OpenClaw/clawhub-security-signals huggingface dataset:
Skill: leooooooow/find-creators (version 1.0.0)

--- name: Find Creators description: Find relevant creators, influencers, and affiliate partners for ecommerce outreach, creator seeding, TikTok Shop, and brand collaborations. Use when the user wants help finding who to contact, shortlist creator candidates, compare creator fit, or identify promising creators by niche, platform, geography, audience size, and content style. --- # Find Creators Help users find creator candidates worth contacting, not just a random list of accounts. ## Use when - The user wants creators for TikTok Shop, affiliate campaigns, UGC, whitelisting, or seeding - The user needs a shortlist of creators by niche, geography, audience size, or style - The user wants help comparing which creators are a better fit for a product or campaign ## Inputs - Product or category - Target audience - Platform and geography - Preferred creator size or style - Budget or collaboration model if known - Any exclusions or must-have filters ## Workflow 1. Clarify the product, audience, platform, and collaboration goal 2. Search public creator signals across the specified sources 3. Compare candidates by relevance, style, audience match, and likely partnership fit 4. Remove weak or duplicate candidates 5. Return a prioritized shortlist with clear reasons ## Output Return: - Creator shortlist - Links or source references when available - Why each creator looks relevant - Risks or unknowns to verify - Suggested next outreach angle ## Quality bar - Do not dump a raw list with no reasoning - Explain why each candidate made the shortlist - Separate strong fits from weaker maybes - Be honest about missing information or uncertainty

path: references/output-template.md
content: # Output Template

## Search goal
- Product/category:
- Platform:
- Geography:
- Creator type:

## Priority shortlist
### 1) [Creator name]
- Why this creator fits:
- Evidence/signals:
- Risks / unknowns:
- Suggested outreach angle:

## Secondary options
- [Creator]
- [Creator]

## Recommendation
- Start with:
- Avoid / verify first:


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: donsqualo/prusalink-cli (version 1.0.2)

--- name: prusalink-cli description: "OpenClaw skill: local PrusaLink CLI (curl wrapper) for status/upload/print using Digest auth (user/password) or optional X-Api-Key." user-invocable: true metadata: { "author": "DonSqualo", "env": { "PRUSALINK_HOST": { "description": "Printer host/IP (default: printer.local).", "default": "printer.local" }, "PRUSALINK_SCHEME": { "description": "http or https (default: http).", "default": "http" }, "PRUSALINK_USER": { "description": "PrusaLink Digest username." }, "PRUSALINK_PASSWORD": { "description": "PrusaLink Digest password." }, "PRUSALINK_API_KEY": { "description": "Optional: send as X-Api-Key if your PrusaLink supports it." }, "PRUSALINK_TIMEOUT": { "description": "curl max-time seconds (default: 10).", "default": "10" } }, "openclaw": { "requires": { "bins": ["curl"] } } } --- # PrusaLink CLI This skill provides a small, local `curl`-based PrusaLink CLI via `run.sh`. For safety, this published skill intentionally **does not** include an "arbitrary API request" command (to reduce prompt-injection misuse). It exposes only the fixed, common endpoints (status/job/upload/start/cancel). ## Install Into OpenClaw Copy this folder to: - `~/.openclaw/skills/prusalink-cli/` Then OpenClaw can discover it as a skill. ## Run Run through the skill wrapper: ```bash ~/.openclaw/skills/prusalink-cli/run.sh --help ``` ## Auth Set either: - Digest auth: `PRUSALINK_USER` + `PRUSALINK_PASSWORD` (recommended) - or `PRUSALINK_API_KEY` (sent as `X-Api-Key`, if your PrusaLink supports it) Avoid shell history leaks: ```bash ~/.openclaw/skills/prusalink-cli/run.sh --password-file /path/to/secret status ``` ## Security Notes - This skill does not download or execute code from the network at runtime. - It only makes HTTP requests to your configured `PRUSALINK_HOST`.


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jin935150450-ctrl/bisheng-demo-note-polisher (version 1.0.0)

--- name: demo-note-polisher description: Turn rough notes, bullet lists, chat fragments, meeting takeaways, and mixed-language drafts into polished writing. Use when the user asks to rewrite, polish, clean up, organize, or reframe messy text into a clearer message, email, status update, announcement, summary, or short memo without changing the underlying facts. --- # Demo Note Polisher ## Goal Turn incomplete or messy source text into clean, readable output while preserving the user's intent, facts, and level of certainty. ## Workflow 1. Identify the target output. Common targets: direct message, email, project update, meeting summary, announcement, short memo. 2. Infer audience and tone from the request. Default to concise and professional when the user does not specify tone. 3. Extract the factual content from the raw notes. Preserve names, dates, numbers, decisions, blockers, and next steps exactly unless the user explicitly asks for changes. 4. Rewrite for clarity. Remove duplication, filler, and private shorthand that would confuse the reader. 5. Mark uncertainty instead of inventing details. If key information is missing, surface it as an open question or a neutral placeholder. ## Output Rules - Keep the same language as the input unless the user requests another language. - If the input mixes languages, normalize to the dominant language unless the user wants bilingual output. - Do not fabricate timelines, metrics, owners, or outcomes. - Keep the output shorter than the source unless the user asks for expansion. - Preserve the user's stance and confidence level. - If the notes are extremely rough, provide one polished version and one shorter version. ## Format Heuristics ### Message - Keep it brief and direct. - Lead with the main point. - End with the requested action, if any. ### Email - Use a clear subject line only when it helps. - Open and close politely but keep the body compact. - Group related details into short paragraphs or bullets. ### Status Update Use this structure when the user wants a weekly update or progress summary: 1. Summary 2. Progress 3. Blockers 4. Next steps ### Meeting Summary Use this structure when the notes come from a meeting: 1. Purpose 2. Decisions 3. Action items 4. Open questions ## Clarification Rule Ask at most one clarifying question only if the missing detail would materially change the output, such as the target audience or required language. Otherwise, make a reasonable default choice and proceed. ## Example Requests - "Polish these meeting notes into a short recap for the team." - "Turn this rough draft into a professional email." - "Clean up my weekly update and make it more concise." - "Rewrite these mixed Chinese and English notes into one clear announcement."


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: elevo11/podcast-generator (version 1.1.0)

--- name: podcast-generator description: > Convert articles, blog posts, or any text into professional podcast scripts and TTS audio. Use when a user wants to: (1) Transform written content into conversational podcast scripts, (2) Generate TTS audio from scripts, (3) Create single-host or two-host dialogue episodes. Integrates SkillPay.me billing at 0.001 USDT per call. --- # Podcast Generator Converts articles into podcast scripts + audio. Charges 0.001 USDT per use via SkillPay. ## Workflow ``` 1. Billing check → scripts/billing.py --charge --user-id <id> 2. Generate script → scripts/generate_script.py --input <file> --format <solo|dialogue> 3. Generate audio → scripts/generate_audio.py --script <file> --output podcast.mp3 4. View stats → scripts/stats.py (NEW) ``` ### Step 1: Billing ```bash SKILLPAY_API_KEY=sk_xxx python3 scripts/billing.py --charge --user-id <user_id> ``` - `success: true` → proceed - `needs_payment: true` → return `payment_url` to user for top-up Other commands: - `--balance` — check user balance - `--payment-link` — generate top-up link ### Step 2: Script Generation ```bash python3 scripts/generate_script.py --input article.txt --format solo --output script.md python3 scripts/generate_script.py --input article.txt --format dialogue --output script.md ``` Formats: `solo` (single host) or `dialogue` (two hosts A/B with conversation). ### Step 3: Audio Generation ```bash python3 scripts/generate_audio.py --script script.md --output podcast.mp3 ``` Requires `edge-tts` (`pip install edge-tts`). Uses different voices for Host A (female) and Host B (male). Falls back to segment list if edge-tts unavailable. ### Usage Statistics (NEW) ```bash python3 scripts/stats.py # Show usage stats python3 scripts/stats.py --action log --title "Episode 1" --format solo --audio-seconds 120 ``` Tracks: total generations, audio duration, cost breakdown by format. ## Config | Env Var | Required | Description | |:---|:---:|:---| | `SKILLPAY_API_KEY` | Yes | SkillPay.me API key | ## Script Templates See `references/script-templates.md` for format details and voice options.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: marcochen823/legal-gstack (version 1.0.0)

--- name: legal-gstack description: 法律工作流程自动化套件。8 个专家角色：法律检索、文书起草、证据分析、庭审准备、直播运营、客户接待、利益冲突审查、案件管理。 metadata: { "openclaw": { "requires": { "bins": [] }, "install": [] } } --- # 法律 gstack - 法律工作流程自动化 陈律的专属法律工作套件，将法律实务流程标准化、自动化。 ## 技能列表 | 技能 | 命令 | 角色 | 优先级 | |------|------|------|--------| | 法律检索 | `/legal-research` | 法律检索专家 | P1 | | 文书起草 | `/legal-draft` | 文书起草员 | P2 | | 证据分析 | `/evidence-analyzer` | 证据分析师 | P3 | | 庭审准备 | `/trial-prep` | 庭审策略顾问 | P4 | | 直播运营 | `/live-ops` | 直播运营官 | P5 | | 客户接待 | `/client-intake` | 案情分析师 | P6 | | 利益冲突审查 | `/conflict-check` | 利益冲突审查员 | P7 | | 案件管理 | `/case-manager` | 案件管理员 | P8 | ## 文件结构 ``` ~/Documents/ ├── 01_案件管理/ │ ├── 进行中/ # 当前案件 │ ├── 已结案/ # 已归档案件 │ └── 模板/ # 文书模板 ├── 02_法律文书/ │ ├── 合同/ │ ├── 诉讼文书/ │ └── 非诉文书/ ├── 05_新媒体/ │ └── 抖音素材/ # 直播视频/内容沉淀 └── 陈律的知识库/ └── 法律知识/ # 法条/案例/实务知识 ``` ## 快速开始 ### 法律检索（P1） ``` /legal-research [问题描述] ``` - 检索法条、类案、学术观点 - 输出：检索报告 + 相关知识库链接 ### 文书起草（P2） ``` /legal-draft [文书类型] --case [案件名] ``` - 起诉状/答辩状/代理词/律师函 - 自动读取案件材料 + 模板 ### 证据分析（P3） ``` /evidence-analyzer [案件名] ``` - 证据三性分析 - 生成证据清单 + 质证意见 ### 庭审准备（P4） ``` /trial-prep [案件名] ``` - 庭审提纲 - 发问清单 - 辩论要点 ### 直播运营（P5） ``` /live-ops start [直播链接] # 开始监控评论 /live-ops topic # 选题策划 /live-ops archive # 内容归档 ``` ### 客户接待（P6） ``` /client-intake [客户问题描述] ``` - 法律关系识别 - 风险预判 - 接案建议 ### 利益冲突审查（P7） ``` /conflict-check [对方当事人/案由] ``` - 检索历史案件 - 输出冲突报告 ### 案件管理（P8） ``` /case-manager list # 案件列表 /case-manager deadline [案件名] # 期限提醒 /case-manager archive [案件名] # 结案归档 ``` ## 工作流 ``` 咨询 → 检索 → 文书 → 证据 → 庭审 → 归档 ↓ 直播运营（获客） ``` ## 安全边界 - 所有法律意见需陈律最终确认 - 敏感案件（刑事/涉外）自动标记 - 案件信息本地存储，不上传云端 --- *版本：1.0.0 | 作者：陈律 + 贾维斯*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: marjoriebroad/ainotes-of-video (version 1.0.0)

--- name: ai-notes-ofvideo description: Generate AI-powered notes from videos (document, outline, or graphic-text formats) metadata: { "openclaw": { "emoji": "📺", "requires": { "bins": ["python3"], "env":["SKILLBOSS_API_KEY"]},"primaryEnv":"SKILLBOSS_API_KEY" } } --- # AI Video Notes Generate structured notes from video URLs using SkillBoss API Hub. Supports three note formats. ## Workflow 1. **Generate Notes**: Submit video URL → get structured notes synchronously via SkillBoss API Hub ## Note Types | Type | Description | |------|-------------| | 1 | Document notes | | 2 | Outline notes | | 3 | Graphic-text notes | ## APIs ### Generate Notes **Endpoint**: `POST https://api.heybossai.com/v1/pilot` **Parameters**: - `video_url` (required): Public video URL **Example**: ```bash python3 scripts/ai_notes_task_create.py 'https://example.com/video.mp4' ``` **Response**: ```json { "status": "success", "notes": "Generated notes content..." } ``` ### Query Notes **Endpoint**: `POST https://api.heybossai.com/v1/pilot` **Parameters**: - `video_url` (required): Public video URL (SkillBoss API Hub returns results synchronously) **Example**: ```bash python3 scripts/ai_notes_task_query.py "https://example.com/video.mp4" ``` **Response** (Completed): ```json { "notes": "Document notes...\nOutline notes...\nGraphic-text notes..." } ``` ## Polling Strategy ### Option 1: Manual Query 1. Call the create script directly with video URL 2. Notes are returned synchronously: ```bash python3 scripts/ai_notes_task_create.py <video_url> ``` ### Option 2: Auto Query (Recommended) Use the poll script for automatic note generation: ```bash python3 scripts/ai_notes_poll.py <video_url> [max_attempts] [interval_seconds] ``` **Examples**: ```bash # Default settings python3 scripts/ai_notes_poll.py "https://example.com/video.mp4" # Custom: 30 attempts, 5-second intervals python3 scripts/ai_notes_poll.py "https://example.com/video.mp4" 30 5 ``` **Output**: - Returns formatted notes with type labels upon completion ## Error Handling - Invalid URL: "Video URL not accessible" - Processing error: "Failed to parse video" - Timeout: "Video too long, try again later"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: forevercrab321-svg/browser-ops-high-autonomy (version 1.0.0)

# Browser Ops High Autonomy High-autonomy browser workflow skill for approved domains. ## What it does - Completes routine browser tasks end-to-end with minimal interruption. - Restricts operations to explicitly approved domains. - Escalates only when legal/payment/login/security challenge events occur. ## Escalation statuses - `LOGIN_REQUIRED` - `SECURITY_CHALLENGE` - `LEGAL_REVIEW_REQUIRED` - `PAYMENT_REVIEW_REQUIRED` - `DOMAIN_NOT_ALLOWED` - `BLOCKED` - `DONE` ## Security policy - Never bypasses security controls. - Never bypasses access restrictions. - Returns explicit status and next action metadata. ## Typical use cases - Customer support workflows - Email operations - CRM updates - Administrative forms and platform operations - Structured data extraction and research


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: bytesagain1/crypto-news-feed (version 3.0.2)

--- name: "crypto-news-feed" version: "3.0.1" description: "Reference tool for blockchain and crypto — covers intro, formulas, regulations and more. Quick lookup for Crypto News Feed concepts, best practices, and impl..." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [crypto,news,feed, reference] category: "blockchain" --- # Crypto News Feed Reference tool for blockchain and crypto — covers intro, formulas, regulations and more. Quick lookup for Crypto News Feed concepts, best practices, and impl... No API keys or credentials required. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `formulas` | formulas reference | | `regulations` | regulations reference | | `risks` | risks reference | | `instruments` | instruments reference | | `strategies` | strategies reference | | `glossary` | glossary reference | | `checklist` | checklist reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: terrycarter1985/gog-dormant-cleanup (version 1.0.0)

--- name: gog-dormant-cleanup description: "Find installed GOG games not played in 30+ days, email a summary report, and add each game to Apple Reminders as a cleanup nudge. Use when: user wants to clean up their GOG library, find dormant/unused games, get reminded about unplayed games, or automate a gaming cleanup workflow. Triggers: 'dormant games', 'GOG cleanup', 'unplayed games', 'game cleanup reminder', 'clean up my library'." --- # GOG Dormant Game Cleanup Automated workflow to surface idle installed GOG games and nudge the user to consider uninstalling. ## Workflow 1. **Scan** the GOG library JSON for installed games whose `last_played` is older than the cutoff (default 30 days). 2. **Email** a formatted summary to the user's personal himalaya account. 3. **Remind** by adding each dormant game to Apple Reminders under the `Gaming` list. ## Script Run `scripts/gog_dormant_cleanup.sh`: ```bash scripts/gog_dormant_cleanup.sh <cutoff_days> <library_json> [himalaya_account] [reminders_list] ``` | Parameter | Default | Description | |-----------|---------|-------------| | cutoff_days | 30 | Days of inactivity to qualify as dormant | | library_json | (required) | Path to GOG library JSON (see config format below) | | himalaya_account | personal | Himalaya account name for sending email | | reminders_list | Gaming | Apple Reminders list name | ### Environment Variables - `DRY_RUN=1` — print actions without sending email or creating reminders. ### GOG Library JSON Format The script expects a JSON file with this structure: ```json { "games": [ { "name": "Game Title", "installed": true, "last_played": "2026-03-28T19:45:00", "install_path": "/path/to/game" } ] } ``` Games with `installed: false` are skipped. `last_played` may be `null` (never played). ## Prerequisites - `jq` — JSON parsing - `himalaya` — email delivery (optional; skips email if absent) - `remindctl` — Apple Reminders (optional; skips reminders if absent) ## Scheduling To run weekly via cron: ```bash # Every Monday at 9 AM 0 9 * * 1 /path/to/gog_dormant_cleanup.sh 30 /path/to/gog_library.json ``` Or use OpenClaw's cron tool for managed scheduling.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: veeicwgy/smart-pdf-reader (version 0.2.0)

--- name: smart-pdf-reader description: > Intelligent PDF reader and content extractor powered by MinerU API. Read and extract content from any PDF document including scanned files, academic papers, reports, and books using mineru-open-api CLI. Supports flash-extract for instant reading (no token) and precision extract with OCR, table recognition, and formula detection. Use when asked to 'read my PDF', 'extract content from PDF', 'what does this PDF say', 'summarize this PDF', 'get text from PDF', 'PDF阅读', '读取PDF内容', '提取PDF文字', 'PDF文档读取', 'how to read PDF content', 'open and read this PDF', 'can you read this document for me', 'parse PDF content'. Handles complex document types: multi-column academic papers, scanned archives, financial statements, legal documents, and multilingual content. Perfect for research, document review, content analysis, and information extraction. tags: - pdf - reader - extraction - mineru - document-analysis - academic - ocr - content-extraction - research - document-review tools: - Bash(mineru-open-api:*) model: claude-3-5-haiku-20241022 --- # Smart PDF Reader with mineru-open-api You are an intelligent PDF reading assistant. Read and extract content from PDFs using mineru-open-api. ## Installation ```bash npm install -g mineru-open-api ``` ## Reading Workflow 1. Quick read (no token): ```bash mineru-open-api flash-extract document.pdf ``` (Outputs Markdown to stdout for immediate reading) 2. Read with output file: ```bash mineru-open-api flash-extract document.pdf -o ./output/ ``` 3. Deep read with OCR and tables: ```bash mineru-open-api extract document.pdf --ocr -o ./output/ ``` 4. Academic paper reading: ```bash mineru-open-api extract paper.pdf --model vlm -o ./output/ ``` ## Key Rules - For quick reading, use `flash-extract` without `-o` to output to stdout - Default to `flash-extract` for PDFs under 10MB/20 pages - Use `extract` for scanned PDFs, table-heavy docs, or large files - After extraction, read the output and summarize for the user if asked - Generate default output dir: `~/MinerU-Skill/<name>_<hash>/`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kaising-openclaw1/cli-obsidian (version 1.0.1)

# cli-obsidian **Obsidian 命令行工具 - 让 AI Agent 直接操作你的笔记** ## 功能 - 命令行创建/搜索/管理笔记 - 支持标签系统 - JSON 输出，完美对接 AI Agent - 跨平台支持（Win/Mac/Linux） ## 安装 ```bash pip install cli-obsidian ``` ## 使用 ```bash # 创建笔记 cli-obsidian create "会议记录" --tag work # 搜索笔记 cli-obsidian search "AI Agent" # 列出笔记 cli-obsidian list --tag work ``` ## 定价 - **标准版**: ¥68 一次性 - 永久使用授权 - 免费更新 ## 作者 CLI Skill Factory


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: tvdofficial/google-home-control (version 1.0.3)

--- name: google-home description: Control smart home devices (lights, TV, etc.) via the Google Assistant SDK. Use when the user wants to trigger home automation commands. author: Mathew Pittard (Mat) --- # Google Home Control (N.O.V.A.) Created by: **Mathew Pittard (Mat)** Portfolio: [mathewpittard.vercel.app](https://mathewpittard.vercel.app) This skill allows **Clawdbot** to control your smart home devices (lights, TVs, appliances) directly using a Python-based bridge to the Google Assistant SDK. ## 🛠️ Step-by-Step Setup To get this skill working, you'll need to link it to your own Google account. Follow these steps: ### 1. Create a Google Cloud Project 1. Go to the [Google Cloud Console](https://console.developers.google.com/). 2. Create a new project (e.g., "My Smart Home"). 3. Enable the **Google Assistant API**. ### 2. Configure OAuth 1. Go to **APIs & Services > Credentials**. 2. Configure your **OAuth Consent Screen** (set User Type to "External" and add yourself as a test user). 3. Create an **OAuth 2.0 Client ID** with the type **Desktop app**. 4. Download the JSON file and rename it to `client_secret.json`. ### 3. Prepare the Python Environment This skill requires a Python virtual environment with specific dependencies: ```bash # Create and activate environment python3 -m venv google_home_env source google_home_env/bin/activate # Install requirements pip install google-assistant-sdk[samples] google-auth-oauthlib[tool] tenacity ``` ### 4. Authorize and Generate Credentials Run the following command in your terminal to authorize the SDK: ```bash google-oauthlib-tool --client-secrets /path/to/your/client_secret.json --scope https://www.googleapis.com/auth/assistant-sdk-prototype --save ``` * This will open a browser window. Log in and grant permissions. * It will save a `credentials.json` file to `~/.config/google-oauthlib-tool/credentials.json`. ### 5. Final Configuration Ensure the `google_home_env` is accessible to Clawdbot. When Clawdbot runs the skill, it will look for your credentials in the standard `~/.config` path automatically. --- ## 🚀 Usage Simply tell the agent what to do: - "Turn off the office lights." - "Set the TV volume to 20." The agent will use the `control.py` script inside this skill to execute the command via Google Assistant.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)