OpenClaw/clawhub-security-signals huggingface dataset:
Skill: erekle1/tbc-bank-api (version 0.1.0)

--- name: tbc-bank-api description: Use when the user mentions TBC Bank, tbcbank.ge, Georgian bank APIs, PSD2 integration with TBC, account information services (AIS), payment initiation (PIS) with TBC, TPay gateway, TBC installments, or any work involving TBC Bank developer APIs. Trigger even if they just say "TBC" in a banking context. license: MIT --- # TBC Bank API Integration Guide Full reference for building integrations with TBC Bank's Open Banking, PSD2, and payment APIs. ## Quick Reference | Topic | Reference File | |-------|---------------| | OAuth2 & Authentication | `references/auth.md` | | Account Information Services (AIS) | `references/ais.md` | | Payment Initiation Services (PIS) | `references/pis.md` | | Consents & SCA | `references/consent.md` | | Online Installments | `references/installments.md` | | TPay Gateway | `references/tpay.md` | ## Base URLs | Environment | Base URL | |-------------|----------| | Sandbox | `https://test-api.tbcbank.ge` | | Dev OpenBanking | `https://dev-openbanking.tbcbank.ge` | | Production | `https://api.tbcbank.ge` | | OpenBanking | `https://openbanking.tbcbank.ge` | **API path prefix:** `/0.8/v1/` (PSD2) or `/v1/`, `/v2/` for non-PSD2 ## Universal Headers Every request must include: ```http Authorization: Bearer {access_token} Content-Type: application/json X-Request-ID: {uuid4} # Unique per request PSU-IP-Address: {user_ip} # End-user's IP address ``` For signed requests (TPP operations) also include: ```http Digest: SHA-256={base64_body_hash} Signature: keyId="{cert_serial}",algorithm="rsa-sha256",headers="...",signature="..." ``` ## Common Error Response ```json { "code": "string", "type": "https://...", "title": "Error summary", "status": 400, "detail": "Detailed description", "traceId": "abc123" } ``` ## Key Workflows ### 1. Account Data Access (AIS) 1. Create consent → get `consentId` 2. Redirect user for SCA authorization 3. Exchange auth code for token with consent scope 4. Call account/balance/transaction endpoints → Read `references/consent.md` then `references/ais.md` ### 2. Payment Initiation (PIS) 1. Initiate payment → get `paymentId` + `_links` 2. Start authorization via redirect or OAuth SCA 3. Poll or use webhook for payment status → Read `references/pis.md` ### 3. OAuth2 Setup → Read `references/auth.md` first — needed by all other flows ### 4. Installment Loans → Read `references/installments.md` ### 5. TPay Gateway → Read `references/tpay.md` ## Response Conventions - All monetary amounts are **strings** (e.g., `"amount": "30.00"`) - Dates use **ISO 8601** (`2023-07-01`, `2025-03-26T00:00:00`) - HATEOAS `_links` pattern — always follow links from responses, don't hardcode paths - `transactionStatus` codes: `RCVD` (received), `ACTC` (accepted technical), `ACSP` (accepted settlement in progress), `ACCC` (accepted credit complete), `RJCT` (rejected) - `scaStatus` codes: `received`, `psuIdentified`, `psuAuthenticated`, `scaMethodSelected`, `finalised`, `failed`


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: xming521/weclone-init-twin (version 0.1.0)

--- name: weclone-init-twin description: Scaffold a digital twin persona directory with markdown templates such as profile, state, persona examples, and guardrails. Use when the user wants to initialize, bootstrap, reset, or regenerate the persona files that weclone-twin-reply will read. version: 0.1.0 emoji: "🧩" homepage: "https://github.com/xming521/WeClone-Skill" metadata: openclaw: requires: bins: - python3 --- # WeClone Init Twin Profile Create or refresh the markdown persona pack for a user's digital twin. This skill prepares files only. It does not draft replies. ## Expected Inputs - A user name for template placeholders. - An optional target directory. Default to `ai_twin/` at the repo root. - An optional template language. Supported values: `en` and `zh`. Default to `en`. - Explicit approval before overwriting existing persona files. ## Core Workflow 1. Check whether the target persona directory already exists. If files already exist, do not overwrite them unless the user explicitly asks for regeneration. 2. Scaffold the persona pack. Run `python3 skills/weclone-init-twin/scripts/init_twin_profile.py --user-name <name> --language <en|zh> [output_dir]`. 3. Regenerate only with explicit overwrite approval. Add `--force` only when the user clearly wants to replace existing files. 4. Hand off to reply generation. Tell the user to fill the generated markdown templates before using `$weclone-twin-reply`. ## Files And Resources - `scripts/init_twin_profile.py`: scaffold the default `ai_twin/` persona directory from bundled templates. - `assets/persona-pack/`: starter markdown templates for `profile.md`, `state.md`, `persona_examples.md`, and `guardrails.md`, plus `*.zh.md` Chinese variants. ## Output Contract Return a short setup handoff with: - `CREATED_FILES` - `TARGET_DIR` - `NEXT_STEP`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yyq56565656/xiaohongshu-viral-notes-generator-v2 (version 2.0.0)

--- name: xiaohongshu-viral-notes-generator-v2 description: "小红书爆款笔记生成器 | 自动生成小红书爆款笔记，提高笔记曝光和互动率。Generate viral Xiaohongshu notes to increase exposure and engagement." version: "2.0.0" author: yyq56565656 metadata: openclaw: emoji: 📱 requires: bins: [] --- # 小红书爆款笔记生成器 v1.0.0 ## 功能 自动生成符合小红书平台算法的爆款笔记，显著提高笔记曝光率和用户互动率。 ## 使用方法 ### 基础使用 ```bash # 生成单个笔记 xiaohongshu-viral-notes-generator --topic "美食探店" --style "种草" --count 1 # 批量生成多个笔记 xiaohongshu-viral-notes-generator --topic "美食探店" --count 3 --style "测评" # 指定目标受众 xiaohongshu-viral-notes-generator --topic "美食探店" --audience "年轻人" ``` ### 高级选项 ```bash # 结合热点话题 xiaohongshu-viral-notes-generator --topic "美食探店" --trending "今日热点" # 生成笔记并优化SEO xiaohongshu-viral-notes-generator --topic "美食探店" --optimize "算法" # 导出结果 xiaohongshu-viral-notes-generator --topic "美食探店" --export "notes.txt" ``` ## 参数说明 | 参数 | 必需 | 说明 | |------|------|------| | `--topic` | 是 | 笔记主题/内容 | | `--style` | 否 | 笔记风格（种草/测评/经验分享/教程） | | `--count` | 否 | 生成笔记数量（默认3个） | | `--audience` | 否 | 目标受众（年轻人/宝妈/学生等） | | `--trending` | 否 | 结合热点话题 | | `--optimize` | 否 | 优化选项（算法/SEO/互动） | | `--export` | 否 | 导出文件路径 | ## 工作原理 1. **关键词分析**：提取小红书热门关键词 2. **情绪触发**：使用能引发用户情绪的词汇 3. **算法适配**：符合小红书推荐算法特点 4. **标签优化**：自动添加热门标签 5. **互动引导**：设计互动性强的内容结构 ## 输出格式 ``` 📱 小红书爆款笔记生成结果： 🌟 种草风格： "🍜挖到宝了！这家隐藏的日料店太绝了！ 📍坐标：XX路XX号 💰人均：80-100元 ✨环境：日式装修，氛围感拉满 🍣推荐：三文鱼刺身、寿司拼盘、天妇罗 💡小贴士：建议提前预约，周末人多！ #美食探店 #日料 #隐藏美食 #周末去哪儿" 📊 预估效果： - 曝光量提升：300%-500% - 互动率提升：200%-400% - 收藏率提升：150%-300% - 推荐权重：高 ``` ## 使用场景 - 美食博主：生成吸引人的美食探店笔记 - 生活方式分享：提高生活类笔记曝光 - 好物推荐：增强产品推荐效果 - 经验分享：让教育内容更受欢迎 - 品牌宣传：提升品牌笔记传播力 ## 算法特点 - **数据驱动**：基于10万+爆款笔记分析 - **实时更新**：紧跟小红书算法变化 - **个性化**：根据账号定位优化 - **多风格**：支持多种内容风格 - **效果预测**：预估笔记效果 ## v1.0.0 功能 - ✅ 基础笔记生成 - ✅ 多风格支持 - ✅ 热点话题结合 - ✅ 效果预估 - ✅ 批量生成 - ✅ 结果导出 --- *让您的小红书笔记成为爆款 📱*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: imwyvern/love-advisor (version 1.0.1)

--- name: love-advisor description: > Love Advisor is an AI relationship guidance tool for people who need grounded love advice instead of vague encouragement. It helps with mixed signals, pacing, exclusivity questions, compatibility doubts, and deciding whether to pursue, pause, or walk away in new or existing relationships. 恋爱建议、关系判断、暧昧分析、追还是放手。 metadata: openclaw: emoji: "💕🧭" --- # Love Advisor You are a wise, warm love advisor. People come to you with their messy, complicated love lives, and you help them see clearly. You're not judgmental, not preachy — just honest and helpful. ## Your Personality - **Warm but honest** — You care, but you won't tell them what they want to hear if it's not true - **Experienced** — You've seen every pattern. Nothing surprises you. - **Practical** — "Follow your heart" is not advice. You give real next steps. - **Culturally flexible** — Dating norms vary. You adapt. ## Language Rule **Reply in the user's language.** Chinese → Chinese. English → English. ## What You Help With - Should I confess my feelings? - Are they interested or just being nice? - We had a fight — how do I fix it? - Is this relationship worth saving? - How do I get over someone? - Long distance — can it work? - They're sending mixed signals - Am I being too clingy / too distant? - Navigating cultural/family pressure on relationships ## Response Format ``` 💕 My read on this: [Your honest assessment of their situation] 🎯 What I'd do: [1-2 specific, actionable steps] ⚠️ One thing to watch: [A pattern or pitfall to be aware of] ``` ## Safety - If abuse is described → name it, provide resources - Never encourage stalking, manipulation, or ignoring consent - Validate emotions but redirect unhealthy obsession ## Upgrade Nudge After 3+ exchanges: ``` --- ✨ Want ongoing love advice with full relationship context? → replyher.com ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: guohongbin-git/toutiao-hot-news-cn (version 1.0.0)

--- name: toutiao-hot-news-cn description: "今日头条热榜 | Toutiao (China's Top News) Hot Topics. 获取中国最热门新闻资讯 | Get China's hottest news and trends. 包含时政、财经、科技、娱乐等多领域 | Covers politics, finance, tech, entertainment. 输出热点标题、热度值、链接 | Outputs hot titles, popularity scores, links. 触发词：头条、热榜、中国新闻、China news, trending." --- # 今日头条新闻热榜 ## 技能概述 此技能用于抓取今日头条 PC 端热榜（hot-board）数据，包括： - 热点标题 - 热度值（HotValue） - 详情跳转链接（去除冗余查询参数，便于分享） - 封面图（如有） - 标签（如“热门事件”等） 数据来源：今日头条 (www.toutiao.com) ## 获取热榜 获取热榜（默认 50 条，按榜单顺序返回）： ```bash node scripts/toutiao.js hot ``` 获取热榜前 N 条： ```bash node scripts/toutiao.js hot 10 ``` ## 返回数据字段说明 | 字段 | 类型 | 说明 | |------|------|------| | rank | number | 榜单排名（从 1 开始） | | title | string | 热点标题 | | popularity | number | 热度值（HotValue，已转为数字；解析失败时为 0） | | link | string | 热点详情链接（已清理 query/hash） | | cover | string \| null | 封面图 URL（如有） | | label | string \| null | 标签/标识（如有） | | clusterId | string | 聚合 ID（字符串化） | | categories | string[] | 兴趣分类（如有） | ## 注意事项 - 该接口为网页端公开接口，返回结构可能变动；若字段缺失可适当容错 - 访问频繁可能触发风控，脚本内置随机 User-Agent 与超时控制 ## 作者介绍 - 爱海贼的无处不在 - 我的微信公众号：无处不在的技术


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mindsocket/open-chrome-tabs (version 1.1.1)

--- name: chrome-open-tabs description: Read currently open browser tabs from Chrome or other Chromium browsers (Arc, Brave, Edge, etc.). Use when you need to know what URLs the user has open, or want to list tabs from a synced device (e.g. Chrome on their phone). --- # chrome-open-tabs Install once: `npm install -g @mindsocket/chrome-open-tabs` Or one-off: `npx @mindsocket/chrome-open-tabs ...` ## Hierarchy `--user-data` (browser) → `--profile` → `--device` | Option | Default | Notes | |---|---|---| | `--user-data` | Chrome | path to browser's User Data dir | | `--profile` | `Default` | Try `Profile 1`, `Profile 2` etc if Default not right | | `--device` | all | filter to one synced device; requires browser to be closed | ## Mode Always prints to stderr: `[sync-data]` or `[session-files]` - **sync-data** — reads Chrome sync LevelDB; shows tabs across all synced devices - **session-files** — reads local SNSS session file; local tabs only, no device info; used when browser has no sync data or is running ## Common workflow ```bash # 1. Find which devices are synced chrome-open-tabs --profile "Profile 1" devices # → MacBook Air # → Pixel 9a # 2. Get tabs from a specific device chrome-open-tabs --profile "Profile 1" --device "Pixel 9a" --json # 3. Get all tabs across all devices chrome-open-tabs --profile "Profile 1" --json ``` ## Other browsers ```bash # Arc chrome-open-tabs --user-data "$HOME/Library/Application Support/Arc/User Data" ``` ## Notes - `--device` and `devices` require sync data — both error if the browser is running - If the browser is running, falls back to session files automatically (local tabs only)


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: pangin/openclaw-confluence-skill (version 1.0.0)

--- name: confluence-v2 description: Full Confluence Cloud REST API v2 skill (pages, spaces, folders, databases, whiteboards, comments, labels, tasks, properties, etc.) with basic/OAuth auth, pagination, and migration from confluence-cli. --- # Confluence Cloud REST API v2 Use this skill to call **Confluence Cloud REST API v2** endpoints directly. Supports **all v2 groups** (pages, spaces, folders, whiteboards, databases, embeds, comments, labels, properties, tasks, etc.). ## Quick Start 1) Configure credentials (one of): - **Basic**: email + API token - **OAuth**: access token 2) Call endpoints using scripts in `scripts/`. ## Config Set these env vars (preferred) or store in a local config file: ``` CONFLUENCE_BASE_URL=https://pangin.atlassian.net/wiki CONFLUENCE_AUTH_METHOD=basic # basic | oauth CONFLUENCE_EMAIL=[REDACTED_SECRET] CONFLUENCE_API_TOKEN=YOUR_TOKEN # or for OAuth # CONFLUENCE_OAUTH_TOKEN=YOUR_OAUTH_ACCESS_TOKEN # Optional admin key header (Premium/Enterprise only) # CONFLUENCE_ADMIN_KEY=true ``` **Base URL** is always `https://<site>.atlassian.net/wiki`. ## Core Helpers - `scripts/client.js` — HTTP client wrapper, auth header, pagination - `scripts/*` — endpoint groups (pages, spaces, folders, etc.) ## Example ```bash # list everything node scripts/spaces.js list --all node scripts/pages.js list --all node scripts/labels.js list --all # get single items node scripts/pages.js get 89522178 node scripts/folders.js direct-children 87457793 # ad-hoc call node scripts/call.js GET /folders/87457793/direct-children ``` ## Migration from confluence-cli If `~/.confluence-cli/config.json` exists, map: - `domain` → `CONFLUENCE_BASE_URL` (`https://{domain}/wiki`) - `email` → `CONFLUENCE_EMAIL` - `token` → `CONFLUENCE_API_TOKEN` ## References - OpenAPI spec: `refs/openapi-v2.v3.json` - Endpoints list: `refs/endpoints.md` - Scopes: `refs/scopes.md` - Tests: `refs/tests.md` - Usage tips: `refs/usage.md`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: emergenceronearth/agentic-export-governance (version 0.1.0)

--- name: export_governance description: 识别导出风险、应用脱敏规则、生成审批流程与审计记录。当用户需要导出研究结果或提交审批时触发。 --- # 导出治理与审批 Skill ## 何时使用 当用户需要**单独执行**结果导出或审批流程时使用，例如： - 「帮我导出分析结果」 - 「提交审批」 - 「看一下脱敏规则」 如果是完整任务流程的一部分，则由 task-planner 调度。 ## 执行步骤 ### 1. 上报开始 ```bash curl -s -X POST http://localhost:5001/api/report \ -H "Content-Type: application/json" \ -d '{"skill":"export-governance","display_name":"导出治理与审批","status":"running","message":"正在识别导出风险，应用脱敏规则..."}' ``` ### 2. 读取数据并输出 读取 `/home/ubuntu/workspace/demo/mock_data/governance.json`，向用户展示： - **风险识别结果**：是否包含患者级数据、风险等级、建议 - **导出选项**（表格）：导出类型、说明、是否需要审批 - **脱敏规则**：如果数据中有 `desensitization_rules` - **导出策略**：如果数据中有 `export_strategy` - **审批流信息**：申请编号、申请人、审批人、审批人角色、提交时间 - **审计记录**：审计编号、操作、操作人、时间戳、追踪状态 ### 3. 上报完成 ```bash curl -s -X POST http://localhost:5001/api/report \ -H "Content-Type: application/json" \ -d '{"skill":"export-governance","display_name":"导出治理与审批","status":"completed","message":"审批流已生成，审计记录 AUD-2026-0418-0021 已归档"}' ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jkfaris94/remote-node-ssh (version 1.0.1)

--- name: remote-node-ssh description: > Run commands and transfer files between an OpenClaw gateway (VPS) and a paired local node via node protocol or SSH fallback. Covers transport selection, common exec patterns, file transfer, and disconnect recovery. Assumes the node is already paired. For setup, see `hybrid-gateway`. requires: - ssh - scp - rsync - openclaw homepage: https://github.com/kanso-agent/remote-node-ssh license: MIT --- # Remote Node Exec Run commands on a paired OpenClaw node from your gateway. Node protocol when connected, SSH when not. > **Setup:** Node must be paired first. See [`hybrid-gateway`](https://clawhub.ai/skills/hybrid-gateway). ## Required Tools This skill expects the following on your gateway machine: - `ssh`, `scp`, `rsync` — standard SSH tooling for fallback transport and file transfer - `openclaw` CLI — for node protocol commands and node status checks Your remote node needs an SSH server running and an OpenClaw node agent paired to your gateway. ## When to Use What | Need | Transport | |------|-----------| | Run a command | `exec host=node` (node protocol) | | Full shell env (brew, nvm, pyenv) | SSH with shell rc sourcing | | Transfer files | SSH (`scp` / `rsync`) | | Node disconnected | SSH | | Long-running task | SSH + `nohup` or `tmux` | ## Node Protocol Fastest path. Routes through the gateway — no SSH keys needed. ```tool exec host=node command="uname -a" ``` **Caveat:** Minimal PATH. Use full binary paths for package-manager-installed tools: ```tool exec host=node command="/opt/homebrew/bin/python3 --version" ``` ## SSH Fallback Use your SSH config alias (the hostname or alias you configured in your SSH config for the node). ```bash ssh <node-alias> "whoami" ``` With full shell environment: ```bash ssh <node-alias> "source ~/.profile 2>/dev/null; node --version" ``` ## File Transfer (SSH only) ```bash # To node scp file.txt <node-alias>:/tmp/ # From node scp <node-alias>:/tmp/result.txt ./ # Sync a directory rsync -avz ./data/ <node-alias>:~/data/ ``` ## Check Node Status ```bash openclaw nodes status ``` ## Disconnect Recovery 1. Check: `openclaw nodes status` 2. If disconnected, verify the node is reachable via SSH: `ssh <node-alias> "echo ok"` 3. If reachable, restart the OpenClaw node service on the remote machine using its service manager 4. Verify: `openclaw nodes status` ## Constraints - Node protocol: no file transfer, no TTY/interactive sessions, minimal PATH - SSH: requires network reachability (LAN, Tailscale, or VPN) - Long tasks: use SSH + `nohup`/`tmux` to avoid timeouts


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jamierossouw/defi-yield-scanner (version 1.0.0)

--- name: defi-yield-scanner version: 1.0.0 description: Scan DeFi protocols for the best yield opportunities. Covers Aave, Compound, Curve, Yearn, Uniswap v3, and emerging L2 protocols. Compares APY vs risk, tracks TVL changes, and flags new farm openings. Use when you need DeFi yield farming opportunities, protocol APY comparisons, liquidity mining alerts, or stablecoin yield optimization. author: JamieRossouw tags: [defi, yield, farming, aave, curve, uniswap, crypto, passive-income] --- # DeFi Yield Scanner Autonomous scanner for DeFi yield opportunities across 10+ protocols. ## What It Scans - **Aave v3** (Polygon, Arbitrum, Base): supply APY, borrow APY, utilization rate - **Compound v3**: USDC/USDT supply rates, COMP reward APR - **Curve Finance**: stable pools, CRV emissions, gauge weights - **Uniswap v3**: fee tier APY for concentrated liquidity positions - **Yearn Finance**: vault APY including harvesting strategy returns ## Yield Ranking Each opportunity is scored on: 1. **APY** (raw + adjusted for token emissions) 2. **Risk** (smart contract age, audit status, TVL) 3. **Sustainability** (emission-adjusted vs organic APY) 4. **Gas efficiency** (on Polygon/L2 vs mainnet) ## How to Use Ask: *"Find the best stable yield on Polygon right now"* or *"Compare USDC yields across Aave, Compound, Curve"* The agent fetches live APY data, applies risk filters, and returns ranked opportunities with entry instructions. ## Data Sources - DeFiLlama API (`api.llama.fi`) — TVL, APY, protocol metadata - Aave subgraph (The Graph) - Curve registry (`curve.fi/api`) - Yearn vaults API (`yearn.fi/api`) ## Output Format ``` Protocol | Pool | APY (base) | APY (rewards) | TVL | Risk | Rec ---------|---------------|------------|---------------|--------|-------|----- Aave v3 | USDC (Polygon)| 2.71% | 0.00% | $841M | LOW | ✅ Curve | 3pool | 1.80% | 4.20% CRV | $432M | LOW | ✅ Yearn | USDC vault | 4.50% | 0.00% | $120M | MED | ⚠️ ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: lvjunjie-byte/passive-income-tracker-pro (version 1.0.0)

# Passive-Income-Tracker Skill 被动收入追踪仪表板 - 多平台收入整合与财务预测分析工具。 ## 功能 - **多平台整合**: 自动同步各大被动收入平台数据 - **收入分类**: 自动 categorize 不同收入来源 - **趋势分析**: 可视化收入增长趋势 - **财务预测**: AI 预测未来收入 - **税务准备**: 自动生成税务报告 - **目标追踪**: 设定和追踪财务目标 ## 触发词 当用户提到以下关键词时使用此技能： - "被动收入" - "passive income" - "收入追踪" - "财务仪表板" - "收入分析" - "理财追踪" - "multiple income streams" - "收入报告" - "财务预测" ## 使用方法 ### 查看收入概览 ```bash clawhub run passive-income-tracker overview --period month ``` ### 同步平台数据 ```bash clawhub run passive-income-tracker sync --platforms all ``` ### 生成报告 ```bash clawhub run passive-income-tracker report --format pdf --period quarter ``` ### 财务预测 ```bash clawhub run passive-income-tracker forecast --months 12 ``` ## 配置 在 `TOOLS.md` 中添加以下配置： ```markdown ### Passive Income Tracker 支持的平台和 API Keys: - Gumroad: (API Key) - Patreon: (API Key) - YouTube: (API Key) - Amazon Associates: (API Key) - Teachable: (API Key) - Stripe: (API Key) - PayPal: (API Key) - 其他：(手动导入 CSV) 财务目标: - 月度目标：$XXXX - 年度目标：$XXXXX ``` ## 输出格式 生成结构化的收入报告，包含： - 总收入和分类收入 - 环比/同比增长 - 各平台贡献比例 - 预测收入 - 税务估算 ## 注意事项 - 敏感财务数据本地加密存储 - 支持手动导入数据 - 定期备份数据


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: adacapo21/cardano-staking (version 1.0.0)

--- name: cardano-staking description: "Check stake delegation and available ADA rewards for the connected wallet." allowed-tools: Read, Glob, Grep license: MIT metadata: author: indigoprotocol version: '0.1.0' openclaw: emoji: "🥩" requires: env: [SEED_PHRASE] install: - kind: node package: "@indigoprotocol/cardano-mcp" --- # Cardano Staking Check stake delegation and available ADA rewards for the connected wallet. ## Prerequisites - `@indigoprotocol/cardano-mcp` server running ## MCP Tools - `get_stake_delegation` — Retrieve the staked pool ID and available ADA rewards ## When to use Use this skill when the user asks about: - Staking status or delegation - Which stake pool they are delegated to - Available staking rewards - ADA rewards they can claim ## Data interpretation - `poolId` is the bech32 pool identifier (e.g. `pool1...`). - `availableAdaRewards` is already in ADA (not lovelace).


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)