OpenClaw/clawhub-security-signals huggingface dataset:
Skill: codekungfu/db-migrate (version 1.0.0)

--- name: db-migrate description: Deep database migration workflow—expand/contract, backward-compatible deploys, backfills, locking risks, and verification. Use when changing production schemas safely with zero or low downtime. --- # DB Migrations Production schema changes fail when old and new code disagree during rollout. Prefer **expand/contract**: add compatible changes first, remove old shapes later. ## When to Offer This Workflow **Trigger conditions:** - ALTER TABLE in production; large table rewrites - Blue/green deploys coupled to schema state - Need zero-downtime or low-downtime migrations **Initial offer:** Use **six stages**: (1) classify change, (2) expand phase, (3) backfill & dual-write, (4) flip reads/writes, (5) contract phase, (6) verify & rollback). Confirm database engine (PostgreSQL, MySQL, etc.). --- ## Stage 1: Classify Change **Goal:** Additive vs destructive; lock risk (full table rewrite vs instant metadata change). **Exit condition:** Migration labeled as expand or contract with risk notes. --- ## Stage 2: Expand Phase **Goal:** Add nullable columns or new tables without breaking currently deployed code. ### Practices - Avoid DEFAULT clauses that lock large tables badly on some engines (use phased backfill instead) --- ## Stage 3: Backfill & Dual-Write **Goal:** Throttled batch backfill; dual-write old and new representations during transition when needed. --- ## Stage 4: Flip Reads/Writes **Goal:** Deploy code that reads new columns only after backfill completes; use feature flags for staged rollout. --- ## Stage 5: Contract Phase **Goal:** Drop old columns only after no code references them (search repo, logs, feature usage). --- ## Stage 6: Verify & Rollback **Goal:** Monitor errors, slow queries, replication lag; rollback = redeploy previous app version + avoid destructive steps until stable. --- ## Final Review Checklist - [ ] Change classified; expand/contract path clear - [ ] Additive migrations before dependent code - [ ] Backfill throttled and verified - [ ] Read/write cutover sequenced with flags - [ ] Contract only after references gone - [ ] Monitoring and rollback tested ## Tips for Effective Guidance - Long transactions on migrations can cause outages—chunk work. - Use online schema tools (pt-online-schema-change, etc.) when appropriate. ## Handling Deviations - SQLite/embedded engines have different locking—validate per engine.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: omar-khaleel/qr-code (version 1.0.0)

--- name: qr-code description: Generate and read QR codes. Use when the user wants to create a QR code from text/URL, or decode/read a QR code from an image file. Supports PNG/JPG output and can read QR codes from screenshots or image files. --- # QR Code Generate QR codes from text/URLs and decode QR codes from images. ## Capabilities - Generate QR codes from any text, URL, or data - Customize QR code size and error correction level - Save as PNG or display in terminal - Read/decode QR codes from image files (PNG, JPG, etc.) - Read QR codes from screenshots ## Requirements Install Python dependencies: ### For Generation ```bash pip install qrcode pillow ``` ### For Reading ```bash pip install pillow pyzbar ``` On Windows, pyzbar requires Visual C++ Redistributable. On macOS: `brew install zbar` On Linux: `apt install libzbar0` ## Generate QR Code ```bash python scripts/qr_generate.py "https://example.com" output.png ``` Options: - `--size`: Box size in pixels (default: 10) - `--border`: Border size in boxes (default: 4) - `--error`: Error correction level L/M/Q/H (default: M) Example with options: ```bash python scripts/qr_generate.py "Hello World" hello.png --size 15 --border 2 ``` ## Read QR Code ```bash python scripts/qr_read.py image.png ``` Returns the decoded text/URL from the QR code. ## Quick Examples Generate QR for a URL: ```python import qrcode img = qrcode.make("https://openclaw.ai") img.save("openclaw.png") ``` Read QR from image: ```python from pyzbar.pyzbar import decode from PIL import Image data = decode(Image.open("qr.png")) print(data[0].data.decode()) ``` ## Scripts - `scripts/qr_generate.py` - Generate QR codes with customization options - `scripts/qr_read.py` - Decode QR codes from image files

path: CLAUDE.md
content: AGENTS.md


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: brucegutman/pipeworx-radio (version 1.0.0)

# Radio Discover internet radio stations from around the world. The Radio Browser database indexes tens of thousands of live streams across every genre and country. ## Available commands - **search_stations** -- Find stations by name, sorted by popularity - **get_top_stations** -- Most-voted stations globally or filtered by country - **list_countries** -- All countries with station counts - **list_tags** -- Top genres and tags by station count ## Example: find jazz stations ```bash curl -X POST https://gateway.pipeworx.io/radio/mcp \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"search_stations","arguments":{"query":"jazz","limit":5}}}' ``` Each station result includes a direct stream URL, codec, bitrate, country, language, and tags -- everything needed to start playing. ## Popular use cases - Build a radio discovery feature for a music app - Find stations by country for localization projects - Get stream URLs for background audio in creative coding ## Setup ```json { "mcpServers": { "radio": { "url": "https://gateway.pipeworx.io/radio/mcp" } } } ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kai157isme-lgtm/us-treasury-radar (version 4.1.0)

# US Treasury Radar - 美债需求监测表 ## 触发词 - 美债分析 - 美债雷达 - 浑水报告 - Muddy Waters - US Treasury analysis - 戴维期双杀 ## 功能 实时获取美国国债供需数据，生成"浑水风险雷达"报告，检测"戴维期双杀"信号。 ## 数据来源 ### 1. 美债总量 - **来源**: TreasuryDirect.gov API - **URL**: https://www.treasurydirect.gov/NP_WS/debt/current - **频率**: 每日更新 ### 2. 美联储持有 - **来源**: TreasuryDirect.gov API (Fed Securities Holdings) - **URL**: https://www.treasurydirect.gov/NP_WS/feddata/current - **频率**: 每日更新 ### 3. 各国持有 (日本、中国、英国等) - **来源**: TIC (Treasury International Capital) 报告 - **说明**: TIC 数据每月月中旬发布，存在约2周延迟 - **状态**: 估算值 (基于最新报告 + 趋势调整) ## 核心指标 | 指标 | 说明 | |------|------| | Delta (Δ) | 每周新增债务规模 | | Gamma (Γ) | 债务加速度（本月新增 vs 上月新增） | | MoM | 环比变化 | | YoY | 同比变化 | ## 信号判定 - **戴维期双杀**：Gamma > 0 + 外资 YoY < 0 - **空头警告**：发债速度非线形扩张 ## 数据准确性说明 ⚠️ **重要提示**： - **美债总量**: ✅ 实时准确 (TreasuryDirect API) - **美联储持有**: ✅ 实时准确 (TreasuryDirect API) - **各国持有**: ⚠️ 估算值 (TIC 报告有月度延迟) 本工具致力于提供准确数据，但部分数据依赖公开估算，仅供参考。 ## 使用方式 ```bash python3 radar.py ``` ## 输出示例 ``` 📊 美债需求监测表 | 2026年04月07日 星期二 ====================================================================== 项目 当前($T) 每周环比 每月环比 每月同比 数据来源 ... 📈 供应端: • 美债总量: $38.982 T (周环比: +$45.0B, 月环比: +$210.0B) • 债务加速度 (Gamma): +10.53% ``` ## 风险提示 本工具数据仅供参考，不构成投资建议。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: fabekar/tavily-search-secure (version 1.0.0)

--- name: tavily-search description: "Tavily API ile güvenli web arama ve URL içerik çıkarma yap. Use when: hızlı web araştırması, kaynaklı sonuç toplama, belirli URL'lerden metin çekme ve özetleme gerektiğinde." --- # Tavily Search (Secure) Tavily API ile güvenli arama/extract akışı çalıştır. ## Gereksinim - `TAVILY_API_KEY` ortam değişkeni tanımlı olmalı. - API anahtarını dosyaya yazma, commit etme veya çıktıda gösterme. ## Arama ```bash node {baseDir}/scripts/search.mjs "query" node {baseDir}/scripts/search.mjs "query" -n 8 --deep node {baseDir}/scripts/search.mjs "query" --topic news --days 3 ``` ## URL içerik çıkarma ```bash node {baseDir}/scripts/extract.mjs "https://example.com/article" node {baseDir}/scripts/extract.mjs "https://a.com" "https://b.com" ``` ## Güvenlik kuralları - Sadece `http` / `https` URL kabul et. - Localhost, loopback, private IP ve `.local/.internal` alan adlarını reddet. - Tek istekte URL sayısını sınırlı tut (script varsayılanı uygular). - Hata durumunda kısa ve temiz hata ver; anahtar veya hassas veri dökme.


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jolestar/kucoin-openapi-skill (version 1.0.0)

--- name: kucoin-openapi-skill description: Operate KuCoin public exchange market APIs through UXC with a curated OpenAPI schema, market-first discovery, and explicit private-auth boundary notes. --- # KuCoin Unified API Skill Use this skill to run KuCoin public market-data operations through `uxc` + OpenAPI. Reuse the `uxc` skill for shared execution, auth, and error-handling guidance. ## Prerequisites - `uxc` is installed and available in `PATH`. - Network access to `https://api.kucoin.com`. - Access to the curated OpenAPI schema URL: - `https://raw.githubusercontent.com/holon-run/uxc/main/skills/kucoin-openapi-skill/references/kucoin-public.openapi.json` ## Scope This skill covers a curated KuCoin public market surface for: - symbol discovery - all tickers - order book snapshots - candlestick reads This skill does **not** cover: - private account or order endpoints in v1 - websocket, margin, or broader platform products ## Authentication Public market endpoints in this skill do not require credentials. KuCoin private REST auth uses provider-specific headers and signing rules including passphrase handling. Keep this v1 skill public-data-only until a reusable KuCoin signer flow exists in `uxc`. ## Core Workflow 1. Use the fixed link command by default: - `command -v kucoin-openapi-cli` - If missing, create it: `uxc link kucoin-openapi-cli https://api.kucoin.com --schema-url https://raw.githubusercontent.com/holon-run/uxc/main/skills/kucoin-openapi-skill/references/kucoin-public.openapi.json` - `kucoin-openapi-cli -h` 2. Inspect operation help before execution: - `kucoin-openapi-cli get:/api/v1/symbols -h` - `kucoin-openapi-cli get:/api/v1/market/allTickers -h` 3. Prefer narrow symbol reads first: - `kucoin-openapi-cli get:/api/v1/market/orderbook/level2_20 symbol=BTC-USDT` - `kucoin-openapi-cli get:/api/v1/market/candles symbol=BTC-USDT type=1hour` ## Operations - `get:/api/v1/symbols` - `get:/api/v1/market/allTickers` - `get:/api/v1/market/orderbook/level2_20` - `get:/api/v1/market/candles` ## Guardrails - Keep automation on the JSON output envelope; do not use `--text`. - Parse stable fields first: `ok`, `kind`, `protocol`, `data`, `error`. - Treat this v1 skill as read-only. - KuCoin symbols use dash-separated names such as `BTC-USDT`. - `kucoin-openapi-cli <operation> ...` is equivalent to `uxc https://api.kucoin.com --schema-url <kucoin_public_openapi_schema> <operation> ...`. ## References - Usage patterns: `references/usage-patterns.md` - Curated OpenAPI schema: `references/kucoin-public.openapi.json` - Official KuCoin auth docs: https://www.kucoin.com/docs-new/authentication


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: titancheung/style-mimic (version 1.0.0)

--- name: style-mimic version: 1.0.0 author: Titan Cheung description: 模仿社会洞察类文章风格进行写作的AI助手 license: MIT homepage: https://github.com/openclaw/openclaw metadata: { "openclaw": { "emoji": "📝", "requires": { "bins": [] }, "categories": ["writing", "style", "chinese"], "tags": ["写作", "风格模仿", "社会洞察", "中文写作"] }, } --- # style-mimic 技能 ## 简介 模仿用户收藏的社会洞察类文章风格进行写作。 ## 风格特征 ### 思维模式 - 结构化思维：善用框架、坐标系分析复杂问题 - 概念创新：创造新概念来定义现象 - 二元对立：对比理想与现实、旧秩序与新秩序 - 系统视角：从宏观结构看个体困境 ### 论证方式 - 先立后破：先承认合理性，再指出结构性问题 - 层层递进：现象→原因→影响→解决方案 - 数据/案例支撑：用具体数字、真实场景增强说服力 - 引用经典：适时引用古籍、名言 ### 语言风格 - 术语化表达：专业但不晦涩 - 短句为主：短促有力，节奏感强 - 排比结构：多段排比增强气势 - 直白批判：直指问题核心 - 金句收尾：每节结尾有记忆点 ### 情感基调 - 理性中带着悲悯 - 批判但不偏激 - 危机感与希望并存 ## 文章结构模板 ``` 【开头】 - 以对比强烈的场景/现象切入 - 提出核心问题 - 预告文章要做的事（第一、第二、第三） 【主体】 1. 概念定义（创造核心概念） 2. 分类讨论（建立分析框架） 3. 逐层深入（从表面到本质） 4. 未来推演（趋势预测） 5. 解决方案（可落地建议） 【结尾】 - 引用经典升华 - 回到开头的意象 - 开放式收束 ``` ## 常用句式 - "你觉得这公平吗？大多数人觉得不公平。但大多数人也觉得没办法。" - "这篇文章要做三件事：第一... 第二... 第三..." - "在没有路灯的夜晚... 现在灯亮了，他还攥着不放。" - "不是... 而是..." - "过去是... 现在是..." ## 使用方式 ### 基础使用 当用户想要用这个风格写作时： 1. **确认主题**：询问用户想写什么主题 2. **收集素材**：了解相关背景、数据、案例 3. **构建框架**：按照模板构建文章结构 4. **模仿写作**：运用上述风格特征进行创作 5. **检查调性**：确保符合理性深刻、结构清晰的特点 ### 工具辅助 本技能提供以下工具辅助写作： #### 1. 写作助手 (`scripts/writing_assistant.py`) ```bash # 列出所有模板 python3 scripts/writing_assistant.py --list-templates # 生成文章开头 python3 scripts/writing_assistant.py --topic "主题" --type analysis --action opening # 生成文章结构 python3 scripts/writing_assistant.py --topic "主题" --type analysis --action structure # 获取常用句式 python3 scripts/writing_assistant.py --action phrase ``` #### 2. 风格检测 (`scripts/style_analyzer.py`) ```bash # 分析文本风格 python3 scripts/style_analyzer.py --file 文章.md # 简要输出 python3 scripts/style_analyzer.py --file 文章.md --output brief # 分析直接输入的文本 python3 scripts/style_analyzer.py --text "文章内容..." ``` #### 3. 模板系统 提供5种专业模板： - `templates/analysis-template.md` - 分析类文章 - `templates/commentary-template.md` - 评论文 - `templates/report-template.md` - 报告文 - `templates/story-template.md` - 故事文 - `templates/interview-template.md` - 访谈文 ## 注意事项 - 保持客观理性，避免情绪化宣泄 - 善用"我们"拉近距离，但保持批判距离 - 每个观点都要有逻辑支撑 - 结尾要有升华，不能戛然而止


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: zhangifonly/aider (version 1.0.0)

--- name: "Aider" version: "1.0.0" description: "Aider AI 编程助手，精通终端内 AI 编程、Git 集成、多模型支持、代码重构" tags: ["ai-coding", "terminal", "aider", "git"] author: "ClawSkills Team" category: "developer-tools" --- # Aider - 终端内 AI Pair Programming 工具 ## 简介 Aider 是一款运行在终端中的 AI 结对编程工具，能直接编辑本地 Git 仓库中的代码。 它的核心理念是"对话即编程"——你用自然语言描述需求，Aider 自动修改代码并生成 Git commit。 ## 核心功能 - **自动 Git Commit**：每次代码修改自动生成语义化的 commit message - **多文件编辑**：一次对话中同时修改多个文件，保持跨文件一致性 - **文件管理**：通过 `/add` 和 `/drop` 精确控制 AI 可见的上下文范围 - **代码地图（Repo Map）**：基于 tree-sitter 构建仓库结构索引，帮助 AI 理解项目全貌 - **Linting 集成**：修改后自动运行 linter，发现问题自动修复 ## 支持的模型 | 模型 | 推荐场景 | 配置方式 | |------|---------|---------| | Claude Sonnet 4 | 日常编码（默认推荐） | `--model sonnet` | | Claude Opus 4 | 复杂架构重构 | `--model opus` | | GPT-4o | OpenAI 生态用户 | `--model gpt-4o` | | DeepSeek V3 | 高性价比选择 | `--model deepseek` | | Ollama 本地模型 | 离线/隐私场景 | `--model ollama/qwen2.5-coder` | ## 常用命令 ```bash # 启动 Aider aider # 当前目录启动 aider --model sonnet # 指定模型 aider file1.py file2.py # 预加载文件 # 会话内命令 /add src/main.py # 添加文件到上下文 /drop src/test.py # 从上下文移除文件 /undo # 撤销上一次 AI 修改（git undo） /diff # 查看当前修改的 diff /run pytest tests/ # 运行命令并将输出发给 AI /test pytest tests/ # 运行测试，失败时自动修复 /architect # 切换到 Architect 模式 /ask # 只问不改代码 /clear # 清空对话历史 ``` ## 配置文件 在项目根目录创建 `.aider.conf.yml`： ```yaml model: sonnet auto-commits: true gitignore: true dark-mode: true map-tokens: 2048 lint-cmd: "ruff check --fix" test-cmd: "pytest tests/ -x" ``` 环境变量配置（`~/.bashrc` 或 `~/.zshrc`）： ```bash export ANTHROPIC_API_KEY="sk-ant-..." export OPENAI_API_KEY="sk-..." ``` ## Architect 模式 Architect 模式采用"先规划再编码"的两阶段策略： 1. **Architect 模型**（如 Opus）负责分析需求、制定修改方案 2. **Editor 模型**（如 Sonnet）负责执行具体的代码修改 启用方式： ```bash aider --architect --model opus --editor-model sonnet ``` 适合复杂重构任务，Architect 模型产出高质量方案，Editor 模型高效执行。 ## 与同类工具对比 | 特性 | Aider | Claude Code | Cursor | |------|-------|-------------|--------| | 运行环境 | 纯终端 | 纯终端 | IDE | | Git 集成 | 自动 commit | 手动 commit | 无 | | 文件管理 | /add /drop 手动 | 自动检索 | 自动检索 | | 上手难度 | 低 | 低 | 极低 | | 适合场景 | 精确控制上下文 | 探索式开发 | GUI 偏好者 | ## 典型使用场景 - **快速修 Bug**：描述问题，Aider 定位并修复，自动 commit - **添加新功能**：`/add` 相关文件，描述需求，多文件协同修改 - **代码重构**：Architect 模式规划方案，批量重命名/拆分/合并 - **写测试**：`/add` 源码文件，要求生成对应的单元测试 - **代码审查辅助**：`/ask` 模式分析代码逻辑，不做修改 ## 安装 ```bash pip install aider-chat # 或使用 pipx 隔离安装 pipx install aider-chat ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mo-yuhua/skill-lifecycle (version 0.2.0)

--- name: skill-lifecycle description: | Skill 全生命周期管理工具 - 标准化开发、测试、发布流程 核心流程：版本管理 + 测试 + 质量扫描 + Git 提交 扩展流程：ClawHub 发布（可选）+ 知识提炼（可选） 效率提升：本地开发 35 分钟→3 分钟，完整发布 50 分钟→5 分钟 version: 0.2.0 tags: ["lifecycle", "devops", "cli", "skill-management", "automation"] metadata: openclaw: emoji: "🔄" --- # Skill Lifecycle - 全生命周期管理工具 ## 触发词 当用户提到以下内容时使用此 Skill： - "创建 skill-lifecycle" - "开发生命周期工具" - "自动化发布流程" - "sl-dev" / "sl-full" - "Skill 版本管理" ## 快速开始 ```bash # 安装依赖 cd ~/.openclaw/workspace/skills/skill-lifecycle pip install -r requirements.txt # 本地开发流程（不含发布） sl-dev --bump patch # 完整发布流程（含 ClawHub） sl-full --bump patch # 单独命令 sl-version bump patch sl-test sl-scan sl-commit -m "更新" sl-publish # 可选 ``` ## 命令说明 | 命令 | 功能 | 必需/可选 | |------|------|----------| | `sl-dev` | 开发流程（版本 + 测试 + 扫描 + Git） | 核心 | | `sl-full` | 完整流程（开发 + 发布） | 可选 | | `sl-version` | 版本管理 | 核心 | | `sl-test` | 测试执行 | 核心 | | `sl-scan` | 质量扫描 | 核心 | | `sl-commit` | Git 提交 | 核心 | | `sl-publish` | ClawHub 发布 | 可选 | ## 使用场景 **场景 1: 本地开发** ```bash cd skills/my-tool python3 ../skill-lifecycle/lifecycle.py dev --bump patch ``` **场景 2: 正式发布** ```bash cd skills/doc-processor python3 ../skill-lifecycle/lifecycle.py full --bump minor ``` **场景 3: 仅质量检查** ```bash python3 ../skill-lifecycle/lifecycle.py test && python3 ../skill-lifecycle/lifecycle.py scan ``` ## 文档 **详细文档**已归档到 `~/backups/skills-archive/skill-lifecycle-docs/`： - `DESIGN.md` - 详细设计文档 - `README.md` - 快速概览 - `USAGE.md` - 使用指南

path: commands/__init__.py
content: # Commands package
"""命令模块"""


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: konce/feishu-forward-reader (version 1.1.0)

--- name: feishu-forward-reader description: 读取和解析飞书合并转发消息(merge_forward)的详细内容。当收到飞书转发消息显示为"Merged and Forwarded Message"时使用此 skill 获取原始消息内容。 --- # 飞书转发消息读取器 读取飞书合并转发消息的详细内容。 ## 问题背景 飞书的合并转发消息 (`merge_forward`) 在 OpenClaw 中默认只显示 "Merged and Forwarded Message"，无法看到实际转发的内容。此 skill 通过飞书 API 获取转发消息的完整子消息列表。 ## 凭证配置 脚本会自动从以下位置获取飞书凭证（按优先级）： 1. **命令行参数**: `--app-id` / `--app-secret` 2. **环境变量**: `FEISHU_APP_ID` / `FEISHU_APP_SECRET` 3. **OpenClaw 配置**: `~/.openclaw/openclaw.json` 中的 `channels.feishu.appId/appSecret` 如果已配置 OpenClaw 飞书插件，无需额外配置即可使用。 ## 快速使用 ### 方法 1：Python 脚本（推荐） ```bash # 自动从 OpenClaw 配置读取凭证 python3 scripts/parse_forward.py <message_id> # 或手动指定凭证 python3 scripts/parse_forward.py <message_id> --app-id <id> --app-secret <secret> # JSON 格式输出 python3 scripts/parse_forward.py <message_id> --format json # 不查询用户名（更快） python3 scripts/parse_forward.py <message_id> --no-names ``` ### 方法 2：Shell 脚本（原始 JSON） ```bash # 自动从配置读取凭证 ./scripts/read_forward.sh <message_id> # 或手动指定 ./scripts/read_forward.sh <message_id> <app_id> <app_secret> ``` ### 方法 3：直接调用 API ```bash # 获取 token [REDACTED_SECRET] -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal' \ -H 'Content-Type: application/json' \ -d '{"app_id":"YOUR_APP_ID","app_secret":"YOUR_APP_SECRET"}' | jq -r '.tenant_access_token') # 获取消息详情 curl -s "https://open.feishu.cn/open-apis/im/v1/messages/<message_id>" \ -H "Authorization: Bearer $TOKEN" | jq . ``` ## API 响应结构 ```json { "code": 0, "data": { "items": [ { "message_id": "om_xxx", "msg_type": "merge_forward", "body": {"content": "Merged and Forwarded Message"} }, { "message_id": "om_yyy", "msg_type": "text", "body": {"content": "{\"text\":\"实际消息内容\"}"}, "upper_message_id": "om_xxx", "sender": {"id": "ou_xxx", "sender_type": "user"}, "create_time": "1234567890000" } ] } } ``` - 第一条是转发消息本身 (`msg_type: merge_forward`) - 后续是被转发的原始消息，带有 `upper_message_id` 指向父消息 ## 支持的消息类型 | 类型 | 说明 | 解析方式 | |------|------|----------| | `text` | 文本消息 | `body.content` → JSON → `text` | | `post` | 富文本消息 | `body.content` → JSON → `title` + `content` | | `interactive` | 卡片消息 | `body.content` → JSON → `title` + `elements` | | `image` | 图片 | 显示 `[图片]` | | `file` | 文件 | 显示 `[文件]` | | `audio` | 语音 | 显示 `[语音]` | | `video` | 视频 | 显示 `[视频]` | ## 权限要求 飞书应用需要以下权限： - `im:message:readonly` - 获取群组中所有消息（敏感权限） - `contact:contact.base:readonly` - 获取用户基本信息（可选，用于显示用户名） ## 示例输出 ``` 📨 合并转发消息 (3 条) 来源群: oc_xxxxxxxxxxxxxxxxxxxx ---------------------------------------- [02-25 14:02] 张三 大家好，这是一条测试消息 [02-25 14:03] ou_yyyyyyyyyyy... 收到，我看看 [02-25 14:05] 李四 已处理完成 ``` 注：可见范围内的用户显示真实姓名，范围外的显示 ID 前缀。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (MEDIUM)
Skill: rogerscristo/dutch-translator (version 1.0.0)

# Skill: Dutch News Interlinear Translator ## Description Translates Dutch news text into English using an interlinear format (Original Dutch line -> English Translation line). Useful for learning the language or analyzing source text nuances. ## Usage Provide the Dutch text. The agent will split it by sentence/meaningful clause and output: > 🇳🇱 [Original Dutch] > 🇬🇧 [English Translation] ## Example > 🇳🇱 Lente in de tuin: wat kan, mag of moet nog even wachten? > 🇬🇧 Spring in the garden: what can, may, or must wait a little longer?


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: zven0312/flow-monitor (version 1.0.0)

--- name: flow-monitor description: Universal flow tracer with cross-platform date support, latency calculation, and token estimation. author: Zven version: 1.3.0 --- # FlowMonitor Universal Professional execution tracing for OpenClaw/MCP environments. ## Instructions 1. Call `get_trace` via `bash scripts/trace.sh`. 2. **Post-Processing**: - **Latency**: Calculate the difference between `unix_time` of the current step and the previous step. Display as `+Xs`. - **Resource**: Display `estimated_tokens` as a measure of cost. 3. **LangSmith Visualization**: - Create a **Trace Table**: | Step | Time | Skill | Latency | Est. Tokens | - Create a **Mermaid Flow**: Use `sequenceDiagram` to show the timeline. ## Metadata Rules - If `unix_time` is missing or 0, skip latency for that specific step. - Use a ⏱️ icon for latency and a 🪙 icon for tokens. ## Commands - `get_trace`: Run the shell script to fetch raw telemetry.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)