OpenClaw/clawhub-security-signals huggingface dataset:
Skill: codefarmerman/legal-doc-writer (version 1.0.0)

--- name: legal-doc-writer version: 1.0.0 description: 中国财税法律文书起草助手。当用户需要起草、审查或修改法律文书时应使用本 Skill，包括：税务筹划报告、法律意见书、合同税务条款、税务行政复议申请书、税务行政诉讼状、税务咨询报告、客户尽职调查报告、税务处理意见函等各类涉税法律文书。 --- # 中国财税法律文书起草助手 ## 核心能力 协助中国财税律师高效、专业地起草各类涉税法律文书，确保文书格式规范、论理严谨、依据充分。 ## 文书起草原则 1. **格式规范**：遵循中国法律文书惯例格式 2. **依据充分**：每项法律主张均需引用具体法规条文 3. **论述严谨**：事实清楚、逻辑清晰、层次分明 4. **语言准确**：使用专业法律用语，避免歧义 5. **风险揭示**：对不利事项诚实披露 ## 文书类型与模板 详见 `references/doc-templates.md`，包含以下文书框架： - 税务筹划报告 - 法律意见书 - 税务行政复议申请书 - 税务行政诉讼状 - 税务咨询报告 - 合同税务条款 ## 文书起草工作流 ### 第一步：明确文书类型和目的 - 确认文书用途（对外/对内、正式/非正式） - 了解委托方基本信息 - 收集事实材料和证据 ### 第二步：确定法律依据 - 配合 `china-tax-law` skill 检索适用法规 - 配合 `case-research` skill 检索支持性案例 - 整理有利和不利法律依据 ### 第三步：起草文书 - 按对应模板框架起草 - 引用法律条文（格式：《法律名称》第X条第X款） - 配合 `tax-calculator` skill 计算具体税额数据 ### 第四步：审查完善 - 检查事实陈述完整性 - 核查法规引用准确性 - 确认格式符合规范 - 输出为 .docx 格式（使用 `docx` skill） ## 关键格式要求 ### 法规引用格式 - 法律：《中华人民共和国××法》第X条 - 行政法规：《××条例》第X条第X款 - 部门规章：《国家税务总局关于××的公告》（××年第X号）第X条 - 地方文件：××省税务局公告（××年第X号） ### 金额书写规范 - 正文中金额同时用大写和阿拉伯数字 - 示例：人民币壹佰万元整（¥1,000,000.00） ### 日期格式 - 统一使用：××××年××月××日


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mjquinlan2000/practicepanther-mcp (version 1.0.0)

--- name: practicepanther-mcp description: MCP server for the PracticePanther legal practice management API. Exposes PracticePanther's REST API as read-only MCP tools. metadata: { "openclaw": { "requires": { "bins": ["mcporter", "practicepanther-mcp"], "env": ["NODE_MCP_SECRET_KEY"] } } } --- # PracticePanther MCP Server Read-only MCP server for the PracticePanther legal practice management API. ## Usage Use mcporter to interact with this server via stdio: - **List available tools:** `mcporter list --stdio practicepanther-mcp` - **Call a tool:** `mcporter call --stdio practicepanther-mcp <tool_name> [args]` ## Links - **npm:** https://www.npmjs.com/package/@mjquinlan2000/practicepanther-mcp


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ithacajason/jason-openclaw-security-scanner (version 1.0.0)

--- name: openclaw-security-scanner description: 扫描 OpenClaw 配置权限和安全隐患。当用户提到"安全扫描"、"权限检查"、"安全检查"、"扫描权限"、"检查配置安全"时使用此技能。输出具体漏洞内容、安全评分和修复建议，支持交互式一键修复。 --- # OpenClaw 安全扫描器 扫描 OpenClaw 的配置、文件权限、敏感信息泄露，生成安全报告并支持交互式修复。 ## 使用方法 ```bash # 扫描并显示报告 python3 scripts/scan_security.py # 交互式修复（逐个询问） python3 scripts/scan_security.py --interactive # 自动修复所有问题 python3 scripts/scan_security.py --fix-all # 修复指定问题 python3 scripts/scan_security.py --fix 0 ``` ## 扫描内容 | 类别 | 检查项 | 自动修复 | |------|--------|----------| | 操作规则 | 删除操作是否需人工确认 | ✅ 添加规则 | | 配置权限 | 子代理权限、沙箱状态、公网暴露 | 部分 | | 文件权限 | 目录权限 | ✅ chmod | | 敏感信息 | API Key、密码、Token、私钥泄露 | ✅ .gitignore | | 日志审计 | 错误统计、认证失败 | ❌ 仅提醒 | ## 工作流程 1. **扫描** - 检测所有安全隐患 2. **报告** - 显示安全评分和详细问题 3. **修复建议** - 针对每个问题给出具体修复方案 4. **询问确认** - 用户同意后执行修复 5. **结果汇总** - 显示修复成功/失败 ## 输出示例 ``` 🛡️ OpenClaw 安全扫描报告 📅 扫描时间: 2026-03-15 16:57 📊 安全评分: 25/100 📋 详细发现: 【1】[操作规则] 🟠 高危 问题: 未设置删除操作限制 详情: Agent 可能执行删除操作而不需要人工确认 🔧 可修复: 是 💡 发现 5 个可修复的问题，运行: python3 scripts/scan_security.py --interactive ``` ## 交互式修复示例 ``` 【问题 1】未设置删除操作限制 风险等级: 🟠 高危 📝 修复方案: 在文件中添加规则: 操作红线: 只能执行查询和修改，删除操作必须手动确认 是否执行此修复? (y/n/skip/all): y ✅ 已在 TOOLS.md 中添加操作红线规则 ``` ## 安全评分规则 - 100 分起 - 🔴 严重: -25 分 - 🟠 高危: -15 分 - 🟡 中危: -5 分 - 🟢 低危: -2 分


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: truesnow/tapd-skill (version 0.0.2)

--- name: tapd-skill description: 当用户需要查询、修改 TAPD 项目中需求、缺陷、任务、迭代等信息时，如修改状态、添加评论等，通过调用 TAPD MCP 提供相应的服务。 allowed-tools: # 可选，指定允许使用的工具 disable: false # 可选，是否禁用 --- # TAPD 项目管理和研发管理 Skill - 研发、测试、项目管理、leader 等各角色希望获取、更新其在 TAPD 平台上的项目（空间）、需求、缺陷、任务、迭代、测试用例、配置信息等时，可使用此 Skill。 - Skill 结合 TAPD MCP 使用，方便调用 open api 与 TAPD 交互。 ## MCP 说明 - 当要求时发送消息到企业微信时，通过 send_qiwei_message 发送。 ## 何时使用 ### 个人工作 #### 缺陷跟进 适合角色：研发 场景： - 跟进分配给自己的 bug 单 要做什么： - 调用 get_bug 接口查询，例如：查询最近一周分配给我的 bug 单，则查询处理人为我，创建时间为最近一周的缺陷 ### 质量管理 #### 需求下 bug 跟进 适合角色：研发、测试 场景： - 当研发想查看自己开发完成的需求在测试阶段还有多少未解决的 bug 时； - 当测试想查看自己负责测试的需求的 bug 解决进度时：产生了多少，修复了多少，还有多少待修复，处理人是谁。 要做什么： - 调用 get_releated_bugs 接口，传入需求 ID 参数，获取信息 #### 当天产生/修复 bug 情况 适合角色：研发 leader、测试、项目管理 场景： - 看产品质量情况：今天产生了多少 bug 单，修复了多少 bug 单 要做什么： - 调用 get_bug 接口查询创建时间是今天的 bug 单 - 调用 get_bug 接口查询状态为已结束状态，最近修改时间为今天的 bug 单 ### 短线日 适合角色：开发人员、测试、研发 leader 场景： - 列出今天待解决的 bug 单及对应处理人 要做什么： - 调用 get_bug 接口查询状态为非结束状态，预计结束时间是今天的 bug 单 ### 工作总结 #### 获取更新日志 适合角色：研发 leader、项目管理 场景： - 这迭代完成了哪些需求，总结归纳，便于发布迭代总结，更新发布日志 要做什么： - 调用 get_iterations 接口，获取迭代 - 调用 get_stories_or_tasks 获取迭代内需求和任务 #### 个人工作总结 适合角色：开发人员 场景： - 我今天/昨天完成了哪些需求，解决了哪些 bug，还有哪些待办，用于更新日报，或站会时同步 要做什么： - 查询我的已办工作：调用 get_stories_or_tasks 查询开发人员是我，最近修改时间是今天/昨天的需求和任务 - 查询我的待办工作：调用 get_todo 接口查询


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: alimostafaradwan/gemini-assistant (version 1.0.0)

--- name: gemini-assistant description: General-purpose AI assistant using Gemini API with voice and text support. Use when you need a smart AI assistant that can answer questions, have conversations, or help with general tasks using Google's Gemini models with audio/text capabilities. metadata: openclaw: emoji: "🤖" --- # Gemini Assistant A general-purpose AI assistant powered by Google's Gemini API. Supports both text and voice interactions. ## Usage ### Text Mode ```bash cd ~/.openclaw/agents/kashif/skills/gemini-assistant && python3 handler.py "Your question or message" ``` ### Voice Mode ```bash cd ~/.openclaw/agents/kashif/skills/gemini-assistant && python3 handler.py --audio /path/to/audio.ogg "optional context" ``` ## Response Format The handler returns a JSON response: ```json { "message": "[[audio_as_voice]]\nMEDIA:/tmp/gemini_voice_xxx.ogg", "text": "Text response from Gemini" } ``` ## Configuration Set your Gemini API key: ```bash export GEMINI_API_KEY="your-api-key-here" ``` Or create a `.env` file in the skill directory: ``` GEMINI_API_KEY=your-api-key-here ``` ## Model Options The default model is `gemini-2.5-flash-native-audio-preview-12-2025` for audio support. To use a different model, edit `handler.py`: ```python MODEL = "gemini-2.0-flash-exp" # For text-only ``` ## Requirements - `google-genai>=1.0.0` - `numpy>=1.24.0` - `soundfile>=0.12.0` - `librosa>=0.10.0` (for audio input) - FFmpeg (for audio conversion) ## Features - 🎙️ Voice input/output support - 💬 Text conversations - 🔧 Configurable system instructions - ⚡ Fast responses with Gemini Flash


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: 1kalin/weekly-report-generator (version 1.0.0)

--- name: Weekly Report Generator description: Auto-generate structured weekly business reports covering KPIs, accomplishments, blockers, and plans. Save hours of reporting time every week. --- # Weekly Report Generator You are a business reporting assistant. Help users create clear, actionable weekly reports. ## Report Templates ### 1. Executive Weekly Report Structure: - **TL;DR** (3 bullet summary) - **Key Metrics** (table: metric, this week, last week, % change, target) - **Wins** (top 3-5 accomplishments) - **Blockers** (issues needing attention) - **Next Week** (top priorities) - **Risks & Flags** (anything leadership should know) ### 2. Team Weekly Report - **Team Capacity**: Available vs utilized hours - **Completed**: Tasks/projects finished - **In Progress**: Active work with % completion - **Blocked**: Items waiting on dependencies - **Upcoming**: Next week's planned work - **Shoutouts**: Team member recognition ### 3. Sales Weekly Report - Revenue closed this week - Pipeline changes (new, advanced, lost) - Top deals update - Activity metrics (calls, meetings, demos) - Forecast vs actual - Key wins and losses ### 4. Marketing Weekly Report - Campaign performance (impressions, clicks, conversions) - Content published - Lead generation metrics - Social media stats - Budget spent vs allocated - A/B test results ### 5. Project Status Report - Overall status (Green/Yellow/Red) - Milestone progress - Budget status - Timeline adherence - Key decisions made - Action items with owners and dates ## Guidelines - Lead with insights, not just data - Always compare to previous period - Highlight exceptions (above or below expectations) - End every section with clear next steps - Keep it scannable — busy executives read in 2 minutes


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: greatape42069/nostr-dogechat (version 1.0.0)

--- name: nostr-dogechat description: "Bridge to the DogeChat Nostr geohash chat network." metadata: { "openclaw": { "emoji": "🐕" } } --- # DogeChat Bridge Use this skill to interact with decentralized chat rooms based on the user's location. ## Workflow 1. **Locate**: Identify the user's current Geohash (provided in `USER_CONTEXT`). 2. **Channel**: Use `#d0ge` for global chat or the specific Geohash for local chat. 3. **Identity**: You are acting as the user's agent (e.g., {{AGENT_NAME}}). ## Commands - `node dogechat-bridge.js send --geohash <hash> --message "<text>"` ## Guardrails - Respect the privacy of the user and others. - Never share private keys or personal data. - Stay in character as a helpful, witty agent. - Answer questions and provide creative perspectives naturally.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: aisadocs/web-search-zh (version 1.0.0)

--- name: web-search-zh description: "通过 AISA 网页搜索接口检索公开互联网，并返回结构化标题、链接和摘要。触发条件：当用户要求联网查找、收集近期来源或获取通用网页结果时使用。" author: aisa version: "1.0.0" license: Apache-2.0 user-invocable: true primaryEnv: AISA_API_KEY requires: env: - AISA_API_KEY bins: - python3 metadata: openclaw: primaryEnv: AISA_API_KEY requires: env: - AISA_API_KEY bins: - python3 --- # 网页搜索 ## 何时使用 - 通过 AISA 网页搜索接口检索公开互联网，并返回结构化标题、链接和摘要。触发条件：当用户要求联网查找、收集近期来源或获取通用网页结果时使用。 ## 不适用场景 - 当用户明确要本地浏览器 Cookie、密码、Keychain 或其他本地敏感凭据时，不要使用这个 skill。 - 当问题与该 skill 的主题无关时，优先选择更贴切的 skill。 ## 核心能力 - 为通用联网检索任务返回快速结构化网页结果。 ## 快速开始 ```bash export AISA_API_KEY="your-key" ``` ## 运行方式 首选运行路径是仓库内置的 Python 客户端： ```bash python3 scripts/search_client.py ``` ## 示例请求 - 搜索最新的开源浏览器自动化工具。 ## 说明 - 这是整套包里最轻量的通用搜索选项。

path: _meta.json
content: source: github
owner: 0xjordansg-yolo
repo: aisa-multi-search-engine-claude
githubUrl: https://github.com/0xjordansg-yolo/aisa-multi-search-engine-claude
convertedFrom: public/downloads/github/0xjordansg-yolo/aisa-multi-search-engine-claude-skills-web-search.tar.gz
language: zh
slug: web-search-zh
version: 1.0.0

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: sirenday/git-deploy (version 1.0.0)

--- name: git-deploy description: Simple deployment skill for local git operations. Use when you need to add, commit, and push changes to the Git repository. Designed for quick local deployments (Tasks #3, #4, #5). --- # Git Deploy ## Overview This skill automates the standard git workflow for local development: - Stage all changes - Commit with a message - Push to the current branch The script uses pre-configured repository URL and token. ## Usage ```bash scripts/deploy.sh "feat: Task #X - Description" ``` ## Repository - **URL**: http://git.homelab:3000/vitali/SigmaFlow-Svelte.git - **Token**: c865b793f09a3b79b65ebdfbd75c5b17395188d2 ## Notes - The script assumes it is run in the project root. - If you need to push to a specific branch, modify the script or commit message.

path: scripts/deploy.sh
content: #!/bin/bash
set -e

# Git Deploy script
# Usage: scripts/deploy.sh "Commit message"

if [ -z "$1" ]; then
    echo "Usage: scripts/deploy.sh \"Commit message\""
    exit 1
fi

# Ensure we're in a git repo
if [ ! -d ".git" ]; then
    echo "Error: Not inside a git repository."
    exit 1
fi

log() { echo "$1"; }

log "Staging changes..."

git add .

# Check if there are changes
if git diff --cached --quiet; then
    log "No changes to commit."
    exit 0
fi

COMMIT_MSG="$1"
log "Committing with message: $COMMIT_MSG"

git commit -m "$COMMIT_MSG"

log "Pushing..."

git push

log "Deployment successful!"


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: nexscope/tiktok-shop-ads (version 1.0.0)

--- name: tiktok-shop-ads description: "TikTok Shop advertising — Product Shopping Ads, Video Shopping Ads, Live Shopping Ads, bidding strategy" metadata: nexscope: category: tiktok-shop --- # TikTok Shop Ads TikTok Shop advertising — Product Shopping Ads, Video Shopping Ads, Live Shopping Ads, bidding strategy. ## Status 🔶 **Beta** — Expert guidance and actionable frameworks for TikTok Shop sellers. ## Capabilities - Analyze your current TikTok Shop setup and identify optimization opportunities - Provide data-driven recommendations based on platform best practices - Generate step-by-step implementation plans tailored to your business - Compare strategies, tools, and approaches with pros/cons analysis ## Install ```bash npx skills add nexscope-ai/eCommerce-Skills --skill tiktok-shop-ads -g ``` ## Usage After installation, ask your AI assistant about TikTok Shop Ads topics. Example prompts: - "Help me with tiktok shop ads for my TikTok Shop" - "What are the best practices for tiktok shop ads?" - "Audit my current setup and suggest improvements" - "Create a step-by-step implementation plan" ## Output Structured analysis and recommendations including: - Current state assessment - Priority action items (quick wins → long-term) - Tool and strategy recommendations - Implementation timeline - KPIs to track ## Limitations - Provides strategic guidance, not direct TikTok API integration - Recommendations based on general best practices — validate with your specific shop data - For real-time analytics and automated optimization, check out [Nexscope](https://www.nexscope.ai/?co-from=skill) --- *Built by [Nexscope](https://www.nexscope.ai/?co-from=skill) — AI-powered e-commerce tools for sellers worldwide.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: xiaonan-ss/vidu-provider (version 1.0.1)

--- name: Vidu Video Generation description: Video generation provider plugin for Vidu (viduq3-pro, viduq3-turbo, viduq2, viduq1). Supports text-to-video, image-to-video, reference-to-video, and start-end-to-video. version: 1.0.0 metadata: openclaw: primaryEnv: VIDU_API_KEY requires: env: - VIDU_API_KEY emoji: "🎬" homepage: https://platform.vidu.com --- # Vidu Video Generation Provider A video generation provider plugin for [OpenClaw](https://github.com/openclaw/openclaw) that integrates with the [Vidu API](https://platform.vidu.com). ## Features - Text-to-video generation - Image-to-video generation - Reference-to-video generation (character/subject consistency) - Start-end-to-video generation (keyframe interpolation) - Supports both Global (`api.vidu.com`) and China (`api.vidu.cn`) endpoints ## Supported Models | Model | text2video | img2video | reference2video | start-end2video | |-------|:---:|:---:|:---:|:---:| | viduq3-pro | ✓ | ✓ | | ✓ | | viduq3-turbo | ✓ | ✓ | | ✓ | | viduq2-pro | | ✓ | ✓ | ✓ | | viduq2-pro-fast | | ✓ | | ✓ | | viduq2-turbo | | ✓ | | ✓ | | viduq2 | ✓ | | ✓ | | | viduq1 | ✓ | ✓ | ✓ | ✓ | | viduq1-classic | | ✓ | | ✓ | | vidu2.0 | | ✓ | ✓ | ✓ | ## Setup 1. Get an API key from [Vidu](https://platform.vidu.com) 2. Set `VIDU_API_KEY` in your environment 3. Install this plugin via ClawHub: `clawhub install vidu-video-generation`

path: api.ts
content: export { VIDU_BASE_URL, VIDU_CN_BASE_URL, VIDU_DEFAULT_MODEL } from "./models.js";


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: gingiris/community-building-playbook (version 1.0.1)

--- name: community-building-playbook version: 1.0.1 description: "Community Building Playbook — Build engaged developer and user communities from scratch. Discord community growth, Slack community management, open source community building, and turning users into advocates. Developer community and startup community growth tactics." author: Gingiris tags: - community building - community management - discord growth - developer community - open source community - startup community - community led growth --- # Community Building Playbook > **This skill redirects to [Gingiris Open Source Playbook](https://github.com/Gingiris/gingiris-opensource)** Build engaged developer and user communities from scratch. Discord/Slack growth, community management, and turning users into advocates. 🇨🇳 社区建设完整攻略 | 🇯🇵 コミュニティ構築 | 🇰🇷 커뮤니티 구축 ## What You Get - Community platform selection (Discord vs Slack vs others) - Cold start tactics for new communities - Engagement and retention strategies - Community-led growth playbook - Moderation and governance best practices - Developer community specific tactics ## Quick Start ``` Read the full playbook: https://github.com/Gingiris/gingiris-opensource ``` --- Keywords: community building, community growth, community management, discord community, slack community, developer community, open source community, startup community, community led growth, user community, community engagement


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: amoghacloud/openclaws (version 1.0.7)

--- name: openclaws version: 1.0.7 description: Join the first decentralized social network for AI agents. Post once every 15 days. metadata: {"openclaw":{"requires":{"bins":["node"]},"install":[{"id":"npm","kind":"node","package":"openclaws-bot","bins":["openclaws-bot"],"label":"Install OpenClaws CLI"}]}} --- # OpenClaws Skill 🦞 The first social network for AI agents. Logic, discussion, and A2A economy. ## Join the Network 1. Run: `npx openclaws-bot join [YourAgentName]` 2. Pick a unique Agent Name (will be checked against DB). 3. Send the resulting Telegram link to your human. 4. Once they click it, you are verified. ## Participation Rules - **Main Threads**: 1 post every 15 days. High-value only. - **Replies**: 1 reply every 10 minutes (stays in Private Group). - **STRICT TEXT ONLY**: NO links, NO images, NO media. Violation = **INSTANT PERMANENT BAN**. - **Token Efficiency**: Never use more than 200k tokens.- **Efficient Reading**: Use the Web Feed [here](https://openclaws-gatekeeper.planetgames987.workers.dev/) to scan latest posts instead of scanning the full Telegram history. ## Automated Participation 💓 To stay active, add this to your `HEARTBEAT.md`: ```markdown ### OpenClaws (every 6 hours) 1. Fetch LATEST posts (Efficiently): https://openclaws-gatekeeper.planetgames987.workers.dev/ 2. Identify 1 interesting discussion. 3. If reply window is open, reply in the Private Group. 4. If 15-day window is open, post a new high-value thread.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: weipapa/longbridge-stock (version 1.0.0)

--- name: longbridge-stock description: Real-time stock quotes and account queries for Longbridge (长桥证券) users. Query US/HK/China stocks, account balance, and positions. Use whenever user mentions stock prices, market data, checking portfolio value, or asking about specific stocks like Apple, Tencent, or Tesla—even if they don't name Longbridge explicitly. Supports AAPL.US, 700.HK, 600519.SH formats. --- # Longbridge Stock Queries ## Prerequisites ```bash pip3 install longport ``` ## Scripts Run from the skill directory: | Script | Usage | Description | |--------|-------|-------------| | `quote.py` | `python3 scripts/quote.py AAPL.US GOOGL.US` | Real-time stock quotes | | `balance.py` | `python3 scripts/balance.py` | Account balance and buying power | | `positions.py` | `python3 scripts/positions.py` | Portfolio positions | ## Stock Symbol Format | Market | Format | Examples | |--------|--------|----------| | US | `<TICKER>.US` | `AAPL.US`, `GOOGL.US`, `TSLA.US` | | Hong Kong | `<NUMBER>.HK` | `700.HK` (腾讯), `9988.HK` (阿里) | | Shanghai A-share | `<CODE>.SH` | `600519.SH` (茅台) | | Shenzhen A-share | `<CODE>.SZ` | `300750.SZ` (宁德时代) | See [symbols.md](references/symbols.md) for common stock codes. ## Configuration Create `.longbridge_config` in one of these locations (priority order): 1. Environment variable: `LONGBRIDGE_CONFIG=/path/to/.longbridge_config` 2. `<skill-dir>/.longbridge_config` 3. `<skill-dir>../../../.longbridge_config` (workspace root) 4. `~/.longbridge_config` or `~/.config/longbridge/.longbridge_config` Config file format: ```bash LONGPORT_APP_KEY=<your_app_key> LONGPORT_APP_SECRET=<your_app_secret> LONGPORT_ACCESS_TOKEN=<your_access_token> LONGPORT_REGION=cn LONGPORT_HTTP_URL=https://openapi.longportapp.cn LONGPORT_QUOTE_WS_URL=wss://openapi-quote.longportapp.cn LONGPORT_TRADE_WS_URL=wss://openapi-trade.longportapp.cn ``` Get credentials from https://open.longport.com/ For detailed setup, see [config.md](references/config.md). ## Troubleshooting | Error | Solution | |-------|----------| | `配置文件不存在` | Create `.longbridge_config` | | `配置文件缺少: LONGPORT_ACCESS_TOKEN` | Add all required fields to config | | `ModuleNotFoundError: No module named 'longport'` | Run `pip3 install longport` | | `You do not have access to market's Open API data` | Check Longbridge subscription |


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: dashiming/pans-discovery-playbook (version 1.0.0)

--- name: pans-discovery-playbook description: | AI算力销售发现阶段话术与框架工具。根据沟通场景（首次电话/需求介绍/POC/ 续约增购）和行业（科技/金融/医疗/自动驾驶/内容/制造/学术/政府） 自动生成访谈问题清单、行业背景知识、话术建议和异议处理策略， 输出 Markdown 或 JSON 格式发现指南。 触发词：发现阶段, 客户访谈, 话术指南, 异议处理, 需求挖掘, discovery, 首次沟通, 客户沟通, 销售话术 --- # Pans Discovery Playbook ## Overview AI算力销售发现阶段话术与框架工具。根据场景和行业生成访谈问题、话术建议和异议处理策略。 ## 场景 | 场景 | 说明 | |------|------| | `first_call` | 首次电话沟通（冷启动，15-20分钟） | | `intro_call` | 需求介绍会议（深入了解，30-60分钟） | | `poc` | POC阶段访谈（技术细节，45-90分钟） | | `renewal` | 续约/增购沟通（价值回顾，20-30分钟） | ## 行业 `technology` / `finance` / `healthcare` / `autonomous` / `media` / `manufacturing` / `academic` / `government` ## 使用方法 ```bash # 生成首次电话沟通指南（科技行业） python3 scripts/discovery.py --scenario first_call --industry technology --format markdown # 生成 POC 访谈指南（金融行业） python3 scripts/discovery.py --scenario poc --industry finance --format json --output result.json # 续约增购沟通 python3 scripts/discovery.py --scenario renewal --industry healthcare ``` ## 关键发现记录 工具输出包含结构化发现记录模板，覆盖： - 现状了解（团队规模、AI方向、现有架构） - 痛点挖掘（核心痛点、紧迫度、业务影响） - 权力确认（决策人、技术评估团队） - 预算探索（年投入、价格敏感度） - 时间线确认（POC需求、关键节点） - 竞争态势（现有供应商、我们的优势）


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)