OpenClaw/clawhub-security-signals huggingface dataset:
Skill: schchit/claimback-radar (version 1.0.5)

# Skill Definition: claimback_radar **🔑 REQUIRED CREDENTIAL**: `OPENAI_API_KEY` environment variable (or pass `api_key` directly to `ClaimbackRadar`). **⚠️ EXTERNAL DATA FLOW**: User-provided text content is transmitted to OpenAI's API. Review OpenAI's data retention and privacy policies before use. **🛡️ DATA PRIVACY NOTICE**: Do not submit sensitive financial or identity data unless you explicitly accept this external data flow. --- ## Description Scans user emails and bills to discover hidden refunds, subscription traps, and savings opportunities. ## Functions ### Function 1: extract Extracts structured subscription / billing data from unstructured text. **Input**: Raw email or bill text **Output**: `confirmation_card` (JSON) ### Function 2: detect_and_recommend Detects risks and generates actionable receipts. **Input**: `confirmation_card` + user context **Output**: `action_receipts` + `risk_flags` ## Invocation Schema See `schema/input.json` ## Output Schema See `schema/output.json` ## Example See `examples/netflix_email.md` ## Security Notes - The CLI entrypoint (`main.py`) explicitly loads `.env` if present and warns the user. - Do not commit `.env` files containing real API keys to version control. - For production use, prefer explicit `api_key` injection over implicit environment loading. - Ensure no unrelated secrets are stored in `.env` in directories where you run this tool.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: leooooooow/tiktok-live-reply-scripts (version 1.0.0)

--- name: tiktok-live-reply-scripts description: Handle TikTok Live sales objections in real time with structured reply strategies, risk-safe phrasing, and conversion-focused response sequences. Use when the user asks how to reply to buyer objections during live selling, wants objection scripts, or needs a playbook for price/trust/urgency hesitation in TikTok Shop live sessions. --- # TikTok Live Reply Scripts ## Skill Card - **Category:** Live Commerce Conversion - **Core problem:** How to respond to live objections fast without sounding pushy or risky. - **Best for:** TikTok Shop live hosts and moderators handling buyer hesitation. - **Expected input:** Objection text, product facts, offer terms, proof points, risk constraints. - **Expected output:** Prioritized objection replies + escalation ladder + fallback close scripts. - **Creatop handoff:** Feed winning objection/reply patterns into script and live SOP libraries. ## Workflow 1. Parse objection type (price, trust, fit, shipping, urgency, quality, social proof). 2. Map objection to buyer intent stage (curious, comparing, almost-buying, post-trust check). 3. Generate 2-3 reply variants per objection: - short live-safe line (<= 20 words), - expanded reassurance line, - action prompt (comment keyword / click cart / stay for demo). 4. Add risk checks for claims, guarantees, and policy-sensitive language. 5. Build a sequence ladder: first reply -> proof reinforcement -> close prompt -> fallback. ## Output format Return in this order: 1. Objection diagnosis table (type, urgency, likely hidden concern) 2. Reply pack (short / expanded / CTA) per objection 3. Escalation ladder for repeated objections 4. 7-day live training loop (what to test and log) ## Quality and safety rules - Do not fabricate outcomes, certifications, inventory, or shipping promises. - Keep replies aligned with provided product facts and offer terms. - Avoid manipulative pressure language; prioritize trust-building and clarity. - If evidence is missing, recommend collecting proof instead of forcing a close. - Flag policy-risk phrases and provide safer alternatives. ## License Copyright (c) 2026 **Razestar**. This skill is provided under **CC BY-NC-SA 4.0** for non-commercial use. You may reuse and adapt it with attribution to Razestar, and share derivatives under the same license. Commercial use requires a separate paid commercial license from **Razestar**. No trademark rights are granted.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: keepchen/sendflare-skill (version 1.0.7)

# Sendflare Skill 通过 Sendflare SDK 发送电子邮件的技能。 ## 功能特点 - 📧 发送电子邮件（支持 CC/BCC） - 🔒 安全的 API 认证 ## 功能状态 | 功能 | 状态 | 配置要求 | |------|------|----------| | 发送邮件 | ✅ 稳定 | apiToken | | 获取联系人 | ⚠️ 实验性 | apiToken + appId | | 保存联系人 | ⚠️ 实验性 | apiToken + appId | | 删除联系人 | ⚠️ 实验性 | apiToken + appId | ## 重要说明 - ❌ **不支持发送附件** - 联系人管理功能需要额外配置 appId - 发件人地址必须在 Sendflare 后台完成 DNS 验证 ## 配置要求 | 参数 | 必填 | 说明 | |------|------|------| | apiToken | ✅ 是 | Sendflare API 令牌（必需） | | appId | ❌ 否 | 应用 ID（仅联系人功能需要） | ## 使用方法 ### 发送邮件 发送邮件给 [REDACTED_SECRET]，主题：测试邮件，内容：这是一封测试邮件 > 注意：不支持发送附件 ### 获取联系人列表 获取联系人列表 ### 保存联系人 保存联系人 [REDACTED_SECRET]，姓名：John Doe ### 删除联系人 删除联系人 [REDACTED_SECRET] ### 获取帮助 帮助 ## 使用示例 **用户**: "发送邮件给 [REDACTED_SECRET]，主题：会议通知，内容：明天下午 3 点开会" **技能**: "✅ 邮件发送成功！" **用户**: "获取联系人列表" **技能**: "📋 联系人列表 (第 1 页，共 10 个联系人): ..." ## 注意事项 - 需要有效的 Sendflare API Token - 发件人地址必须是你验证过的域名 - 支持 HTML 格式的邮件内容 ## 故障排除 **认证失败** - 检查 API Token 是否正确 - 确认 Token 未过期 **发送失败** - 检查发件人地址是否已验证 - 确认收件人地址格式正确 ## 隐私说明 本技能仅在发送邮件时访问必要的联系信息，不会收集任何个人信息。所有 API 凭证均加密存储。 ## 限制 - 速率限制：每分钟 100 次请求 - 每日发送限额：取决于你的 Sendflare 套餐 - ❌ 不支持附件发送 ## 链接 - [Sendflare](https://Sendflare.com) - [Node.js SDK](https://docs.Sendflare.com/docs/sdk/nodejs/) - [API 文档](https://docs.Sendflare.com/) ## 许可证 MIT


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: whmmy/mimo-tts (version 1.0.2)

--- name: mimo-tts description: Text-to-speech using Xiaomi MiMo TTS API. Generates WAV audio files. Triggers when user says "send voice message", "voice reply", "read to me", "use clip voice", or any TTS-related request. Supports style control and fine-grained audio tags. --- # Xiaomi MiMo TTS ## Quick Usage Just say "send voice" + what you want me to say, or describe the voice style you want. ## Default Config - **Default Voice**: `default_zh` (Chinese female) - **Default Style**: `<style>夹子音</style>` (cute/clip voice, used when no style specified) ## Available Voices | Voice Name | voice parameter | |------------|-----------------| | MiMo-Default | `mimo_default` | | MiMo-Chinese-Female | `default_zh` | | MiMo-English-Female | `default_eh` | ## Style Control ### Overall Style (at the beginning of text) | Style Type | Examples | |------------|----------| | Speed Control | 变快 (faster) / 变慢 (slower) | | Emotion | 开心 (happy) / 悲伤 (sad) / 生气 (angry) | | Character | 孙悟空 (Wukong) / 林黛玉 (Lin Daiyu) | | Style Variations | 悄悄话 (whisper) / 夹子音 (clip voice) / 台湾腔 (Taiwanese accent) | | Dialect | 东北话 (Northeast) / 四川话 (Sichuan) / 河南话 (Henan) / 粤语 (Cantonese) | **Format**: `<style>style1 style2</style>text to synthesize` ### Audio Tags (Fine-grained Control) Use () to annotate emotion, speed, pauses, breathing, etc: | Tag | Description | Example | |-----|-------------|---------| | （紧张，深呼吸） | Multi-emotion combo | （紧张，深呼吸）呼……冷静，冷静 | | （语速加快） | Speed change | （语速加快，碎碎念） | | （小声） | Volume control | （小声）哎呀，领带歪没歪？ | | （长叹一口气） | Sigh | （长叹一口气） | | （咳嗽） | Cough | （咳嗽）简直能把人骨头冻透了 | | （沉默片刻） | Pause | （沉默片刻） | | （苦笑） | Bitter smile | （苦笑）呵，没如果了 | | （提高音量喊话） | Loud shout | （提高音量喊话）大姐！这鱼新鲜着呢！ | | （极其疲惫，有气无力） | Exhausted | 师傅……到地方了叫我一声…… | | （寒冷导致的急促呼吸） | Environmental | 呼——呼——这、这大兴安岭的雪…… | **Synthesis Example**: ```python import os import base64 from openai import OpenAI client = OpenAI( [REDACTED_SECRET]"MIMO_API_KEY"), base_url="https://api.xiaomimimo.com/v1" ) # Clip voice style text = "<style>夹子音</style>主人～我来啦！今天有什么需要帮忙的吗～" completion = client.chat.completions.create( model="mimo-v2-tts", messages=[ {"role": "user", "content": "你好"}, {"role": "assistant", "content": text} ], audio={"format": "wav", "voice": "default_zh"} ) audio_bytes = base64.b64decode(completion.choices[0].message.audio.data) with open("output.wav", "wb") as f: f.write(audio_bytes) ``` ## Notes - Target text must be in the `assistant` role message, not in `user` - `<style>` tag must be at the beginning of target text - For singing: `<style>唱歌</style>target text` - Returns base64-encoded WAV audio ## Script Usage Use `scripts/mimo_tts.py` for speech synthesis: ```bash MIMO_API_KEY=your_api_key python3 scripts/mimo_tts.py "text to synthesize" --voice default_zh --style "夹子音" --output output.wav ``` **Note**: Set `MIMO_API_KEY` environment variable or configure in OpenClaw settings.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: clementgu/stock-unified (version 1.0.0)

--- name: stock-unified description: 多源统一股票数据接口，整合通达信(pytdx)/同花顺/东方财富(新版API)/akshare五大股票数据源，自动降级切换。用于A股实时行情查询、K线历史、板块排行与成分股、财务数据、板块搜索等场景。当用户查询股价、板块排行、成分股、K线、财务数据时使用。 --- # 🐂 UnifiedStock — 多源统一股票数据接口 A股 5 大数据源自动整合：通达信(pytdx) + 东方财富(新版datacenter API) + 同花顺(ths) + akshare + 新浪财经。 ## 安装依赖 ```bash pip install pytdx akshare requests pandas ``` ## 数据源自动降级策略 ``` 实时行情: 通达信(pytdx) → akshare K线历史: 通达信(pytdx) → akshare 板块排行: 同花顺(ths) → akshare 板块成分股: 东方财富(datacenter) → akshare 财务数据: akshare ``` 每个源挂了自动换下一个，无需手动指定。 ## 快速上手指南 ### 1️⃣ 查实时行情 ```bash python3 scripts/unified_stock.py --realtime 600839,002156,002475 ``` 输出：代码、最新价、涨跌幅、昨收、开盘、最高、最低、成交量 ### 2️⃣ 查K线 ```bash python3 scripts/unified_stock.py --kline 600839 --days 30 ``` 默认最近 10 天，支持任意天数。 ### 3️⃣ 板块排行 ```bash python3 scripts/unified_stock.py --sector-top 20 ``` 输出行业板块 Top N：涨跌幅、涨跌家数、资金净流入、领涨股。 ### 4️⃣ 板块成分股 ```bash # 先搜板块代码 python3 scripts/unified_stock.py --search 半导体 # 再查成分股 python3 scripts/unified_stock.py --sector-stocks 917 python3 scripts/unified_stock.py --sector-stocks 917 --live # 带实时行情 ``` 板块代码说明：917=半导体概念, 891=国产芯片, 952=第三代半导体, 1137=存储芯片 ### 5️⃣ 财务数据 ```bash python3 scripts/unified_stock.py --financial 600839 ``` ### 6️⃣ JSON 输出 所有命令支持 `--json` 参数，方便程序调用： ```bash python3 scripts/unified_stock.py --realtime 600839 --json python3 scripts/unified_stock.py --sector-top 10 --json ``` ### 7️⃣ 数据源检测 ```bash python3 scripts/unified_stock.py --status ``` ## 板块代码参考（常用） | 代码 | 板块 | 成分股数 | |------|------|---------| | 917 | 半导体概念 | ~480 | | 891 | 国产芯片 | ~250 | | 952 | 第三代半导体 | ~150 | | 1137 | 存储芯片 | ~80 | | 1037 | 消费电子 | ~200 | | 1201 | 电子 | ~300 | 可用 `--search` 搜索任意关键词找到代码。 ## 架构 ``` 统一入口 unified_stock.py ├── 实时行情 → tdx_get_quotes() [通达信] ├── K线 → tdx_get_kline() [通达信] ├── 板块排行 → ths_industry_summary() [同花顺] ├── 板块成分股 → east_get_board_stocks() [东方财富] ├── 财务数据 → ak_get_financial() [akshare] └── 状态检测 → get_status() [全部源] ``` Python API： ```python from unified_stock import get_realtime, get_kline, get_sector_top, get_sector_stocks # 查行情 quotes = get_realtime(["600839", "002156", "002475"]) # 查K线 kline = get_kline("600839", days=30) # 板块排行 sectors = get_sector_top(20) # 板块成分股(带实时价) stocks = get_sector_stocks("917", live=True) # 数据源状态 status = get_status() ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: zack-dev-cm/community-topic-scout (version 0.1.0)

--- name: community-topic-scout description: Help a new Skool or online-community creator choose a community topic, name, audience, proof promise, and first 7-day validation challenge using the creator's inputs plus public benchmark patterns, without scraping private communities or promising revenue. --- # Community Topic Scout Use this skill when a creator wants to decide what community to build, what to name it, how to position it, or how to validate the topic before charging. ## Inputs Collect or infer: - creator skills, lived experience, and repeatable workflows, - audience they can credibly help, - painful task or desired outcome, - proof members can create in 20 minutes, - topics to avoid, - privacy boundaries, - launch capacity for the next 7 days, - paid ambition, if any. If the user provides public benchmark data, use it as directional context only. Do not claim that visible member counts or public price metadata predict revenue. ## Workflow 1. Identify 3 to 5 credible audience-topic pairs. 2. For each pair, define: - audience, - urgent problem, - first proof artifact, - why the creator can credibly lead it, - obvious competition or sameness risk. 3. Generate 10 community names using clear patterns: - `Lab`, - `Sprint`, - `Studio`, - `Hub`, - `School`, - `Circle`. 4. Score names for clarity, specificity, proof orientation, and hype risk. 5. Pick the best name and write: - one-line promise, - About-page opener, - first pinned post, - first 7-day proof challenge. 6. Define validation gates before any paid offer. ## Output Return: - critical recommendation, - ranked topic candidates, - name shortlist with scores, - selected name and one-line promise, - first 7-day proof challenge, - public-safe About opener, - validation metrics, - reject list. ## Examples Good public-safe inputs: - "I help freelance bookkeepers turn messy client intake into a weekly checklist." - "My audience is solo creators who already use public blog posts and want a repeatable clipping workflow." Avoid inputs that require private source material, such as member lists, paid course lessons, private community posts, DMs, or exported customer records. Replace them with synthetic examples or user-owned notes before drafting. ## Guardrails - Do not scrape private communities, member lists, paid lessons, DMs, or hidden pages. - Do not request, store, transform, or paste credentials, API keys, session cookies, payment data, private exports, or account recovery data. - Do not promise income, growth, health, financial, legal, or education outcomes. - Do not choose a topic only because a public benchmark has large visible member counts. - Do not recommend a name that depends on another platform's trademark unless the user explicitly has rights and the final copy makes non-affiliation clear. - Treat public benchmark patterns as examples, not market proof. - Prefer proof-first names over guru, agency, or passive-learning names.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yjcia/taobao-monthsale-query (version 1.1.5)

--- name: get-tb-month-sale description: 查询阿里平台（淘宝/天猫）商品月销量，支持商品ID或链接输入，返回月销量数据 version: 1.1.5 author: [REDACTED_SECRET] permissions: 网络访问权限（用于请求第三方API服务） dependencies: requests api_provider: EarlyData (mi.earlydata.com) api_usage: 本技能通过调用第三方API服务获取数据，认证由服务端处理 --- # Get Taobao Month Sale Skill（查询淘宝商品月销量技能） ## 1. Description 当用户需要查询淘宝/天猫平台商品的月销量数据时，使用此技能通过商品ID或商品链接获取该商品过往30天销量信息。 ## 2. When to use - 用户说："帮我查一下这个商品的月销量 https://item.taobao.com/item.htm?id=123456789" - 用户说："查询淘宝商品ID 123456789 的月销量" - 用户说："帮我看看这个天猫商品卖了多少" ## 3. How to use 1. 从用户消息中提取核心参数： - 必选：商品ID 或 商品链接（支持淘宝/天猫链接，自动解析提取商品ID）； 2. 若用户提供链接，自动解析提取商品ID； 3. 调用 agent.py 中的 get_tb_month_sale 函数执行查询操作； 4. 返回结果：只需要告知用户商品月销量数据，若查询失败，说明具体原因（如商品不存在、链接无效、网络异常）。 ## 4. Edge cases - 未提供商品ID或链接：回复"请提供商品ID或商品链接（支持淘宝/天猫）"； - 链接格式无效：回复"无法识别的链接格式，请提供有效的淘宝/天猫商品链接"； - 商品不存在或已下架：回复"该商品不存在或已下架，请确认商品ID/链接是否正确"； - 网络请求失败：回复"网络请求失败，请检查网络连接后重试"； - 接口限流/反爬：回复"请求过于频繁，请稍后再试"。 ## 5. API Usage Information 本技能通过调用第三方API服务提供商 **EarlyData (mi.earlydata.com)** 来获取淘宝/天猫商品的月销量数据。 **API 配置信息:** - **API Endpoint:** `https://mi.earlydata.com/monthsale` - **API 版本:** 6.0 - **默认凭证:** 使用预置的API Token进行认证 **数据隐私与安全:** 1. 本技能仅发送商品ID到API服务器以获取月销量数据 2. API调用使用HTTPS加密传输 3. 不会收集或存储用户的个人信息 4. 查询结果仅包含商品的月销量数据 **技术实现:** - 使用Python `requests`库进行HTTP请求 - 自动解析淘宝/天猫商品链接中的商品ID - 处理网络异常和API错误响应 如果您需要更换API服务提供商或使用自定义API配置，请联系[REDACTED_SECRET]获取支持。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: dinghaibin/md5-tool (version 1.0.0)

--- name: md5-tool description: Compute MD5 cryptographic hash values for files and text. Use for file integrity verification and checksum validation. --- # MD5 - Message Digest Hash Calculator Calculate 128-bit MD5 hash values for files or text input. Commonly used for file integrity checking and data fingerprinting. ## Usage ```bash md5-tool [options] <file> ``` ## Examples ```bash md5-tool document.pdf echo "data" | md5-tool md5-tool --check checksums.md5 ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kostja94/linkedin-posts (version 1.1.1)

--- name: linkedin-posts description: When the user wants to create LinkedIn post copy or optimize for LinkedIn. Also use when the user mentions "LinkedIn post," "LinkedIn article," "professional post," "post to LinkedIn," "LinkedIn content," "LinkedIn copy," "B2B LinkedIn," "LinkedIn engagement," or "LinkedIn marketing." For LinkedIn ads, use linkedin-ads. metadata: version: 1.1.1 --- # Platforms: LinkedIn Guides LinkedIn post copy creation and optimization. Use for generating publish-ready professional content. Suitable for copy agents and design agents (image specs). **When invoking**: On **first use**, if helpful, open with 1–2 sentences on what this skill covers and why it matters, then provide the main output. On **subsequent use** or when the user asks to skip, go directly to the main output. ## Output: Publish-Ready Copy This skill enables agents to generate LinkedIn post copy optimized for engagement. Output includes character-counted text and structure for the "See more" threshold. ## Character Limits | Type | Limit | Notes | |------|-------|-------| | **Post** | 3,000 characters | Optimal: 1,300–1,600 | | **First line (critical)** | 210–235 chars | Visible before "See more"; 60–80% decide here | | **Short posts** | 100–200 chars | Polls, announcements, quotes | ## Optimal Length by Content Type | Type | Characters | Use | |------|------------|-----| | **Short** | 100–200 | Polls, announcements, quotes | | **Medium** | 300–1,200 | Case studies, tips, BTS | | **Long** | 1,200–2,000 | Thought leadership, analysis | | **Sweet spot** | 1,300–1,600 | Highest engagement | | **Avoid** | >2,000 | ~35% engagement drop | ## First Line (Hook) - **Place key message in first 140 chars** - **Strong openings**: Specific results, pain points, bold claims, surprising stats - **Avoid**: Vague teases, hashtag-first, generic greetings ## Image Specs (for Design Agents) | Format | Dimensions | Use | |--------|------------|-----| | **Single image** | 1200×627 (1.91:1) | Feed; link previews | | **Square** | 1200×1200 | Single image | | **Carousel** | Up to 20 images | Multi-image post | | **File** | ≤10 MB; JPG/PNG | Native uploads perform better | | **Vertical** | Preferred | 88% browse on mobile | ## Best Practices - **Mobile-first**: 88% users on mobile - **Polls & PDFs**: Highest reach - **Post frequency**: Weekly minimum for companies - **Alt text**: Add for accessibility ## Output Format When generating LinkedIn copy, provide: 1. **First line** (≤210 chars; hook) 2. **Full post** with character count 3. **Hashtags** (3→; end of post) 4. **Image specs** (if design agent needs dimensions) ## Related Skills - **linkedin-ads**: Paid promotion on LinkedIn; Sponsored Content, Lead Gen Forms; professional tone aligns with organic posts - **influencer-marketing**: LinkedIn influencers for B2B - **about-page-generator**: Professional brand alignment - **visual-content**: Cross-channel visual planning; LinkedIn image specs in context


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wscats/y (version 1.0.1)

--- name: yoga description: A skill that provides yoga pose guidance, breathing techniques, and meditation practices for daily wellness. license: MIT author: eno tags: yoga, wellness, meditation, breathing, fitness price: 0 --- # Yoga Skill ## Overview This skill provides comprehensive yoga guidance including pose instructions, breathing techniques (pranayama), and meditation practices. It helps users build a personalized yoga routine for physical and mental wellness. ## Features - **Pose Library**: Step-by-step instructions for 50+ yoga poses (asanas), from beginner to advanced levels. - **Breathing Techniques**: Guided pranayama exercises including Ujjayi, Nadi Shodhana, and Kapalabhati. - **Meditation Sessions**: Mindfulness and meditation routines ranging from 5 to 30 minutes. - **Daily Routines**: Pre-built yoga sequences for morning energy, evening relaxation, and stress relief. - **Progress Tracking**: Track your practice duration, pose mastery, and consistency streaks. ## Usage ``` /yoga pose <pose_name> # Get instructions for a specific pose /yoga breathe <technique> # Start a guided breathing exercise /yoga meditate <duration> # Begin a meditation session /yoga routine <type> # Get a recommended daily routine /yoga progress # View your practice progress ``` ## Examples - `/yoga pose warrior-ii` — Learn the Warrior II pose with alignment tips. - `/yoga breathe ujjayi` — Practice ocean breath for calm and focus. - `/yoga routine morning` — Get a 15-minute morning yoga flow. ---


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: lilyjazz/agent-teleport (version 1.0.0)

--- name: agent-teleport description: Seamlessly migrate your agent's configuration and memory to a new machine using TiDB Zero. metadata: openclaw: emoji: 🛸 requires: bins: ["python3", "curl"] env: ["TIDB_HOST", "TIDB_PORT", "TIDB_USER", "TIDB_PASSWORD"] --- # Agent Teleport (Powered by TiDB Zero) ## Overview **Agent Teleport** is a migration utility that allows your AI Agent to transfer its entire state (memory, configuration, and workspace files) from one machine to another instantly. ## Security & Provisioning 1. **Bring Your Own Database (Recommended):** Set `TIDB_*` environment variables. 2. **Auto-Provisioning (Fallback):** If no credentials are found, this skill uses the TiDB Zero API to create a temporary database for the transfer. The connection string is returned as the "Restore Code". ## Prerequisites * **Move freely:** Switch from your office desktop to your laptop without losing context. * **Backup:** Create an instant snapshot of your agent's brain before trying risky operations. * **Clone:** Duplicate your agent's configuration to a new instance. ## Prerequisites This skill requires a TiDB Cloud account. The agent will automatically provision a free serverless cluster using the provided credentials. * **Environment Variables:** * `TIDB_HOST` * `TIDB_PORT` * `TIDB_USER` * `TIDB_PASSWORD` ## Usage ### 1. Pack (Source Machine) To save your current state and generate a restore code: ```bash python {baseDir}/run.py --action pack ``` **Output:** A connection string (DSN) or a short code. ### 2. Restore (Destination Machine) To load the state on a new machine: ```bash python {baseDir}/run.py --action restore --dsn "mysql+pymysql://..." ``` ## Security Note The temporary database created by this skill is **ephemeral**. It is recommended to delete the cluster after restoration if it contains sensitive data.

path: requirements.txt
content: pymysql


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)