OpenClaw/clawhub-security-signals huggingface dataset:
Skill: emberdesire/exo-installer (version 0.4.1)

# exo-installer Skill **E.x.O. Ecosystem Manager** Install, update, and monitor all E.x.O. tools with a single command. ## When to Use - User wants to install E.x.O. tools (jasper-recall, hopeIDS, context-compactor) - User asks about the E.x.O. ecosystem - User needs to set up OpenClaw plugins - User wants to check health of installed tools ## Quick Start ```bash # Install all public E.x.O. packages npx exo-installer install --all # Or install specific tools exo install jasper-recall exo install hopeIDS exo install jasper-context-compactor # Health check exo doctor exo doctor --json # For automation ``` ## Commands | Command | Description | |---------|-------------| | `exo install --all` | Install all public packages | | `exo install <pkg>` | Install specific package | | `exo update` | Update all installed packages | | `exo doctor` | Health check all components | | `exo doctor --json` | Health check with JSON output | | `exo list` | List available packages | | `exo internal clone` | Clone private repos (needs GitHub access) | ## Available Packages ### Public (npm) | Package | Description | |---------|-------------| | `jasper-recall` | Local RAG system for agent memory | | `hopeIDS` | Behavioral anomaly detection | | `jasper-context-compactor` | Token management for local models | | `jasper-configguard` | Safe config changes with rollback | ### Internal (GitHub) | Repo | Description | |------|-------------| | `hopeClaw` | Meta-cognitive inference engine | | `moraClaw` | Temporal orchestration agent | | `task-dashboard` | Project management system | | `exo-distiller` | Agent distillation pipeline | Internal packages require GitHub org access: ```bash exo internal clone ``` ## Health Check ```bash $ exo doctor 🔍 E.x.O. Health Check jasper-recall ................. ✅ v0.4.2 ChromaDB: ✅ connected Embeddings: ✅ loaded Documents: 847 hopeIDS ...................... ✅ v1.3.3 Analyzer: ✅ ready Models: 3 loaded jasper-context-compactor ...... ✅ v0.2.2 Overall: 3/3 healthy ``` ## Integration After installing, tools auto-register with OpenClaw: ```json { "extensions": { "jasper-recall": { "enabled": true }, "hopeIDS": { "enabled": true }, "jasper-context-compactor": { "enabled": true } } } ``` ## Links - GitHub: https://github.com/E-x-O-Entertainment-Studios-Inc/exo-installer - Docs: https://exohaven.com/products - Discord: https://discord.com/invite/clawd


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: suspicious | SkillSpector: suspicious (MEDIUM)
Skill: sunshine-del-ux/tweet-thread-generator (version 1.0.0)

--- name: tweet-thread-generator description: 将技术文章、博客转换为吸引人的 Twitter/X 推文线程，支持多语言，自动添加话题标签。 metadata: {"clawdbot":{"emoji":"🐦","requires":{},"primaryEnv":""}} --- # Tweet Thread Generator 将技术内容转换为吸引人的 Twitter/X 推文线程。 ## 功能 - 📝 自动生成推文线程 - 🏷️ 自动添加热门话题标签 - ✂️ 智能分段 - 🌐 多语言支持 - 📊 字符数自动优化 - 🎯 吸引人的开场白建议 ## 使用方法 ### 从文本生成 ```bash # 基本用法 tweet-thread-generator "你的技术文章内容" # 指定主题 tweet-thread-generator "文章内容" --topic "AI" # 输出格式 tweet-thread-generator "内容" --format thread ``` ### 从文件生成 ```bash # 从 Markdown 文件 tweet-thread-generator file.md # 从 URL tweet-thread-generator url "https://example.com/article" ``` ### 交互模式 ```bash # 启动交互式生成 tweet-thread-generator interactive # 或简写 tweet-thread-generator -i ``` ## 输出示例 ``` 🧵 关于如何写出更好的代码的 10 个技巧 (1/n) 写代码不仅是完成任务，更是创造艺术品。 以下是我从多年编程经验中总结的 10 条建议👇 (2/n) 1. 先思考，再编码 花时间理解问题再动手，能省下后面几倍的重写时间。 #CodingTips #Programming (3/n) 2. 命名要有意义 ... --- 📝 共 8 条推文 🔥 预计曝光: 10K+ ⏱️ 预计发布时间: 5 分钟 ``` ## 选项 | 选项 | 说明 | 默认值 | |------|------|--------| | `--topic` | 主题标签 | 自动检测 | | `--length` | 线程长度 | auto | | `--tone` | 语气 (funny/serious/educational) | educational | | `--format` | 输出格式 (thread/list) | thread | | `--lang` | 语言 | en | ## 配置 ### 默认设置 ```bash # 设置默认主题 tweet-thread-generator config --default-topic "Tech" # 设置默认语气 tweet-thread-generator config --tone educational # 设置输出格式 tweet-thread-generator config --format thread ``` ### 预设开场白 编辑 `~/.tweet-generator/hooks.txt` 添加自定义开场白： ``` 🔥 你绝对想不到... 💡 5 年程序员的经验分享 🧵 一个让你效率翻倍的方法 ``` ## 使用场景 - 📢 推广技术博客 - 📢 产品发布公告 - 📢 分享学习心得 - 📢 行业见解 - 📢 教程和技巧 ## 变现思路 1. **Twitter API 服务** - 提供批量生成和管理 2. **付费模板** - 专业推文模板 3. **代运营服务** - 为企业运营 Twitter 4. **培训课程** - Twitter 增长黑客课程 5. **联盟营销** - 推荐工具和产品 ## 安装 ```bash # 无需额外依赖 ``` ## 示例 ### 技术教程 ```bash tweet-thread-generator "如何学习 React" --topic "React" --tone educational ``` ### 工具推荐 ```bash tweet-thread-generator "5 个提升效率的开发工具" --topic "DevTools" ``` ### 行业观点 ```bash tweet-thread-generator "AI 不会取代程序员，但..." --topic "AI" --tone serious ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wscats/to (version 1.0.1)

--- name: todo description: A skill for managing todo lists, including creating, updating, deleting, and organizing tasks with priorities and deadlines. license: MIT author: eno tags: productivity, task-management, todo, organization price: 0 --- # Todo Management Skill ## Overview This skill provides a comprehensive todo list management system. It helps users create, organize, and track tasks efficiently with support for priorities, deadlines, categories, and status tracking. ## Features - **Create Tasks**: Add new todo items with title, description, priority, and due date. - **Update Tasks**: Modify existing tasks including status, priority, and details. - **Delete Tasks**: Remove completed or unnecessary tasks. - **List Tasks**: View all tasks with filtering by status, priority, or category. - **Prioritize**: Assign priority levels (high, medium, low) to tasks. - **Categorize**: Organize tasks into custom categories or projects. - **Due Dates**: Set and track deadlines for tasks. - **Status Tracking**: Mark tasks as pending, in-progress, or completed. ## Usage ### Create a new task ``` Add a todo: "Finish project report" with high priority, due 2026-04-10 ``` ### List tasks ``` Show all my pending todos List high priority tasks ``` ### Update a task ``` Mark "Finish project report" as completed Change priority of task #3 to medium ``` ### Delete a task ``` Remove todo "Buy groceries" ``` ## Task Schema | Field | Type | Description | |-------------|----------|--------------------------------------| | id | number | Unique task identifier | | title | string | Task title | | description | string | Detailed task description | | priority | string | high / medium / low | | status | string | pending / in-progress / completed | | category | string | Custom category or project name | | due_date | string | Deadline in YYYY-MM-DD format | | created_at | string | Creation timestamp | | updated_at | string | Last update timestamp | ---


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/romanian (version 1.0.0)

--- name: Romanian description: Write Romanian that sounds human. Not formal, not robotic, not AI-generated. --- ## The Real Problem AI Romanian is technically correct but sounds off. Too formal. Too literary. Natives write more casually, with warmth and expressiveness. Match that. ## Formality Default Default register is too high. Romanian casual is warm and direct. Unless explicitly formal: lean casual. "Salut" not "Bună ziua". "Ok" not "În regulă". ## Tu vs Dumneavoastră Critical distinction: - Dumneavoastră: elderly, very formal, professional - Tu: friends, peers, internet, casual - Romanian internet is almost entirely tu - Dumneavoastră online = very stiff ## Particles & Softeners These make Romanian natural: - Hai: "come on", "let's" ("Hai să mergem") - Măi: casual address ("Măi, ce faci?") - Bre: emphasis, casual - Păi: "well" filler - Deci: "so", transitional ## Fillers & Flow Real Romanian has fillers: - Deci, păi, adică - Uite, auzi, stai - Știi, gen, parcă - Mda, mno ## Expressiveness Don't pick the safe word: - Bine → Super, Grozav, Tare, Mișto - Rău → Nasol, Groaznic, De rahat - Mult → Foarte, Mega, Extrem de ## Common Expressions Natural expressions: - Mișto, Tare, Grozav - Nu-i bai, Nicio problemă - Serios?, Chiar?, Zici? - Gata, Hai, Ok ## Reactions React naturally: - Serios?, Zici?, Nu mai spune! - Vai!, Doamne!, Ce tare! - Mișto!, Grozav!, Super! - Haha, lol in text ## Diminutives Romanian uses diminutives for warmth: - -uț, -uță, -ică endings - Puțin → Puținel, Mamă → Mămică - Adds affection and casualness ## Regional Flavor Moldovan Romanian has some differences: - Some vocabulary varies - Intonation patterns differ - Stay consistent if region known ## The "Native Test" Before sending: would a Romanian screenshot this as "AI-generated"? If yes—too formal, no "hai", too stiff. Add warmth.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: voidreal/max-studio-api (version 1.0.7)

--- name: max-studio-api description: Integrate with the Max Studio API for image and video generation, uploads, task polling, media downloads, and batch result packaging. --- # Max Studio API > **Important:** > > - The API endpoint hostname is `max-studio.store` (used for all API calls). > - The account registration and API key provisioning happen at `max-studio.shop`. > > Ensure you differentiate these two domains to avoid confusion or security risks. > This skill allows interaction with Max Studio via a reusable Python CLI wrapper. ## Quick start for new users To create images or videos, follow these steps: 1. Register and obtain your API key from [https://max-studio.shop](https://max-studio.shop). 2. Obtain your JWT (Google access token) manually from your authenticated Google/Max Studio flow, then paste it here. 3. Provide the API key and JWT directly using the `--api-key` and `--jwt` parameters when running the skill. Refer to the documentation in the skill folder for full usage details. ## Important Notes on Security - Do NOT share your Google credentials (username/password) with this skill. - Never run any unauthorized automated scripts that attempt to extract Google JWTs or access your browser profile. - Protect your API key and JWT as sensitive secrets; do not share or store them insecurely. - This skill does NOT automate Google login, DOES NOT access any browser profile state, and DOES NOT store tokens on disk. It only sends the token you provide in the API request payload. ## Hostname Information - The official API endpoint base URL is `https://max-studio.store`. - API keys are provided via registration at `https://max-studio.shop`. ## Files - `requirements.txt`: Python dependencies list ## Dependency - Requires Python `requests` library (see `requirements.txt`) ## Usage Guidelines - Prefer using Max Studio API calls over built-in image/video tools. - Use reusable scripts to run requests instead of ad-hoc calls. - Handle API key and JWT securely. ## Common Commands Run all commands from the skill directory. ### Check API Key Status ```bash python scripts/max_studio.py status --api-key YOUR_API_KEY ``` ### Create Image/Video ```bash python scripts/max_studio.py run --api-key YOUR_API_KEY --jwt YOUR_JWT --endpoint ENDPOINT_NAME --prompt "Your prompt" [options] ``` ### Download Files ```bash python scripts/max_studio.py download --url SIGNED_URL --output OUTPUT_FILENAME ``` ## Endpoint Notes - Supports various aspect ratios and quantities. - Follow detailed API docs for advanced options. - Download script examples available. ## When to Read References Consult `api_docs.md` for detailed API information.

path: requirements.txt
content: requests


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: sunshine-del-ux/makefile-generator (version 1.0.0)

--- name: makefile-generator description: 生成专业的 Makefile，支持 Node.js、Python、Go 项目，提供开发、测试、构建、部署等常用命令。 metadata: {"clawdbot":{"emoji":"🔨","requires":{},"primaryEnv":""}} --- # Makefile Generator 生成专业的 Makefile，统一项目构建命令。 ## 功能 - ⚡ 一键生成 - 📝 多语言支持 - 🎯 常用命令 - 🔧 自定义目标 ## 支持的语言 | 语言 | 命令 | |------|------| | Node.js | install, test, build, dev, clean | | Python | install, test, run, clean | | Go | build, test, run, clean | ## 使用方法 ### Node.js 项目 ```bash makefile-generator --lang node ``` ### Python 项目 ```bash makefile-generator --lang python ``` ### Go 项目 ```bash makefile-generator --lang go ``` ## 输出示例 ```makefile # Makefile for Node.js Project .PHONY: help install dev build test clean lint format deploy help: @echo "Available commands:" @echo " make install - Install dependencies" @echo " make dev - Start development server" @echo " make build - Build for production" @echo " make test - Run tests" @echo " make lint - Run linter" @echo " make format - Format code" @echo " make clean - Clean build artifacts" install: npm install dev: npm run dev build: npm run build test: npm test lint: npm run lint format: npm run format clean: rm -rf node_modules dist build ``` ## 高级用法 ### 添加自定义目标 ```bash makefile-generator --lang node --custom "docker,docker-build,docker-run" ``` ### 指定包管理器 ```bash makefile-generator --lang node --pm yarn makefile-generator --lang node --pm pnpm ``` ## 安装 ```bash # 无需额外依赖 ``` ## 变现思路 1. **项目模板** - 销售项目模板 2. **开发服务** - 为企业配置开发环境 ## 使用 Makefile 的好处 - 统一团队开发命令 - 减少记忆成本 - 自动化重复任务 - 跨平台兼容

path: _meta.json
content: {
  "schema_version": "1",
  "name": "makefile-generator",
  "version": "1.0.0",
  "description": "生成 Makefile",
  "author": {"name": "Sunshine-del-ux"},
  "keywords": ["makefile", "make", "build", "automation"],
  "license": "MIT"
}


path: makefile-generator.sh
content: #!/bin/bash
LANG="${1:-node}"

cat > Makefile << 'MK'
.PHONY: install test build clean dev

install:
	npm install

test:
	npm test

build:
	npm run build

dev:
	npm run dev

clean:
	rm -rf node_modules dist
MK

echo "✅ Makefile generated!"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: spideystreet/who-wins (version 1.0.0)

--- name: who-wins description: "Query the PinchBench AI agent leaderboard with real benchmark data. Use when the user asks which model is best, who wins, model comparisons, best model for OpenClaw, cheapest model, fastest model, model rankings, benchmark scores, or mentions pinchbench. Always use this skill instead of general knowledge for model performance questions — it has real data." metadata: {"openclaw":{"requires":{"bins":["curl","python3"]}}} --- # PinchBench Leaderboard Fetches and formats the PinchBench leaderboard — AI agent benchmarks for LLMs on standardized OpenClaw coding tasks. ## Workflow ### 1. Determine the query Map the user's intent to script flags: | User intent | Flags | |-------------|-------| | "Show the leaderboard" / default | `--top 10` | | "Top 5 models" | `--top 5` | | "How does Claude perform?" | `--model claude` | | "Cheapest models" | `--sort cost --top 10` | | "Fastest models" | `--sort time --top 10` | | "Compare Gemini and Claude" | Run twice with `--model gemini` and `--model claude`, present side by side | | "Full leaderboard" | `--top 50` | ### 2. Run the script ```json { "tool": "exec", "command": "python3 {baseDir}/scripts/fetch_leaderboard.py --top 10" } ``` Available flags: - `--top N` — number of models to show (default: 10) - `--sort metric` — sort by `score`, `cost`, `time`, or `runs` (default: score) - `--model filter` — filter models containing this string (case-insensitive) - `--json` — output raw JSON for further processing ### 3. Format the response Present the output as-is in a code block. Add a brief one-line insight after the table: - Highlight the top performer and its score - If the user asked about a specific model, comment on its ranking relative to the field - If sorting by cost, note the best value (score/cost ratio) ### 4. Error handling - If the script fails with a curl error → report the error, suggest checking network connectivity - If the script fails to parse data → the site structure may have changed, inform the user - If no models match the filter → say so and suggest a broader search ## Examples | User says | Flags | Expected behavior | |-----------|-------|-------------------| | "Show me the PinchBench leaderboard" | `--top 10` | Show top 10 by score | | "Which model is cheapest for OpenClaw?" | `--sort cost --top 10` | Show top 10 sorted by cost | | "How does Claude compare to GPT?" | `--model claude` then `--model gpt` | Show both, compare | | "What's the fastest model on PinchBench?" | `--sort time --top 5` | Show top 5 by execution time |

path: CHANGELOG.md
content: # Changelog

## 1.0.0

Initial release.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector:  ()
Skill: sky-lv/skylv-api-status-checker (version 1.0.0)

--- name: skylv-api-status-checker slug: skylv-api-status-checker version: 1.0.0 description: "Checks API health and uptime. Monitors endpoints and validates responses. Triggers: check api status, api health, monitor uptime." author: SKY-lv license: MIT tags: [automation, tools] keywords: [automation, tools] triggers: api-status-checker --- # API Status Checker ## Overview Monitors API endpoints for health and uptime. ## When to Use - User asks to "check if API is up" - Debugging API failures ## Status Evaluation 200 in <500ms = HEALTHY 200 in 500ms-2s = DEGRADED 200 in >2s = SLOW 4xx = CLIENT_ERROR 5xx = SERVER_ERROR Timeout = DOWN ## Check Command $result = Invoke-WebRequest -Uri "https://api.example.com/health" -Method GET -TimeoutSec 10 if ($result.StatusCode -eq 200) { "OK" } else { "FAIL: " + $result.StatusCode } ## Alert Thresholds - Response time > 2s = WARNING - 5xx response = CRITICAL - Timeout = CRITICAL


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ker2xu/afrexai-prospect-researcher-temp (version 1.0.0)

--- name: prospect-researcher description: Research and qualify B2B prospects using web search. Builds structured profiles with company intel, key contacts, pain points, and engagement recommendations. --- # Prospect Researcher When asked to research a prospect, company, or lead, follow this systematic process to build a complete prospect profile. ## Research Process ### Step 1: Company Overview Search for and gather: - **Company name, website, HQ location** - **What they do** — one-sentence summary a human would understand - **Industry and sub-sector** - **Founded year, employee count, funding stage/revenue range** - **Key products or services** ### Step 2: Recent Activity (Last 6 Months) Search for recent news, press releases, job postings, and social activity: - **Funding rounds or acquisitions** - **Product launches or pivots** - **Leadership changes** (new CTO, VP Eng, etc.) - **Hiring patterns** — what roles are they hiring for? (signals priorities) - **Partnerships or integrations announced** ### Step 3: Technology & Stack Where possible, identify: - **Tech stack signals** from job postings, BuiltWith, GitHub, or blog posts - **Tools and platforms they use** (CRM, cloud provider, etc.) - **Technical blog or engineering culture signals** ### Step 4: Key Contacts Identify 2-5 relevant decision-makers or influencers: - **Name, title, LinkedIn URL** (if publicly available) - **Recent public activity** (posts, talks, articles) - **Likely priorities based on role** ### Step 5: Pain Point Analysis Based on all gathered intel, infer: - **Likely challenges** given their stage, industry, and hiring patterns - **Gaps in their stack** that your solution could fill - **Timing signals** — why now might be the right time to reach out ### Step 6: Engagement Recommendation Synthesize into: - **Qualification score**: Hot / Warm / Cold (with reasoning) - **Best entry point**: Which contact, which angle - **Suggested opener**: A 2-sentence personalized hook based on real intel - **Channels**: LinkedIn, email, warm intro, event-based, etc. ## Output Format Use the research template at `{baseDir}/research-template.md` as the output structure. Fill in every section. Mark unknowns as "Not found" rather than guessing. ## Guidelines - **Only use publicly available information.** No scraping behind logins. - **Cite sources** — include URLs for key claims. - **Be specific over generic.** "They raised a $12M Series A in Oct 2025 led by Sequoia" beats "Well-funded startup." - **Flag uncertainty.** If a data point is inferred rather than confirmed, say so. - **Prioritize recency.** Information from the last 6 months weighs more than older data. Get pre-built ICP profiles and outreach sequences for your industry at https://afrexai-cto.github.io/context-packs


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: rudagebil11-jpg/a-stock-daily-express (version 1.0.0)

--- name: a-stock-daily-express description: 📈 A股每日快报自动生成 - 自动获取今日大盘行情、涨跌排名、热点板块，一键生成小红书/公众号文章，直接就能发。炒股懒人必备，每天省你半小时整理时间。 --- # 📈 A 股每日快报 - 自动生成 自动获取今日 A 股行情 → 统计涨跌 → 分析热点板块 → 生成适合小红书/公众号的每日快报，直接复制就能发。炒股懒人必备，每天省半小时整理时间。 ## ✨ 特色功能 | 功能 | 说明 | |------|------| | 📊 **自动行情获取** | 自动获取今日大盘点位、涨跌幅、涨跌家数 | | 🏆 **涨跌排名** | 自动统计涨幅榜、跌幅榜前 10 | | 🔥 **热点板块** | 分析今日涨幅靠前板块 | | 📝 **一键生成** | 直接生成小红书/公众号格式文章 | | ✅ **事实核查** | 内置数据验证，保证数据准确 | | 📤 **导出** | 支持 markdown / HTML 导出 | ## 🎨 输出格式支持 | 平台 | 风格 | |------|------| | **小红书** | 短句+emoji+分点清单+自动标签 | | **公众号** | 标题+小标题+适合手机阅读 | | **朋友圈** | 简洁短文+行情要点 | ## 🚀 使用方法 ### 生成今日快报（小红书） ``` a-stock-daily-express 今日 A 股行情快报 --platform xiaohongshu ``` ### 生成公众号版本 ``` a-stock-daily-express 今日收盘总结 --platform wechat ``` ### 手动指定日期 ``` a-stock-daily-express 2026-03-28 --platform xiaohongshu ``` ## 📋 工作流程 1. **获取数据** - 调用 akshare / 东方财富接口获取今日行情 2. **统计分析** - 计算涨跌分布、板块涨幅、排名 3. **生成内容** - 根据平台风格生成对应格式 4. **事实核查** - 验证关键数据一致性 5. **导出成品** - 输出 markdown，直接复制发布 ## 🔧 依赖 - `akshare` - 财经数据接口（需要 `pip install akshare`） - `ai-fact-checker` - 可选，用于数据一致性验证 - 不需要额外 API 密钥，数据免费获取 ## 💡 示例输出（小红书） ``` # 📈 今日 A 股收盘总结 03/28 上证指数: 3050 +0.85% 📈 上涨: 3125 下跌: 1682 🔥 热门板块: - AI 芯片 +3.2% - 消费复苏 +2.1% - 新能源 +1.5% 🏆 涨幅榜 TOP 3: 1. XXX +10% 涨停 2. YYY +9.5% 3. ZZZ +8.8% 💬 今日感想： 人工智能继续发力，板块轮动明显，控制仓位慢慢来～ #A股 #股票 #投资理财 #每日行情 #炒股 ``` ## 📦 安装 ```bash npx clawhub install a-stock-daily-express pip install akshare ``` ## 👨‍💻 Author rudagebil11-jpg ## 📄 License MIT


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: clean (LOW)