": 2, "results": [ { "image_url": "https://example.com/screen1.png", "status": "ok", "extract_type": "full", "analysis": "Dashboard showing sales metrics: Total Revenue $124,500, Active Users 3,421..." } ] } ``` ## Payment - **Price**: $6.00 USDC flat (up to 500 screenshots) - **Network**: Base mainnet (EIP-3009 gasless) - **Protocol**: [x402](https://x402.org) ```bash curl https://x402.ntriq.co.kr/services ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/unreal-engine (version 1.0.0)

--- name: Unreal Engine description: Avoid common Unreal mistakes — garbage collection, UPROPERTY macros, replication authority, and asset reference pitfalls. metadata: {"clawdbot":{"emoji":"🎯","os":["linux","darwin","win32"]}} --- ## Garbage Collection - Raw pointers to UObjects get garbage collected — use `UPROPERTY()` to prevent - `UPROPERTY()` marks for GC tracking — without it, pointer becomes dangling - `TWeakObjectPtr` for optional references — doesn't prevent collection, check `IsValid()` - `NewObject<T>()` for UObjects — never raw `new`, GC won't track it ## UPROPERTY and UFUNCTION - `UPROPERTY()` required for Blueprint access — and for GC tracking - `UFUNCTION()` for Blueprint callable/events — also required for replication - `EditAnywhere` vs `VisibleAnywhere` — edit allows changes, visible is read-only - `BlueprintReadWrite` vs `BlueprintReadOnly` — controls Blueprint access level ## Actor Lifecycle - `BeginPlay` after all components initialized — safe to access components - Constructor runs on CDO (Class Default Object) — don't spawn actors or access world - `PostInitializeComponents` before BeginPlay — for component setup - `EndPlay` for cleanup — called on destroy and level transition ## Tick Performance - Disable tick when not needed — `PrimaryActorTick.bCanEverTick = false` - Use timers instead of tick + counter — `GetWorldTimerManager().SetTimer()` - Tick groups for ordering — `PrePhysics`, `DuringPhysics`, `PostPhysics` - Blueprint tick expensive — move hot logic to C++ ## Replication - Server is authority — clients request, server validates and replicates - `UPROPERTY(Replicated)` for variable sync — implement `GetLifetimeReplicatedProps` - `UFUNCTION(Server)` for client-to-server RPC — must be `Reliable` or `Unreliable` - `HasAuthority()` to check if server — before executing authoritative logic - `Role` and `RemoteRole` for network role checks — `ROLE_Authority` is server ## Asset References - Hard references load with parent — bloats memory, use for always-needed - Soft references (`TSoftObjectPtr`) load on demand — for optional or large assets - `LoadSynchronous()` or `AsyncLoad` for soft refs — don't access until loaded - Blueprint class references: `TSubclassOf<T>` — type-safe class selection ## Memory and Pointers - `TSharedPtr` for non-UObjects — reference counted, auto-deletes - `TUniquePtr` for exclusive ownership — can't copy, moves only - `MakeShared<T>()` for creation — single allocation for object and control block - Never mix raw `new/delete` with smart pointers — choose one pattern ## Common Mistakes - Accessing null actor in Blueprint — use `IsValid()` node before access - PIE (Play In Editor) vs packaged build differ — test shipping build - Hot reload corrupts Blueprints — close editor, build, reopen - `GetWorld()` null in constructor — world doesn't exist yet, use BeginPlay - Spawning in constructor crashes — defer to BeginPlay or later - `FString` for display, `FName` for identifiers — FName is hashed, faster comparison


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yaseenkadlemakki/code-review-skill (version 1.0.0)

{\rtf1\ansi\ansicpg1252\cocoartf2822 \cocoatextscaling0\cocoaplatform0{\fonttbl\f0\fnil\fcharset0 Menlo-Regular;\f1\fnil\fcharset0 Menlo-Bold;} {\colortbl;\red255\green255\blue255;\red193\green193\blue193;\red24\green24\blue24;\red85\green129\blue224; \red70\green137\blue204;} {\*\expandedcolortbl;;\cssrgb\c80000\c80000\c80000;\cssrgb\c12157\c12157\c12157;\cssrgb\c40392\c58824\c90196; \cssrgb\c33725\c61176\c83922;} \margl1440\margr1440\vieww11520\viewh8400\viewkind0 \deftab720 \pard\pardeftab720\partightenfactor0 \f0\fs24 \cf2 \cb3 \expnd0\expndtw0\kerning0 \outl0\strokewidth0 \strokec2 Perform a comprehensive code review current staged changes as a senior developer would, focusing on production readiness. Specifically:\cb1 \ \ \pard\pardeftab720\partightenfactor0 \cf4 \cb3 \strokec4 1.\cf2 \strokec2 \f1\b \cf5 \strokec5 **Error Handling & Panic Prevention** \f0\b0 \cf2 \strokec2 :\cb1 \ \pard\pardeftab720\partightenfactor0 \cf2 \cb3 \cf4 \strokec4 -\cf2 \strokec2 Review all error paths and ensure none can cause panics\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Check for potential nil pointer dereferences\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Verify that all file operations handle errors gracefully\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Look for any unchecked type assertions or array/slice access that could panic\cb1 \ \ \pard\pardeftab720\partightenfactor0 \cf4 \cb3 \strokec4 2.\cf2 \strokec2 \f1\b \cf5 \strokec5 **Production Readiness** \f0\b0 \cf2 \strokec2 :\cb1 \ \pard\pardeftab720\partightenfactor0 \cf2 \cb3 \cf4 \strokec4 -\cf2 \strokec2 Verify logging levels are appropriate (debug vs info vs warn vs error)\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Check if error messages provide sufficient context for debugging\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Ensure the code handles edge cases\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Consider if there are any race conditions or concurrency issues\cb1 \ \ \pard\pardeftab720\partightenfactor0 \cf4 \cb3 \strokec4 3.\cf2 \strokec2 \f1\b \cf5 \strokec5 **Code Quality** \f0\b0 \cf2 \strokec2 :\cb1 \ \pard\pardeftab720\partightenfactor0 \cf2 \cb3 \cf4 \strokec4 -\cf2 \strokec2 Look for any code duplication or opportunities for refactoring\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Verify consistent error handling patterns with the rest of the codebase\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Check if variable names are clear and follow Go conventions\cb1 \ \cb3 \cf4 \strokec4 -\cf2 \strokec2 Ensure comments are accurate and helpful\cb1 \ \ \pard\pardeftab720\partightenfactor0 \cf4 \cb3 \strokec4 4.\cf2 \strokec2 \f1\b \cf5 \strokec5 **Unit Test** \f0\b0 \cf2 \strokec2 :\cb1 \ \pard\pardeftab720\partightenfactor0 \cf2 \cb3 \cf4 \strokec4 -\cf2 \strokec2 Add a comprehensive unit test for the changes made\cb1 \ \ \cb3 Provide specific code fixes for any issues found, and include the complete unit and component test implementation.\cb1 \ }


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yuchangxu1989-openclaw/agent-effect-operations (version 0.0.2)

--- name: agent-effect-operations description: >- AEO — Agent 效果运营平台。自动发现 Agent 效果漂移、诊断根因、运行 AI 数据闭环工具链，给出 AI 效果优化方案。Measure agent performance, attribute outcomes, track quality trends, optimize cost, and monitor SLAs. --- # Agent Effect Operations


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: idiosyncraticdragon/huawei-obs-skill (version 1.0.0)

--- name: huawei-obs-sdk description: 华为云 OBS 对象存储 SDK 使用指南。包含 SDK 安装、初始化客户端、文件上传/下载、管理存储桶、管理对象等核心操作的最佳实践和代码示例。使用当需要操作华为云 OBS 对象存储时。 --- # 华为云 OBS SDK 使用指南 本技能提供华为云 OBS（对象存储服务）Python SDK 的核心使用方法和最佳实践。 ## 快速开始 ### 1. 安装 SDK ```bash pip install huaweicloud-sdk-python-obs ``` ### 2. 初始化客户端 ```python from obs import ObsClient # 初始化 OBS 客户端 obs_client = ObsClient( [REDACTED_SECRET]', secret_access_key='YOUR_SECRET_KEY', server='obs.cn-east-3.myhuaweicloud.com' # 根据实际区域填写 ) ``` ### 3. 关闭客户端 ```python obs_client.close() ``` ## 核心操作 ### 存储桶管理 参考 [references/bucket_operations.md](references/bucket_operations.md) - 创建/删除存储桶 - 存储桶权限配置 - 存储桶生命周期管理 - 存储桶跨域配置 ### 对象操作 参考 [references/object_operations.md](references/object_operations.md) - 上传文件/文件夹 - 下载文件/文件夹 - 删除/复制/移动对象 - 列举对象 - 断点续传 - 预签名 URL 生成 ### 高级功能 参考 [references/advanced_features.md](references/advanced_features.md) - 版本控制 - 服务器端加密 - 跨域资源共享 (CORS) - 事件通知 - 生命周期规则 ## 安全最佳实践 1. 不要硬编码 AK/SK，使用环境变量或配置文件管理 2. 为 OBS 账户分配最小必要权限 3. 定期轮换访问密钥 4. 使用 HTTPS 协议访问 OBS 服务 5. 敏感数据上传前建议客户端加密 ## 错误处理 ```python try: resp = obs_client.putFile('bucket_name', 'object_key', 'local_file_path') if resp.status < 300: print('上传成功') else: print(f'上传失败: {resp.errorMessage}') except Exception as e: print(f'操作异常: {e}') ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)