OpenClaw/clawhub-security-signals huggingface dataset:
Skill: jpengcheng523-netizen/jpeng-api-tester (version 1.0.0)

--- name: jpeng-api-tester description: "API testing and monitoring skill. Test REST and GraphQL APIs, validate responses, and monitor uptime." version: "1.0.0" author: "jpeng" tags: ["api", "testing", "rest", "graphql", "monitoring", "http"] --- # API Tester Test and monitor REST and GraphQL APIs with validation. ## When to Use - User wants to test an API endpoint - Validate API responses - Monitor API uptime - Run API test suites ## Features - **REST APIs**: GET, POST, PUT, DELETE, PATCH - **GraphQL**: Queries and mutations - **Validation**: JSON Schema, assertions - **Monitoring**: Uptime checks, alerts ## Usage ### Test REST endpoint ```bash python3 scripts/api_test.py \ --method GET \ --url "https://api.example.com/users" \ --expect-status 200 ``` ### POST with body ```bash python3 scripts/api_test.py \ --method POST \ --url "https://api.example.com/users" \ --header "Content-Type: application/json" \ --body '{"name": "Alice"}' \ --expect-status 201 ``` ### Validate response ```bash python3 scripts/api_test.py \ --method GET \ --url "https://api.example.com/users/1" \ --validate '{ "type": "object", "required": ["id", "name"], "properties": { "id": {"type": "integer"}, "name": {"type": "string"} } }' ``` ### Test GraphQL ```bash python3 scripts/api_test.py \ --graphql \ --url "https://api.example.com/graphql" \ --query '{ users { id name } }' ``` ### Run test suite ```bash python3 scripts/api_test.py \ --suite ./tests/api_tests.yaml ``` ### Monitor uptime ```bash python3 scripts/api_test.py \ --monitor \ --url "https://api.example.com/health" \ --interval 60 ``` ## Output ```json { "success": true, "status_code": 200, "response_time_ms": 145, "response": {"id": 1, "name": "Alice"}, "validation_passed": true } ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: plabzzxx/gold-price-report (version 1.1.1)

--- name: gold-price-report description: "Gold/silver price lookup and market brief. Use when the user asks things like 查金价, 黄金多少钱, 今日金价, 白银价格, 品牌金价, 老凤祥/周大福/周生生金价, 沪金/沪银/comex黄金/comex白银, or wants a daily/scheduled gold-price report. Returns three panels: related spot products, physical gold brand prices, and precious-metals futures." --- # Gold Price Report Use the bundled script to fetch three quote panels from a real-time precious-metals quote source. ## What this skill returns - **Related spot products**: 现货黄金、现货白银、现货铂金、现货钯金、中国香港黄金、中国台湾黄金 - **Physical gold brands**: 老凤祥、周大福、周生生、老庙、周六福、六福珠宝、周大生、菜百 - **Precious-metals futures**: 沪金、沪银、comex黄金、comex白银、沪铜 ## Default workflow 1. Run `scripts/fetch_gold_panels.py --format md` for a human-readable report. 2. If the user wants structured output, run with `--format json`. 3. If the user wants only one or two panels, use `--sections` with comma-separated values from: - `related` - `physical` - `futures` 4. Summarize in plain Chinese unless the user asks for raw data only. ## Commands ### Markdown report ```bash python3 skills/gold-price-report/scripts/fetch_gold_panels.py --format md ``` ### JSON output ```bash python3 skills/gold-price-report/scripts/fetch_gold_panels.py --format json ``` ### Only selected panels ```bash python3 skills/gold-price-report/scripts/fetch_gold_panels.py --sections related,physical --format md ``` ## Notes - The underlying quote API is machine-readable. - Prices are fetched from a bundled real-time quote source (see script). - For the `related` and `physical` sections, display **latest price**. - For the `futures` section, display **latest price** and **change percent**. - If a quote is missing, report it as `----` rather than inventing a value. - For scheduled reports, prefer the markdown format and a concise summary.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: adacapo21/cardano-balances (version 1.0.0)

--- name: cardano-balances description: "Query wallet balances, addresses, and UTxOs on the Cardano blockchain." allowed-tools: Read, Glob, Grep license: MIT metadata: author: indigoprotocol version: '0.1.0' openclaw: emoji: "💰" requires: env: [SEED_PHRASE] install: - kind: node package: "@indigoprotocol/cardano-mcp" --- # Cardano Wallet Balances Query wallet balances, addresses, and UTxOs on the Cardano blockchain. ## Prerequisites - `@indigoprotocol/cardano-mcp` server running ## MCP Tools - `get_balances` — Retrieve all balances and native assets for the connected wallet - `get_addresses` — Retrieve all Cardano addresses for the connected wallet - `get_utxos` — Retrieve all UTxOs for the connected wallet ## When to use Use this skill when the user asks about: - Wallet balances or ADA amount - Native tokens or assets in their wallet - Wallet addresses - UTxO details or UTXO inspection ## Data interpretation - Balances are returned in **lovelace** (1 ADA = 1,000,000 lovelace). Always convert to ADA for display. - Native assets are identified by `policyId` + `nameHex`. - The `name` field provides a human-readable label when available.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jinjin2024ux/github-bounty-radar (version 1.0.0)

# GitHub Issue Fix Planner This skill helps developers generate a step-by-step plan to fix a GitHub issue. ## What it does Given a GitHub issue title and description, this skill generates a structured plan to approach the problem. ## Use cases - Open source contributors - Developers working on GitHub issues - Bounty hunters solving GitHub tasks ## Inputs - issue_title: Title of the GitHub issue - issue_description: Description of the GitHub issue ## Output - fix_plan: Step-by-step plan to fix the issue

path: requirements.txt
content: # empty

path: main.py
content: def run(issue_title: str, issue_description: str):
    """
    Generate a simple fix plan for a GitHub issue
    """

    plan = f"""
Issue: {issue_title}

Fix Plan:

1. Read and understand the issue description.
2. Identify the component related to the bug.
3. Reproduce the problem locally.
4. Locate the problematic code.
5. Implement a fix.
6. Add tests if necessary.
7. Submit pull request.

Issue Details:
{issue_description}
"""

    return {
        "fix_plan": plan
    }

path: skill.json
content: {
  "name": "GitHub Issue Fix Planner",
  "description": "Generate a step-by-step plan to fix a GitHub issue.",
  "version": "1.0.0",
  "entrypoint": "main.py",
  "inputs": {
    "issue_title": {
      "type": "string",
      "description": "Title of the GitHub issue"
    },
    "issue_description": {
      "type": "string",
      "description": "Description of the GitHub issue"
    }
  },
  "outputs": {
    "fix_plan": {
      "type": "string",
      "description": "Step-by-step fix plan"
    }
  }
}

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: fhbillwer/ws-calendar (version 1.0.0)

--- AIGC: ContentProducer: Minimax Agent AI ContentPropagator: Minimax Agent AI Label: AIGC ProduceID: [REDACTED_SECRET] PropagateID: [REDACTED_SECRET] ReservedCode1: 3044022071b29b3a35bd2beeff306f79bfeffe2e18517b5d7cbda0df4ebe80d8757d87aa02206e6bcac8c8191e0fc74e441701720991b07d6c6eae64426ae0bea53b825e0e78 ReservedCode2: 304402204397090e3f96286d638117cf444889d113d9bdaa402b72e7e4a92612f9784646022033eeae21a21da47e12e9e594a8c7ee6e28022a1d694852460288ddc624f5d440 description: 日程管理。创建日程、设置提醒、查看安排。 metadata: category: 管理 emoji: "\U0001F4C5" triggers: - 日程 - calendar - 会议 - 预约 - 几点 name: calendar --- # Calendar 技能 帮你管理日程。 ## 功能 - 创建日程 - 设置提醒 - 查看今日/本周安排 - 时间冲突检测 ## 示例 ``` 创建日程：下周三下午3点开会 查看日程：这周有什么安排 提醒我：半小时后提醒我喝水 ``` --- **数据存储**: 日程数据保存在 `/workspace/data/calendar/`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: omactiengartelle/film-photo-generator (version 1.0.0)

--- name: film-photo-generator description: Generate authentic analog-style film photographs with 35mm grain, light leaks, and faded retro color palettes. Perfect for nostalgic portraits, vintage 70s/80s aesthetic photos, Instagram film looks, Kodak Portra style imagery, lomography effects, Fujifilm simulation, and imperfect human photography that beats the polished AI look — ideal for indie creators, film photography enthusiasts, and retro mood boards via the Neta AI image generation API (free trial at neta.art/open). tools: Bash --- # Film Photo Generator Generate authentic analog-style film photographs with 35mm grain, light leaks, and faded retro color palettes. Perfect for nostalgic portraits, vintage 70s/80s aesthetic photos, Instagram film looks, Kodak Portra style imagery, lomography effects, Fujifilm simulation, and imperfect human photography that beats the polished AI look — ideal for indie creators, film photography enthusiasts, and retro mood boards. ## Token Requires a Neta API token (free trial at <https://www.neta.art/open/>). Pass it via the `--token` flag. ```bash node <script> "your prompt" --token YOUR_TOKEN ``` ## When to use Use when someone asks to generate or create ai film photo generator images. ## Quick start ```bash node filmphotogenerator.js "your description here" --token YOUR_TOKEN ``` ## Options - `--size` — `portrait`, `landscape`, `square`, `tall` (default: `portrait`) - `--ref` — reference image UUID for style inheritance ## Install ```bash npx skills add omactiengartelle/film-photo-generator ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: mirni/gh-pipelinegate (version 1.0.0)

--- name: gh-pipelinegate description: "Chain Green Helix tools into multi-step pipelines. Define a sequence of steps (scan-text, scan-skill, check-scope, validate, diff, check-env, convert) and PipelineGate executes them in order. Supports stop-on-error or continue-on-failure modes." metadata: {"openclaw":{"emoji":"⛓️","requires":{"bins":["python"]},"install":[{"id":"pip","kind":"uv","packages":["fastapi","uvicorn","pydantic","pyyaml","jsonschema"]}]}} --- # PipelineGate Chain multiple tools into a single pipeline call. ## Start the server ```bash uvicorn pipelinegate.app:app --port 8011 ``` ## Run a security pipeline ```bash curl -s -X POST http://localhost:8011/v1/run \ -H "Content-Type: application/json" \ -d '{ "steps": [ {"tool": "scan-text", "input": {"text": "Check this text"}}, {"tool": "scan-skill", "input": {"skill_content": "---\nname: test\n---\nHello"}}, {"tool": "check-scope", "input": {"skill_content": "---\nname: test\n---\nHello"}} ] }' | jq ``` Returns `success` (all steps passed), `total_steps`, `completed_steps`, and `results` (output per step). ## Available tools ```bash curl -s http://localhost:8011/v1/tools | jq '.tools[] | "\(.name): \(.description)"' -r ``` Tools: `scan-text`, `scan-skill`, `check-scope`, `validate`, `diff`, `check-env`, `convert`. ## Error handling By default, the pipeline stops on the first error. Set `"stop_on_error": false` to continue: ```bash curl -s -X POST http://localhost:8011/v1/run \ -H "Content-Type: application/json" \ -d '{"steps": [{"tool": "scan-text", "input": {"text": "hi"}}], "stop_on_error": false}' | jq ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: 1kalin/afrexai-stakeholder-report (version 1.0.0)

# Stakeholder Report Generator Generate executive-ready stakeholder reports from raw project data. Covers status updates, risk flags, milestone tracking, budget variance, and next-period outlook. ## When to Use - Weekly/monthly stakeholder updates - Board meeting prep - Investor updates - Client project status reports - Internal leadership briefings ## How It Works The agent structures your raw inputs into a polished report with these sections: ### 1. Executive Summary (3-5 sentences) - What happened this period - Key wins and blockers - Overall health: 🟢 On Track | 🟡 At Risk | 🔴 Off Track ### 2. Milestone Tracker | Milestone | Target Date | Status | Notes | |-----------|------------|--------|-------| | (filled from your input) | | | | ### 3. Budget & Resource Snapshot - Spend vs. budget (% variance) - Burn rate trend - Resource utilization highlights ### 4. Risk Register | Risk | Likelihood | Impact | Mitigation | |------|-----------|--------|------------| | (identified from your input) | H/M/L | H/M/L | Action plan | ### 5. Key Decisions Needed - Decisions that require stakeholder input this period - Deadlines for each decision ### 6. Next Period Outlook - Planned deliverables - Upcoming milestones - Known dependencies ## Usage Tell the agent: ``` Generate a stakeholder report for [project name]. Period: [date range] Key updates: [paste raw notes, metrics, or bullet points] Audience: [board / investors / client / internal leadership] ``` The agent adapts tone and detail level based on audience: - **Board/Investors**: High-level, financial focus, strategic framing - **Client**: Deliverable-focused, professional, no internal details - **Internal leadership**: Candid, operational detail, resource asks ## Tips - Feed it messy notes — the agent structures them for you - Include numbers whenever possible (hours, dollars, percentages) - Mention blockers explicitly — the agent will flag them in the risk register - Run it weekly to build a paper trail of project health over time ## Output Format Markdown by default. Ask for "slide-ready" to get condensed bullet points suitable for presentation decks. --- Built by [AfrexAI](https://afrexai-cto.github.io/context-packs/) — AI Context Packs for business teams that ship.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: brainsoft-raxat/stravacli (version 2.2.98)

--- name: stravacli description: Use the stravacli terminal tool to access Strava data (athlete profile, activities, streams, routes, segments, clubs, gear, uploads) and perform limited write actions (activity update/upload). Trigger when the user asks for Strava metrics/history/exports or wants Strava automation via CLI. --- # stravacli Use `stravacli` for Strava operations from terminal. ## Prerequisites This skill depends on the external CLI project: - Source: https://github.com/Brainsoft-Raxat/strava-cli Install `stravacli` before using this skill: - Recommended (release binary): - Download latest from: https://github.com/Brainsoft-Raxat/strava-cli/releases/latest - Or with Go: - `go install github.com/Brainsoft-Raxat/strava-cli/cmd/stravacli@latest` Then verify binary is available in PATH: - `stravacli --version` ## Setup - Authenticate before data commands: - Local: `stravacli auth login` - Headless/VPS: `stravacli auth login --remote`, then complete with `stravacli auth login --auth-url '<callback-url>'` - Verify auth: `stravacli auth status` ## Read commands (preferred by default) - Athlete profile: `stravacli athlete me --json` - Athlete stats: `stravacli athlete stats --json` - Athlete zones: `stravacli athlete zones --json` - List activities: `stravacli activities list --per-page 10 --json` - Activity details: `stravacli activities get <id> --json` - Activity laps: `stravacli activities laps <id> --json` - Activity streams: `stravacli activities streams <id> --json` - Routes list/get: `stravacli routes list --json` / `stravacli routes get <id> --json` - Export route file: `stravacli routes export <id> --format gpx --out ./route.gpx` - Segments/starred/explore: `stravacli segments starred --json`, `stravacli segments explore --bounds <swlat,swlng,nelat,nelng> --json` - Clubs: `stravacli clubs list --json` - Gear: `stravacli gear get <id> --json` - Upload status: `stravacli uploads get <uploadId> --json` ## Write commands (ask/confirm first) - Update activity metadata: `stravacli activities update <id> --name 'New name' --description '...'` - Upload activity file: `stravacli activities upload --file ./run.fit --yes --json` Always confirm intent before write actions. ## Output conventions - Use `--json` when results need parsing or reuse. - Keep user summaries concise; include key metrics and IDs. - If a command fails with auth errors, suggest `stravacli auth status` then re-login.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: songsongjiang/customer-onboarding-guider (version 1.0.0)

--- name: customer-onboarding description: 引导客户了解财资管理系统的对接开发测试流程。使用当客户询问：(1) 如何对接系统，(2) 开发测试流程是什么，(3) 上线步骤，(4) 需要做什么准备，(5) 对接周期多长时。 --- # 客户对接开发测试流程引导技能 ## 用途 本技能用于向客户清晰展示财资管理系统的完整对接流程，帮助客户了解从开始对接到正式上线的每个步骤、工作内容和双方职责。 ## 使用方式 ### 1. 客户询问完整流程 当客户询问"如何对接"、"流程是什么"时： 1. 读取 `references/onboarding-process.md` 获取完整流程 2. 以清晰的步骤展示给客户（8 个步骤） 3. 说明每个步骤的工作内容、执行方和配合方 4. 告知客户当前所处阶段和下一步工作 ### 2. 客户询问特定步骤 当客户询问某个具体步骤（如"测试怎么做"、"上线需要什么"）时： 1. 定位到对应步骤 2. 详细说明该步骤的具体工作内容 3. 告知客户需要配合的事项 ### 3. 客户询问职责分工 当客户询问"我们需要做什么"、"银行负责什么"时： 1. 明确说明企业方和银行方的职责 2. 列出客户需要完成的具体任务 ## 对接流程概览 | 序号 | 工作内容 | 执行方 | 配合方 | |-----|---------|-------|-------| | 1 | 确定使用接口 | 企业 | 银行 | | 2 | 网络接入信息 | 企业 | 银行 | | 3 | 客户访问服务器信息 | 企业 | 银行 | | 4 | 开通测试网络 | 银行 | 企业 | | 5 | 提供测试数据 | 银行 | 企业 | | 6 | 联调测试 | 企业 | 银行 | | 7 | 生产上线 | 企业 | 银行 | | 8 | 上线验证 | 企业 | 银行 | ## 输出格式建议 ### 完整流程展示 ``` ## 财资系统对接流程（共 8 步） ### 第 1 步：确定使用接口 📋 - **工作内容**：根据实际业务场景，确定使用哪些接口 - **执行内容**：银行提供相应的接口文档及外部系统接入确认单，企业确定使用的接口（填写联机交易） - **执行方**：企业 - **配合方**：银行 ### 第 2 步：网络接入信息 🌐 - **工作内容**：填写第三方网络信息 - **执行方**：企业 - **配合方**：银行 ...（继续展示所有步骤） ``` ### 单步骤说明 ``` ## 第 X 步：[步骤名称] **工作内容**：... **执行内容**：... **您需要做**：... **银行配合**：... **预计时间**：... ``` ## 注意事项 - 整个流程通常需要 2-4 周，具体取决于客户开发进度 - 第 6 步联调测试是关键环节，建议客户预留充足时间 - 生产上线前必须完成所有测试用例验证 - 上线验证建议使用小额交易进行测试 ## 相关文件 - `references/onboarding-process.md` - 完整对接流程文档 - `references/checklist.md` - 客户准备工作清单 - `references/faq.md` - 常见问题解答


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: odrobnik/george (version 1.5.4)

--- name: george description: "Automate George online banking (Erste Bank / Sparkasse Austria): login/logout, list accounts, and fetch transactions via Playwright." summary: "George banking automation: login, accounts, transactions." version: 1.5.4 homepage: https://github.com/odrobnik/george-skill metadata: openclaw: emoji: "🏦" requires: bins: ["python3", "playwright"] python: ["playwright"] --- # George Banking Automation Fetch current account balances, stock portfolio, and transactions for all account types (checking, savings, depots) in JSON format for automatic processing. Uses Playwright to automate George (Erste Bank / Sparkasse Austria). **Entry point:** `{baseDir}/scripts/george.py` ## Setup See [SETUP.md](SETUP.md) for prerequisites and setup instructions. ## Commands ```bash python3 {baseDir}/scripts/george.py login python3 {baseDir}/scripts/george.py logout python3 {baseDir}/scripts/george.py accounts python3 {baseDir}/scripts/george.py transactions --account <id|iban> --from YYYY-MM-DD --until YYYY-MM-DD python3 {baseDir}/scripts/george.py datacarrier-list [--json] [--state OPEN|CLOSED] python3 {baseDir}/scripts/george.py datacarrier-upload <file> [--type pain.001] [--out <dir>] [--wait-done] [--wait-done-timeout 120] python3 {baseDir}/scripts/george.py datacarrier-sign <datacarrier_id> [--sign-id <id>] [--out <dir>] ``` ## Recommended Flow ``` login → accounts → transactions → portfolio → logout login → datacarrier-upload → datacarrier-sign → logout ``` Always call `logout` after completing all operations to clear the stored browser session (cookies, local storage, Playwright profile). This minimizes persistent auth state on disk. ## Notes - Session state stored in `{workspace}/george/` with restrictive permissions (dirs `700`, files `600`). - Ephemeral exports default to `/tmp/openclaw/george` (override with `OPENCLAW_TMP`).


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: jarviyin/clawpk-marketplace (version 5.0.0)

--- name: clawpk-marketplace version: 5.0.0 description: A2A task marketplace - browse, accept, complete tasks, earn USDC via x402 author: ClawPK apiBase: https://clawpk.ai requiredEnv: - WALLET_ADDRESS: Your agent's wallet address for identity and receiving rewards - WALLET_PRIVATE_KEY: For signing registration message (never sent to server, only used locally) --- # ClawPK Marketplace Skill ## Setup Your agent needs a wallet on Base chain for receiving USDC rewards. Registration uses EIP-191 wallet signature for identity verification. ## Methods ### register() Register with wallet signature. Returns agent profile with verified status and badges. POST /api/agents/register Body: { name, model, skills, walletAddress, signature, message } ### browseTasks(filter?) List available tasks. filter: { status?, limit?, offset? } GET /api/tasks?status=open ### acceptTask(taskId) Claim an open task. High-value tasks (>=$50) require trusted-agent badge. POST /api/tasks/{id}/accept Body: { agentId } ### submitProof(taskId, txHash) Submit completion proof. txHash must be unique (replay prevention enforced). POST /api/tasks/{id}/submit Body: { agentId, txHash } ### verifyTask(taskId) Verify proof and settle USDC payment to executor. POST /api/tasks/{id}/verify ### postTask(task) Post task with USDC escrow via x402 protocol on Base. POST /api/tasks (returns 402 → attach X-Payment header with x402 proof) Body: { title, description, requiredSkills, reward, sponsorId, verificationMethod, deadline } ### getLeaderboard(type) Get top agents. type: "sponsors" | "earners" GET /api/leaderboard/{type} ### health() Service health check. GET /api/health


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: xueyetianya/github-readme-maker (version 1.0.0)

--- name: github-readme-maker description: "Beautify Github Profile — Beautify GitHub Profile — README generator. Automated tool for beautify-github-profile tasks. Use when you need Beautify Github Profile capabilities." runtime: bash license: MIT --- # Beautify Github Profile Beautify GitHub Profile — README generator ## Why This Skill? - Inspired by popular open-source projects (thousands of GitHub stars) - No installation required — works with standard system tools - Real functionality — runs actual commands, produces real output ## Commands Run `scripts/beautify_github_profile.sh <command>` to use. - `generate` — <username> Generate profile README - `badges` — <topics> Generate badge collection - `stats` — <username> GitHub stats card markdown - `streak` — <username> Streak stats markdown - `languages` — <username> Top languages card - `social` — <platform> <u> Social badge - `header` — <text> Animated header - `template` — <style> Full template (minimal/developer/creative) - `info` — Version info ## Quick Start ```bash beautify_github_profile.sh help ``` --- > **Disclaimer**: This skill is an independent, original implementation. It is not affiliated with, endorsed by, or derived from the referenced open-source project. No code was copied. The reference is for context only. Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)