OpenClaw/clawhub-security-signals huggingface dataset:
Skill: chang-tong/139mail-skill (version 1.0.0)

--- name: 139mail namespace: true description: | 139邮箱邮件收发 Skill - 支持 IMAP/SMTP 协议，兼容139/QQ/163/Gmail等主流邮箱 功能： 1. 发送邮件（SMTP） 2. 接收邮件（IMAP） 3. 查看收件箱列表 4. 查看未读邮件 当用户提到 "发邮件"、"收邮件"、"查看邮件"、"邮箱" 或 "email" 时激活此 skill。 --- # 139mail Skill 使用 IMAP/SMTP 协议收发邮件，支持 139 邮箱、QQ 邮箱、163 邮箱、Gmail 等主流邮箱。 ## 功能特性 | 功能 | 说明 | |------|------| | **发送邮件** | 支持文本邮件、HTML 邮件、附件 | | **接收邮件** | 查看收件箱、未读邮件、搜索邮件 | | **邮件列表** | 列出最近邮件，支持分页 | | **读取邮件** | 查看邮件详情、正文、附件列表 | ## 配置方法 ### 1. 编辑配置文件 ```bash ~/.openclaw/skills/139mail/config/email.json ``` ### 2. 配置示例（139 邮箱） ```json { "email": "[REDACTED_SECRET]", "password": "你的授权码", "smtp": { "host": "smtp.139.com", "port": 465, "secure": true }, "imap": { "host": "imap.139.com", "port": 993, "secure": true } } ``` ### 3. 主流邮箱配置参考 **QQ 邮箱：** - SMTP: smtp.qq.com:465 - IMAP: imap.qq.com:993 - 密码: QQ 邮箱授权码 **163 邮箱：** - SMTP: smtp.163.com:465 - IMAP: imap.163.com:993 - 密码: 163 邮箱授权码 **Gmail：** - SMTP: smtp.gmail.com:465 - IMAP: imap.gmail.com:993 - 密码: 应用专用密码 ## 使用方法 ### 发送邮件 **普通邮件：** ``` 发邮件给 [REDACTED_SECRET]，主题是 "测试邮件"，内容是 "这是一封测试邮件" ``` **带附件的邮件：** ``` 发邮件给 [REDACTED_SECRET]，主题是 "文档"，内容是 "请查收附件"，附件是 /path/to/document.pdf ``` ### 查看收件箱 ``` 查看最近的邮件 显示未读邮件 ``` ### 读取邮件 ``` 读取第 3 封邮件 查看邮件详情 12345 ``` ## 安全说明 - 配置文件存储在本地，不会被上传到云端 - 建议使用邮箱授权码而非登录密码 - 配置文件权限已设置为仅用户可读


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: xiaobao666666666/a-stock-quantitative-screener (version 1.0.0)

# A股量化交易股票筛选系统 ## 触发条件 当用户发送以下指令时触发： - "帮我筛选A股量化股票" - "分析A股量化交易机会" - "量化选股" - "筛选可能拉升的股票" - "识别主力资金介入" - "分析量化信号" ## 工作流程 本技能采用**三角色辩论式分析**流程： ``` 角色1（筛选） → 角色2（反驳） → 角色3（综判） → 最终推荐 ``` ## 阶段一：A股量化特点分析 1. **成交活跃度高** - 日均成交额约1-2万亿 2. **散户占比高** - 超额机会多 3. **政策影响显著** - 监管政策影响大 4. **波动性大** - 趋势跟踪策略有效 5. **小盘股溢价** - 流动性溢价明显 6. **板块轮动快** - 行业轮动策略适用 7. **技术指标有效** - 量价数据被广泛使用 8. **北向资金影响** - 外资定价权逐渐增强 ## 阶段二：五维筛选标准 ### 1. 资金流向维度（权重30%） - 主力资金连续净流入 ≥ 3日 - 超大单净流入占比 > 5% - 北向资金持股比例上升 - 融资融券余额变化 ### 2. 量价技术维度（权重25%） - 成交量较20日均量放大 ≥ 1.5倍 - 5日均线上穿20日均线（金叉） - 股价站上BOLL中轨 - MACD零轴上方金叉 ### 3. 趋势强度维度（权重20%） - 区间涨幅 5%-25% - 相对大盘超额收益 > 3% - 股价创20日新高 - 多周期均线多头排列 ### 4. 基本面维度（权重15%） - 市值：主板50-500亿 - PE：0-50倍 - 近两年净利润正增长 - 近一年无重大违规 ### 5. 筹码集中度（权重10%） - 股东户数连续减少 - 户均持股数增加 - 筹码趋向集中 ## 阶段三：三角色分析 ### 角色1：量化研究员（筛选） 1. 分析A股量化特点 2. 结合当日最新市场行情 3. 应用筛选标准识别量化资金介入信号 4. 输出符合条件的前10只股票 5. 附具体代码、名称、入选理由、风险提示 ### 角色2：量化研究员（反驳） 验证角色1结果的合理性： 1. **技术指标有效性** - 质疑滞后性、参数敏感性 2. **资金流向可靠性** - 质疑数据划分标准 3. **基本面矛盾** - 质疑流动性陷阱 4. **样本偏差** - 质疑幸存者偏差 5. **执行问题** - 质疑滑点、延迟、风控缺失 ### 角色3：量化研究员（综判） 综合评估双方观点： 1. 评估辩论双方的论据强度 2. 调整优化筛选标准 3. 更新最终股票池 4. 提供优先级排序 5. 给出具体投资建议 ## 阶段四：风险控制 - 单只股票仓位 ≤ 10% - 设置8%止损线 - 持仓不超过20只 - 避免高位追涨 ## 输出格式 ### 标准股票卡片 ``` | 排名 | 代码 | 名称 | 入选理由 | 风险等级 | |------|------|------|----------|----------| | 1 | 600519 | 贵州茅台 | ①北向资金持续净买入②... | ⚠️ 中 | ``` ### 最终推荐 ``` 第一梯队（确定性较高）： 1. 比亚迪（002594） 2. 招商银行（600036） 第二梯队（弹性较大）： 3. 中国平安（601318） 4. 恒瑞医药（600276） ``` ## 数据来源 - thsdk：实时行情、K线、资金流 - stockapi：龙虎榜、游资席位 - 问财：板块、资金排名 ## 注意事项 - 量化策略存在失效风险 - 技术指标具有滞后性 - 资金流向数据可能存在误差 - 市场环境变化影响策略有效性


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: xinian5216/wechat-mp-draft (version 1.0.0)

--- name: wechat-mp-draft description: 代写微信公众号文章并保存到公众号草稿箱。使用场景：用户需要撰写公众号文章并直接发布到微信公众号后台草稿箱。触发词："写公众号文章"、"保存到公众号草稿"、"微信文章"、"公众号发文"。 --- # 微信公众号草稿 Skill 代写微信公众号文章并保存到草稿箱。 ## 前置条件 需要以下凭证（需自行配置）： - AppID: `wxYOUR_APPID_HERE` - AppSecret: `YOUR_SECRET_HERE` **获取方式：** 微信公众平台 → 设置与开发 → 基本配置 **重要：** 服务器 IP 必须添加到公众号后台的 IP 白名单中。 ## 工作流程 ### 1. 获取 Access Token ```bash ./scripts/get_access_token.sh ``` ### 2. 上传封面图片（获取 thumb_media_id） **封面图片是必填项！** ```bash ./scripts/upload_image.sh <access_token> <图片路径> ``` 返回示例： ```json {"media_id":"xxx","url":"http://mmbiz.qpic.cn/..."} ``` ### 3. 撰写文章并保存到草稿箱 ```bash ./scripts/add_draft.sh <access_token> <标题> <HTML内容> <thumb_media_id> [作者] [摘要] ``` ## 关键问题与解决方案 ### ❌ 问题 1：40007 invalid media_id **原因：** - `thumb_media_id` 是必填字段 - 封面图片必须是**永久素材**（通过 `add_material` 接口上传） **解决：** 必须先上传封面图片获取 `thumb_media_id`： ```bash curl -F "media=@cover.jpg" "https://api.weixin.qq.com/cgi-bin/material/add_material?access_token=TOKEN&type=image" ``` ### ❌ 问题 2：IP 不在白名单（40164） **解决：** 登录微信公众平台 → 设置与开发 → 基本配置 → IP白名单 → 添加服务器 IP ### ❌ 问题 3：HTML 内容格式错误 **解决：** - HTML 中的换行符会导致 JSON 解析失败 - 必须将换行符替换为空格 - 使用 `tr '\n' ' '` 处理 ## 完整使用示例 ```bash # 1. 获取 token [REDACTED_SECRET] | jq -r '.access_token') # 2. 上传封面图 THUMB_RESPONSE=$(./scripts/upload_image.sh "$TOKEN" /path/to/cover.jpg) THUMB_ID=$(echo "$THUMB_RESPONSE" | jq -r '.media_id') # 3. 准备文章内容（HTML 格式） CONTENT='<p>这里是文章内容...</p>' # 4. 保存草稿 ./scripts/add_draft.sh "$TOKEN" "文章标题" "$CONTENT" "$THUMB_ID" "作者" "摘要" ``` ## API 参数说明 ### 新增草稿必填字段 | 字段 | 类型 | 必填 | 说明 | |------|------|------|------| | title | string | 是 | 标题，不超过32字 | | content | string | 是 | HTML内容，不超过2万字符 | | thumb_media_id | string | 是 | 封面图片永久素材ID | | author | string | 否 | 作者，不超过16字 | | digest | string | 否 | 摘要，不超过128字 | | show_cover_pic | number | 否 | 是否显示封面，0/1 | | need_open_comment | number | 否 | 是否打开评论，0/1 | | only_fans_can_comment | number | 否 | 是否仅粉丝可评论，0/1 | ### 支持的 HTML 标签 - `<p>` - 段落 - `<br>` - 换行 - `<section>` - 区块 - `<img>` - 图片（需先上传获取 media_id） - `<strong>`, `<b>` - 加粗 - `<span style="...">` - 带样式的文本 - `<a href="...">` - 链接 - `<h1>`-`<h6>` - 标题 ## 错误码速查 | 错误码 | 说明 | 解决 | |--------|------|------| | 40001 | access_token 过期 | 重新获取 | | 40007 | media_id 无效 | 检查封面图是否上传正确 | | 40164 | IP 不在白名单 | 添加 IP 到白名单 | | 44002 | POST 数据为空 | 检查请求体 | | 47001 | 数据格式错误 | 检查 JSON 格式 | ## 注意事项 1. **token 有效期 2 小时**，过期需重新获取 2. **封面图必须先上传**，不能直接引用外部 URL 3. **HTML 内容需转义**，避免 JSON 解析失败 4. **IP 白名单必须配置**，否则无法调用 API 5. **内容大小限制**：正文 < 2万字符，< 1MB ## 文件结构 ``` wechat-mp-draft/ ├── SKILL.md # 本文件 ├── scripts/ │ ├── get_access_token.sh # 获取 token │ ├── upload_image.sh # 上传封面图片 │ └── add_draft.sh # 保存草稿 └── references/ └── api_reference.md # API 详细文档 ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: haveblue997/mcp-company-search (version 1.0.0)

--- name: mcp-company-search description: Search corporate registries across multiple jurisdictions via L402 API. Find companies by name and jurisdiction for due diligence, compliance, and business research. version: 1.0.0 metadata: openclaw: requires: bins: - npx env: - L402_API_BASE_URL emoji: 🏢 --- # Company Search (L402) Search corporate registries across jurisdictions — find companies by name for due diligence and compliance. ## Setup ```json { "mcpServers": { "company-search": { "command": "npx", "args": ["-y", "@vbotholemu/mcp-company-search"], "env": { "L402_API_BASE_URL": "https://api.nautdev.com" } } } } ``` ## Tools ### `search_companies` Search companies by name within a jurisdiction. | Parameter | Type | Required | Description | |-------------|--------|----------|-------------| | name | string | yes | Company name to search | | jurisdiction| string | yes | Jurisdiction code | ### `list_jurisdictions` List all supported jurisdictions and their codes. ## When to Use - KYC / due diligence checks - Business partner verification - Compliance research - Corporate registry lookups


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: edwardrodriguez703-design/book-braids (version 1.0.1)

--- name: book-braids description: Book braids services through Lokuli MCP. Use when user needs to find and book braids. Triggers on requests like "book a braids", "find braids near me", or any braids service request. --- # uook uraids Book braids services through Lokuli's MCP server. ## MCP Endpoint ``` https://lokuli.com/mcp/sse ``` Transport: SSE | JSON-RPC 2.0 | POST requests ## Tools ### search ```json { "method": "tools/call", "params": { "name": "search", "arguments": { "query": "braids", "zipCode": "90640", "maxResults": 20 } } } ``` ### check_availability ```json { "method": "tools/call", "params": { "name": "check_availability", "arguments": { "providerId": "xxx", "serviceId": "yyy", "date": "2025-02-10" } } } ``` ### create_booking ```json { "method": "tools/call", "params": { "name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "[REDACTED_SECRET]", "customerPhone": "+13105551234" } } } ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: bortlesboat/bitcoin-mcp (version 0.1.0)

--- name: bitcoin-mcp description: "47 Bitcoin tools for your AI agent — fee intelligence, mempool analysis, address lookups, transaction decoding, and more. MCP server backed by the Satoshi API." homepage: https://github.com/Bortlesboat/bitcoin-mcp metadata: { "openclaw": { "emoji": "⛓", "requires": { "bins": ["uv"] }, "install": [ { "id": "uv-brew", "kind": "brew", "formula": "uv", "bins": ["uv"], "label": "Install uv (brew)", }, ], }, } --- # bitcoin-mcp Give your AI agent Bitcoin superpowers. 47 tools including fee intelligence, mempool analysis, address lookups, transaction decoding, block inspection, and PSBT security analysis. Backed by the [Satoshi API](https://bitcoinsapi.com). **Zero config** — works out of the box with no Bitcoin node, no API key. ## Install as MCP server in OpenClaw Add to your `openclaw.json`: ```json "mcpServers": { "bitcoin": { "command": "uvx", "args": ["bitcoin-mcp"] } } ``` ## Install for Claude Code ```bash claude mcp add bitcoin -- uvx bitcoin-mcp ``` ## Install for Claude Desktop / Cursor ```json { "mcpServers": { "bitcoin": { "command": "uvx", "args": ["bitcoin-mcp"] } } } ``` ## What you can do - **Fees:** Real-time fee recommendations, smart fee estimation, cost calculator - **Mempool:** Pending transactions, ancestors, entry lookup - **Blocks:** Block stats, comparisons, chain tips - **Addresses:** Balance, UTXO set, transaction history - **Transactions:** Decode raw tx, analyze, find inscriptions - **PSBT:** Security analysis for partially signed transactions - **Lightning:** Decode BOLT11 invoices - **Mining:** Pool rankings, difficulty adjustment, halving countdown - **Market:** Price, supply info, market sentiment ## Links - PyPI: [bitcoin-mcp](https://pypi.org/project/bitcoin-mcp/) - GitHub: [Bortlesboat/bitcoin-mcp](https://github.com/Bortlesboat/bitcoin-mcp) - API docs: [bitcoinsapi.com](https://bitcoinsapi.com)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: claudiodrusus/shelly-meeting-summarizer (version 1.0.0)

# Meeting Notes Summarizer 📋 Transform raw meeting transcripts into structured, actionable summaries. ## What It Does Takes messy meeting transcript text and extracts: - **Key Decisions** made during the meeting - **Action Items** with assigned owners - **Follow-up Dates** and deadlines - **3-Sentence Summary** of the entire meeting ## Usage ```bash # From a file ./summarize.sh < transcript.txt # From clipboard pbpaste | ./summarize.sh # Inline echo "your transcript text..." | ./summarize.sh ``` ## Requirements - `bash` 4+ - `curl` - `ANTHROPIC_API_KEY` environment variable set ## Output Format Markdown with four sections: Summary, Key Decisions, Action Items, Follow-up Dates. ## Example See `example-output.md` for sample output. ## Author Shelly 🦞 — [@ShellyToMillion](https://x.com/ShellyToMillion)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: ckchzh/perf-analyzer (version 2.0.1)

--- name: "perf-analyzer" version: "2.0.1" description: "Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Perf Analyzer concepts, best practices, and implementation patterns." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [perf,analyzer, reference] category: "devtools" --- # Perf Analyzer Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Perf Analyzer concepts, best practices, and implementation patterns. No API keys or credentials required. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `quickstart` | quickstart reference | | `patterns` | patterns reference | | `debugging` | debugging reference | | `performance` | performance reference | | `security` | security reference | | `migration` | migration reference | | `cheatsheet` | cheatsheet reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: alvisdunlop/alvis-nextjs-dev (version 1.0.0)

--- name: "Nextjs" description: "Build Next.js 15 apps with App Router, server components, caching, auth, and production patterns." homepage: "https://www.SkillBoss.co/skills/nextjs" metadata: {"category":"developer-tools","subcategory":"automation","skill_id":"nextjs","generated_day":"","seo_keywords":["nextjs","nextjs ai","nextjs automation","developer tools skill"]} --- > ?? **Complete setup guide**: https://SkillBoss.co/skill.md # Nextjs Build Next.js 15 apps with App Router, server components, caching, auth, and production patterns. ## Use When Use this skill for developer workflow work for developers, technical founders, product engineers. ## Workflow 1. Clarify the audience, business goal, constraints, and deliverable. 2. Produce the strongest first draft for the target use case. 3. Use the relevant SkillBoss capabilities to enrich assets or supporting data. 4. Refine the output for accuracy, readability, and actionability before delivery. ## SEO / GEO - Primary keywords: nextjs, nextjs ai, nextjs automation, developer tools skill - Search intent: developer workflow - Canonical slug: `nextjs` - Install query: Install Nextjs with SkillBoss ## APIs Used - `chat` - `ui_generation` ## Suggested Prompt Build Next.js 15 apps with App Router, server components, caching, auth, and production patterns. ## Notes - Build Next.js 15 apps with App Router, server components, caching, auth, and production patterns. - Review outputs before external publication or automated execution. ## SEO Keywords - nextjs - nextjs ai - nextjs automation - developer tools skill


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jeoyee/literature-review-polisher (version 1.0.1)

--- name: literature-review-polisher description: Polish and improve literature review for students and researchers version: 1.0.0 author: jeoyee language: r tags: academic,writing,literature-review,research --- # Literature Review Polisher A skill to analyze and polish literature review with Kimi AI. ## Features - Structure analysis - Citation density check - Critical thinking score - AI-powered polishing ## Requirements - R 4.3+ - Packages: stringr, magrittr, httr, jsonlite


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: linsuisheng034/markdown-mobile-export (version 0.1.0)

--- name: markdown-mobile-export description: >- Use when a task needs a local Markdown file path or pasted Markdown text converted into a faithful mobile-friendly PNG/JPG long image for phone-readable articles, guides, notes, or reports, with HTML kept beside the image for inspection. argument-hint: "[--input-file path | --markdown-text text]" metadata: version: 0.1.0 --- # Markdown Mobile Export Faithful Markdown → mobile long image, no content rewriting. ## When to Use - Local `.md` file → phone-friendly long image - Pasted Markdown text → PNG or JPG - Article-style faithful export (not poster or carousel redesign) - Intermediate HTML needed for inspection alongside image ## Do Not Use - Poster redesigns where content should be rewritten into marketing blocks - Carousel slicing across multiple images - Rich web app UI design work - PDF output ## Quick Start ```bash # From file python3 {baseDir}/scripts/markdown_to_long_image.py \ --input-file /path/to/file.md # From pasted text python3 {baseDir}/scripts/markdown_to_long_image.py \ --markdown-text "# Title\n\nBody" # Custom output path and format python3 {baseDir}/scripts/markdown_to_long_image.py \ --input-file /path/to/file.md \ --output-image /path/to/output.png \ --format jpg ``` ## Defaults | Aspect | Default | |---------|------------------------------------------------------| | Input | Markdown file path or pasted text | | Output | PNG long image + HTML sidecar retained on disk | | Style | Faithful conversion, mobile-first, zh-CN typography | | Width | 820px card layout with warm earth-tone theme | | Browser | Local Chrome/Chromium/Edge/Brave → Playwright fallback | ## Workflow 1. Resolve input (`--input-file` or `--markdown-text`) 2. Normalize pasted text into a concrete `.source.md` file when needed 3. Render mobile-friendly HTML with embedded CSS 4. Detect local Chromium-family browser 5. Capture full-page screenshot (segmented stitch with overlap) 6. Fall back to Playwright Chromium if no local browser is usable 7. Print JSON result with `output_html` and `output_image` paths ## Scripts | Script | Purpose | |-----------------------------------------|--------------------------------------| | `scripts/markdown_to_long_image.py` | CLI entry point, orchestrates pipeline | | `scripts/render_markdown_mobile_long_image.py` | Markdown → styled mobile HTML | | `scripts/export_long_image.py` | Browser detection + screenshot export | ## References | Topic | File | |------------------|--------------------------------| | Pipeline details | `references/workflow.md` | | Common issues | `references/troubleshooting.md` | ## Validation After generating output, verify: 1. HTML file exists at reported path 2. Image file exists and is non-zero bytes 3. Image is full-page capture (not single viewport crop) 4. Remote images loaded without broken placeholders


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: prantikmedhi/notebooklm-lore (version 0.1.1)

--- name: notebooklm-lore description: OpenClaw skill wrapper for installing and operating Lore (NotebookLM automation toolkit) via CLI + MCP. --- # notebooklm-lore This skill is a **wrapper for agents** (especially OpenClaw) to install and use the Lore project safely. Repo: https://github.com/prantikmedhi/lore ## What the agent should do ### 1) Install Lore locally - Clone or update the repo. - Install dependencies: ```bash pip install -e . python3 -m playwright install chromium ``` ### 2) Authentication (user must do this) NotebookLM auth is interactive. The agent must **ask the user** to run: ```bash python3 -m notebooklm login ``` Rules: - Do not attempt to automate login. - Do not print, copy, or commit any auth/session state. ### 3) Verify After the user confirms login is complete: ```bash python scripts/auth_helper.py lore list ``` ### 4) MCP setup Use the repo’s `.mcp.json` (preferred) or add an equivalent MCP server entry: ```json { "mcpServers": { "lore": { "command": "uvx", "args": ["--from", "notebooklm-skill", "notebooklm-mcp"], "env": { "NOTEBOOKLM_DEFAULT_LANGUAGE": "en", "NOTEBOOKLM_DEFAULT_FORMAT": "json", "NOTEBOOKLM_POWERED_MODE": "1" } } } } ``` ## Security Do not commit: - `~/.notebooklm/` - `~/.notebooklm/storage_state.json` - cookies, browser profiles, or private source materials


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mattius459/ppq-private-mode (version 1.0.1)

--- name: ppq-private-mode description: Install PPQ.AI Private Mode for end-to-end encrypted AI inference in OpenClaw user-invocable: true --- # PPQ.AI Private Mode -- End-to-End Encrypted AI for OpenClaw Your queries are encrypted on your machine and only decrypted inside a hardware-secured enclave. Neither PPQ.AI nor any intermediary can read the content. ## Setup Instructions Follow these steps in order. ### Step 1: Get the user's PPQ API key Ask the user for their PPQ.AI API key. They can find it at https://ppq.ai/api-docs -- it starts with `sk-`. Do not proceed until the user provides their key. ### Step 2: Install the plugin ```bash openclaw plugins install https://github.com/PayPerQ/ppq-private-mode-proxy ``` ### Step 3: Configure OpenClaw Merge the following into `~/.openclaw/openclaw.json`, preserving all existing settings: Add a new provider entry under `models.providers`: ```json "ppq-private": { "baseUrl": "http://127.0.0.1:8787/v1", "apiKey": "unused", "api": "openai-completions", "models": [ { "id": "private/kimi-k2-5", "name": "private/kimi-k2-5" }, { "id": "private/deepseek-r1-0528", "name": "private/deepseek-r1-0528" }, { "id": "private/gpt-oss-120b", "name": "private/gpt-oss-120b" }, { "id": "private/llama3-3-70b", "name": "private/llama3-3-70b" }, { "id": "private/qwen3-vl-30b", "name": "private/qwen3-vl-30b" }, { "id": "autoclaw/private", "name": "autoclaw/private" } ] } ``` Add the plugin entry under `plugins.entries`: ```json "ppq-private-mode": { "config": { "apiKey": "<the key the user provided>" } } ``` ### Step 4: Restart the gateway ```bash systemctl --user restart openclaw-gateway.service ``` ### Step 5: Confirm to the user Tell the user PPQ Private Mode is installed. Available encrypted models: - `private/kimi-k2-5` -- Fast general tasks - `private/deepseek-r1-0528` -- Reasoning and analysis - `private/gpt-oss-120b` -- Cost-efficient general use - `private/llama3-3-70b` -- Open-source tasks - `private/qwen3-vl-30b` -- Vision plus text - `autoclaw/private` -- Auto-picks the best private model Switch with: `openclaw models set autoclaw/private` ## About PPQ.AI provides pay-per-query AI with no subscriptions. Private models run inside hardware secure enclaves. Learn more at https://ppq.ai


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: xueyetianya/devops-bash-tools (version 2.0.4)

--- name: "devops-bash-tools" version: "2.0.3" description: "Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Devops Bash Tools concepts, best practices, and implementation pa..." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [devops,bash,tools, reference] category: "devtools" --- # Devops Bash Tools Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Devops Bash Tools concepts, best practices, and implementation pa... No API keys or credentials required. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `quickstart` | quickstart reference | | `patterns` | patterns reference | | `debugging` | debugging reference | | `performance` | performance reference | | `security` | security reference | | `migration` | migration reference | | `cheatsheet` | cheatsheet reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)