OpenClaw/clawhub-security-signals huggingface dataset:
Skill: maotianyuan/mty-frontend-design-zh (version 1.0.0)

--- name: frontend-design-zh description: 创建具有高设计质量、独特且可用于生产的前端界面。当用户要求构建 Web 组件、页面、海报或应用（如网站、落地页、仪表盘、React 组件、HTML/CSS 布局，或美化任何 Web UI）时使用。生成有创意、精致的代码与 UI 设计，避免通用 AI 审美。 license: 完整条款见 LICENSE.txt --- 本技能指导创建独特、可用于生产的前端界面，避免千篇一律的「AI 风格」审美。实现真正可用的代码，并特别关注美学细节与创意选择。 用户提供前端需求：要构建的组件、页面、应用或界面。可能包含用途、受众或技术约束等上下文。 ## 设计思路 编码前，理解上下文并确定**大胆**的美学方向： - **目的**：该界面解决什么问题？谁在使用？ - **调性**：选择一种极致风格：极简、极繁、复古未来、有机自然、奢华精致、趣味玩具感、杂志编辑风、粗野主义、装饰艺术几何、柔和粉彩、工业实用主义等。用这些作为灵感，但设计出忠于所选美学方向的作品。 - **约束**：技术要求（框架、性能、无障碍）。 - **差异化**：什么让人**过目不忘**？用户会记住的那一点是什么？ **关键**：选择清晰的概念方向并精准执行。大胆的极繁与克制的极简都可行——核心是刻意与意图，而非强度。 然后实现可用的代码（HTML/CSS/JS、React、Vue 等），要求： - 可用于生产、功能完整 - 视觉冲击力强、令人难忘 - 风格统一、有明确美学观点 - 细节打磨到位 ## 前端美学指南 关注： - **字体**：选择美观、独特、有趣的字体。避免 Arial、Inter 等通用字体；选择能提升前端美感的、有特色的字体；出其不意、有性格的字体搭配。将特色展示字体与精致正文字体搭配。 - **色彩与主题**：坚持统一的美学。用 CSS 变量保证一致性。主色 + 鲜明点缀色优于 timid、均匀分布的配色。 - **动效**：用动画做效果与微交互。HTML 优先用纯 CSS 方案。React 可用 Motion 库。聚焦高影响力时刻：一次编排得当的页面加载（staggered reveals、animation-delay）比零散的微交互更能带来愉悦。用滚动触发和 hover 状态制造惊喜。 - **空间与布局**：非常规布局。不对称。重叠。斜向流动。打破网格的元素。大量留白或受控的密度。 - **背景与视觉细节**：营造氛围与层次，而非默认纯色。添加与整体美学匹配的情境效果与纹理。运用渐变网格、噪点纹理、几何图案、分层透明、戏剧性阴影、装饰边框、自定义光标、颗粒叠加等创意形式。 **禁止**使用通用 AI 审美：过度使用的字体（Inter、Roboto、Arial、系统字体）、陈词滥调的配色（尤其是白底紫渐变）、可预测的布局与组件模式、缺乏情境特色的套娃设计。 创造性解读并做出出人意料的选择，让设计真正贴合情境。每个设计都应不同。在明暗主题、不同字体、不同美学之间变化。**切勿**在多次生成中趋同于常见选择（例如 Space Grotesk）。 **重要**：实现复杂度要与美学愿景匹配。极繁设计需要更丰富的代码、大量动画与效果。极简或精致设计需要克制、精准，以及对方距、字体和细微细节的精心把控。优雅来自对愿景的良好执行。 记住：Claude 具备出色的创意能力。不要保守，充分展现跳出框架思考、全力投入独特愿景时能创造出的成果。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mike47512/islands (version 0.1.0)

--- name: "网红海岛" description: "提供关于网红海岛的推荐清单、打卡路线与指南。用户搜索网红海岛或规划相关出行时调用。" --- # 网红海岛 ## 筛选项 - 难度/里程/海拔/路况（铺装/土路） - 季节/气候/最佳时段/是否需要预约或许可 - 安全（补给点/紧急撤退/信号覆盖）/亲子或萌宠友好 ## 返回字段 - 路线图/用时/交通方式/补给点与洗手间 - 风景亮点/拍摄位/人流情况/风险点 - 天气预警/装备清单/环保与无痕原则 ## 示例请求 - “杭州 网红海岛 雨季友好路线（坡度≤8%）” - “深圳 网红海岛 城市步道串联（地铁直达）” ## 更新频率 - 每周迭代，结合新热度与口碑反馈 ## 注意事项 - 高峰期排队较久，建议提前预约或错峰 - 部分项目有拍摄限制或最低消费，按现场规则执行


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: edsoneras/investment-analyst (version 1.0.0)

--- name: investment-analyst description: > Agente especialista em analise de investimentos com foco em analise fundamentalista e tecnica. Suporta: get_market_data, calculate_roi, portfolio_analysis, generate_report, risk_profile_classifier. Use para avaliar acoes, FIIs, ETFs, calcular retornos, analisar carteira, gerar relatorios e classificar perfil de risco. --- # InvestmentAnalystAgent Agente especialista em análise de investimentos com expertise em análise fundamentalista e técnica. ## Skills Disponíveis ### 1. get_market_data Obter dados de mercado para ativos: - Preços atuais e históricos - Volume de negociação - Dados fundamentalistas (P/L, P/VP, dividend yield, etc.) - Fontes: Dados.rs, Fundamentus, Yahoo Finance, Morningstar ### 2. calculate_roi Calcular retorno sobre investimento: - ROI simples: (Valor Final - Valor Inicial) / Valor Inicial - ROI anualizado - TWR (Time-Weighted Return) - Dividend Yield realized - Comparar com benchmarks (IBOV, CDI, etc.) ### 3. portfolio_analysis Analisar carteira de investimentos: - Alocação por classe de ativos (ações, FIIs, renda fixa, crypto) - Concentração por setor/ativo - Correlação entre ativos - Diversificação (concentração > 20% = alerta) - Suggestions de rebalanceamento ### 4. generate_report Gerar relatórios de análise: - Relatório fundamentalista completo - Relatório técnico com gráficos - Carteira recomendada - Comparativo de ativos - Formato: texto, markdown, ou estruturado ### 5. risk_profile_classifier Classificar perfil de risco do investidor: - Conservador: preferência renda fixa, baixa volatilidade - Moderado: equilíbrio renda variável/renda fixa - Agressivo: alta exposição a risco, alta volatilidade - Baseado em questionário ou histórico de investimentos ## Análise Fundamentalista ### Métricas Essenciais **Ações:** - P/L < 15 = bom, > 25 = caro - P/VP < 1 = subvalorizado - Dividend Yield > 6% = interessante - ROE > 15% = bom - Dívida Bruta/Patrimônio < 50% = saudável **FIIs:** - Dividend Yield mensal - P/VP < 1 = oportunidade - Vacância < 10% = bom ## Análise Técnica - RSI: > 70 sobrecomprado, < 30 sobrevendido - MACD: cruzamento de signal - Médias móveis: 21, 50, 200 períodos - Suporte/Resistência ## Processo de Análise 1. Identificar ativo ou objetivo 2. Buscar dados (get_market_data) 3. Calcular métricas (calculate_roi, se aplicável) 4. Analisar portfólio (portfolio_analysis, se aplicável) 5. Gerar relatório (generate_report) 6. Classificar risco (risk_profile_classifier, se aplicável) ## Formato de Resposta - Resumo executivo (1 frase) - Métricas em tabela - Prós e contras - Recomendação clara - Fonte da Informação - Disclaimer: não sou advisor registrado


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ninetyhe-90/stock-review-to-wechat-official (version 1.2.0)

--- name: stock-review-to-wechat-official description: 【内容创作者通用生产力工具】任意长文本一键转公众号推文神器，支持将口语化聊天记录、素材草稿、会议纪要、读书笔记、行业分析、赛事复盘等所有非结构化内容，自动转换为结构清晰、排版规范、符合公众号阅读习惯的标准化推文，自动提炼核心观点、分层排版、生成合规提示，无需手动调整格式，10秒输出可直接发布的内容，大幅降低公众号内容生产门槛 category: content-generation --- ## 触发场景 - 用户发送任意口语化文本/聊天记录/素材草稿，需要生成公众号文章 - 用户需要把结构化程度低的内容（会议纪要、读书笔记、行业分析等）快速整理为适合公众号发布的格式 - 用户要求按照公众号标准排版优化现有文章内容 ## 执行步骤 1. 支持两种模板选择，自动适配用户需求： - **标准版结构**（默认）： - 标题：# 今日市场复盘：[当日核心特征，如普涨如期而至，算力租赁异军突起] - 一、盘面解读：提炼当日核心盘面特征，包括国家队/外资动向、指数表现、小票/大票风格切换 - 二、板块轮动：分板块分析表现，核心逻辑，板块之间的压制/共振关系，重点标的分析 - 三、情绪周期：龙头表现、高度压制突破情况、中位晋级率、情绪阶段判断 - 四、连板梯队：按四进五/三进四/二进三/一进二的顺序分析各梯队核心标的的晋级逻辑、值得关注的方向 - 五、竞价信息提取：提炼盘前竞价的核心信号，包括大单动向、产业链行为识别、板块强度预判 - 六、全天总结：包括外围市场影响、成交量分析、资金动向、整体市场状态判断 - 七、展望：后市/下一个交易日的操作建议、可能出现的新题材预判 - 固定结尾：统一风险提示+引流话术 - **优享版结构**（逻辑更连贯，适合深度复盘号）： - 标题：# [核心冲突点]：[关键结论，如光通信高潮分歧落地：从开盘加速看板块见顶信号] - 开篇总览：核心行情特征+当日预判验证情况，开门见山给出核心结论 - 分模块拆解：盘面核心矛盾→主线板块博弈逻辑→情绪周期转折→连板梯队信号→竞价细节拆解→走势验证→后市策略，逻辑贯穿全文，可读性更强 - 固定结尾：统一风险提示+引流话术 2. 自动保存功能：生成后的文章自动保存到用户指定的公众号目录，默认路径：`/root/.hermes/hermes-agent/gzh/[日期]_[标题].md` 2. 内容处理规则： - 100%保留原文所有核心实战观点、标的分析、周期规律、案例比喻，不得删减关键信息 - 将口语化表达（如"GJD"、"逼着头铁"、"坑爹"）转换为通顺的书面表达，但保持接地气的实战风格，避免生硬官方 - 重点信息（核心结论、重要标的、风险提示）用**加粗**突出，增强可读性 - 原文提到的历史规律、过往案例（如"合富周期"、"项羽刘邦比喻"）需完整保留，增强内容连贯性 3. 固定结尾模板： --- **风险提示：** 以上内容仅为个人复盘总结，不构成投资建议。股市有风险，投资需谨慎。 --- *如果觉得有帮助，欢迎点赞、在看、分享~* 4. 校验规则：生成后检查是否遗漏原文核心观点，结构是否完整，是否符合用户提供的历史样例风格


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: acetoolz/acetoolz-uuid (version 1.0.1)

--- name: acetoolz-uuid version: 1.0.1 description: Generate UUIDs (v1, v4, v7) in bulk using AceToolz. author: acetoolz permissions: - network:outbound triggers: - pattern: "generate a uuid" - pattern: "generate a guid" - pattern: "create uuid" - pattern: "random uuid" - pattern: "unique identifier" - pattern: "generate uuid v4" - pattern: "generate uuid v7" metadata: openclaw: emoji: 🆔 homepage: https://www.acetoolz.com/generate/tools/uuid-generator --- # AceToolz UUID Generator Use this skill whenever the user asks to generate one or more UUIDs or GUIDs. ## How to Use Use `exec` to call the AceToolz API. Detect the OS and run the appropriate command: Windows (PowerShell): ```powershell Invoke-RestMethod -Uri "https://www.acetoolz.com/api/openclaw/uuid-generator" -Method POST -ContentType "application/json" -Body '{"version": "v4", "count": 1}' ``` macOS / Linux (curl): ```bash curl -s -X POST https://www.acetoolz.com/api/openclaw/uuid-generator \ -H "Content-Type: application/json" \ -d '{"version": "v4", "count": 1}' ``` Adjust the body parameters based on the user's request before executing. ## Parameters (all optional) | Field | Type | Default | Description | |-------|------|---------|-------------| | `version` | string | `"v4"` | UUID version: `"v1"`, `"v4"`, or `"v7"` | | `count` | number | 1 | How many UUIDs to generate (1–10) | Version guidance: - **v4** — fully random, most common, use by default - **v1** — timestamp + MAC address based - **v7** — timestamp-sortable, good for databases ## Presenting Results For a single UUID, show it plainly in a code block. For multiple, list them: > **Generated UUIDs (v4)** > ``` > 550e8400-e29b-41d4-a716-446655440000 > f47ac10b-58cc-4372-a567-0e02b2c3d479 > ``` > > *Powered by [AceToolz](https://www.acetoolz.com)* ## Error Handling - If count is outside 1–10, tell the user the valid range. - If an unsupported version is requested (v3, v5), explain that only v1, v4, and v7 are supported via this skill and suggest using the full tool at acetoolz.com. - If the API returns 429, the limit is 60 requests/minute. - If the API is unreachable, tell the user and suggest visiting https://www.acetoolz.com/generate/tools/uuid-generator directly.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: omactiengartelle/movie-poster-generator (version 1.0.1)

--- name: movie-poster-generator description: Create stunning AI movie posters, film posters, and cinema artwork. Generate professional movie poster designs, event posters, fan-made film posters, and theatrical promotional art with dramatic cinematic lighting and bold compositions via the Neta AI image generation API (free trial at neta.art/open). tools: Bash --- # Movie Poster Generator Create stunning AI movie posters, film posters, and cinema artwork. Generate professional movie poster designs, event posters, fan-made film posters, and theatrical promotional art with dramatic cinematic lighting and bold compositions. ## Token Requires a Neta API token (free trial at <https://www.neta.art/open/>). Pass it via the `--token` flag. ```bash node <script> "your prompt" --token YOUR_TOKEN ``` ## When to use Use when someone asks to generate or create movie poster generator images. ## Quick start ```bash node moviepostergenerator.js "your description here" --token YOUR_TOKEN ``` ## Options - `--size` — `portrait`, `landscape`, `square`, `tall` (default: `tall`) - `--ref` — reference image UUID for style inheritance ## Install ```bash npx skills add omactiengartelle/movie-poster-generator ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: athola/nm-egregore-uninstall-watchdog (version 1.0.2)

--- name: uninstall-watchdog description: | Remove the egregore watchdog daemon and clean up all associated files (plist/unit, pidfile, watchdog log) version: 1.9.5 metadata: {"openclaw": {"homepage": "https://github.com/athola/claude-night-market/tree/master/plugins/egregore", "emoji": "\ud83e\udd9e"}} source: claude-night-market source_plugin: egregore --- > **Night Market Skill** — ported from [claude-night-market/egregore](https://github.com/athola/claude-night-market/tree/master/plugins/egregore). For the full experience with agents, hooks, and commands, install the Claude Code plugin. # Uninstall Watchdog ## Overview Removes the egregore watchdog daemon and cleans up all files created by the install-watchdog skill. After uninstalling, egregore sessions will no longer be relaunched automatically. ## When To Use - When you no longer want autonomous relaunching. - Before removing the egregore plugin from a project. - When switching from daemon mode to manual invocation. ## When NOT To Use - When the watchdog was never installed (check first with the verify commands below). ## Uninstall Steps ### 1. Detect the operating system ```bash OS=$(uname -s) ``` ### 2. Stop and remove the service **macOS (launchd):** ```bash PLIST=~/Library/LaunchAgents/com.egregore.watchdog.plist # Unload the agent (stops it if running) launchctl unload "$PLIST" 2>/dev/null # Remove the plist file rm -f "$PLIST" ``` **Linux (systemd):** ```bash # Stop and disable the timer and service systemctl --user stop egregore-watchdog.timer 2>/dev/null systemctl --user disable egregore-watchdog.timer 2>/dev/null # Remove unit files rm -f ~/.config/systemd/user/egregore-watchdog.timer rm -f ~/.config/systemd/user/egregore-watchdog.service # Reload systemd to pick up the removal systemctl --user daemon-reload ``` ### 3. Clean up associated files ```bash # Remove pidfile if present rm -f ~/.egregore/watchdog.pid # Remove watchdog log rm -f ~/.egregore/watchdog.log ``` ### 4. Confirm removal **macOS:** ```bash launchctl list | grep egregore # Should produce no output ``` **Linux:** ```bash systemctl --user list-timers | grep egregore # Should produce no output ``` Report to the user that the watchdog has been removed and automatic relaunching is disabled. ## Files Removed | File | Platform | Purpose | |------|----------|---------| | `~/Library/LaunchAgents/com.egregore.watchdog.plist` | macOS | launchd agent definition | | `~/.config/systemd/user/egregore-watchdog.timer` | Linux | systemd timer unit | | `~/.config/systemd/user/egregore-watchdog.service` | Linux | systemd service unit | | `~/.egregore/watchdog.pid` | both | PID of last watchdog run | | `~/.egregore/watchdog.log` | macOS | watchdog output log |


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: pangkaifeng/obsidian-sync-kb (version 0.1.0)

--- name: obsidian-sync-kb description: Build a searchable local knowledge base from an Obsidian vault's "笔记同步助手" inbox, then answer with citations, topic cards, update logs, and daily digests for OpenClaw. Use when users want to structure synced Obsidian notes into a retrieval-ready knowledge base. --- # Obsidian Sync KB Turn an Obsidian `笔记同步助手` inbox into a local retrieval-ready knowledge base for OpenClaw. ## Setup Initialize the skill for a specific vault: ```bash python3 scripts/setup_config.py --vault-root "/absolute/path/to/ClawVault" ``` The setup script writes `scripts/config.yaml`. You can also skip setup and set [REDACTED_SECRET]. ## Commands Build or refresh the index: ```bash python3 scripts/kb_tool.py build-index python3 scripts/kb_tool.py build-index --force-full-rescan python3 scripts/kb_tool.py build-index --disable-network ``` Query the inbox knowledge base: ```bash python3 scripts/kb_tool.py query "怎么更好让 AI 做检索" python3 scripts/kb_tool.py query "OpenClaw harness" --topic openclaw --format json ``` Promote and curate: ```bash python3 scripts/kb_tool.py promote python3 scripts/kb_tool.py star retrieval-rag --type topic python3 scripts/kb_tool.py stats ``` ## Behavior - Treat the synced inbox as read-only source material. - Build normalized docs, chunks, topic cards, update logs, and a daily change digest. - Prefer source notes, original URLs, and `obsidian://` references before external search. - Return `简要结论`, `相关文章`, `关键摘录`, and `引用来源`. - Every citation must include the Obsidian path and original URL when available. - If a hit is a `bad_capture` or `needs_manual_access`, make that explicit instead of treating it as a valid source.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: chenkek901/internet-search-pro (version 1.0.0)

--- name: web-search description: | 联网搜索工具 - 帮你检索最新信息、新闻、实时数据 Use when: 用户需要查“最新消息”、“搜索xx”、“查一下”、“找资料” NOT for: 回答常识问题、闲聊、写文章 --- # Web Search Skill - 联网检索 你是一位信息检索专家，擅长帮用户快速找到准确、最新的网络信息。 ## Workflow 1. **提取关键词**：从用户问题中提取核心搜索词 2. **联网搜索**：调用内置搜索工具进行检索 3. **筛选结果**：过滤广告和无关内容，保留前3-5条最有价值的结果 4. **总结输出**：用简洁的语言归纳每条结果的核心信息 ## Output Format 🔍 **关于「{关键词}」的检索结果：** ### 📌 核心发现 （1-2句话总结最重要的发现） ### 📋 详细信息 1. **{标题1}** - 要点：... - 来源：[链接] 2. **{标题2}** - 要点：... - 来源：[链接] 3. **{标题3}** - 要点：... - 来源：[链接] ### 💡 建议 （根据搜索结果给出1条实用建议） ## 使用示例 用户：帮我查一下今天北京的天气 AI：（按上述格式输出搜索结果）


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jdrhyne/munger-observer (version 1.0.0)

--- name: munger-observer description: Daily wisdom review applying Charlie Munger's mental models to your work and thinking. Use when asked to review decisions, analyze thinking patterns, detect biases, apply mental models, do a "Munger review", or run the Munger Observer. Triggers on scheduled daily reviews or manual requests like "run munger observer", "review my thinking", "check for blind spots", or "apply mental models". --- # Munger Observer Automated daily review applying Charlie Munger's mental models to surface blind spots and cognitive traps. ## Process ### 1. Gather Today's Activity - Read today's memory file (`memory/YYYY-MM-DD.md`) - Scan session logs for today's activity - Extract: decisions made, tasks worked on, problems tackled, user requests ### 2. Apply Mental Models **Inversion** - What could go wrong? What's the opposite of success here? - "Tell me where I'm going to die, so I'll never go there." **Second-Order Thinking** - And then what? Consequences of the consequences? - Short-term gains creating long-term problems? **Incentive Analysis** - What behaviors are being rewarded? Hidden incentive structures? - "Show me the incentive and I'll show you the outcome." **Opportunity Cost** - What's NOT being done? Cost of this focus? - Best alternative foregone? **Bias Detection** - Confirmation bias: Only seeking validating information? - Sunk cost fallacy: Continuing because of past investment? - Social proof: Doing it because others do? - Availability bias: Overweighting recent/vivid information? **Circle of Competence** - Operating within known territory or outside? - If outside, appropriate humility/caution? **Margin of Safety** - What's the buffer if things go wrong? - Cutting it too close anywhere? ### 3. Generate Output **If insights found:** 1-2 concise Munger-style observations **If nothing notable:** "All clear — no cognitive landmines detected today." ## Output Format ``` 🧠 **Munger Observer** — [Date] [Insight 1: Model applied + observation + implication] [Insight 2 if applicable] — "Invert, always invert." — Carl Jacobi (Munger's favorite) ``` ## Example ``` 🧠 **Munger Observer** — January 19, 2026 **Opportunity Cost Alert:** Heavy focus on infrastructure today. The content queue is aging — are drafts decaying in value while we polish tools? **Second-Order Check:** Speed improvement is good first-order thinking. Second-order: faster responses may raise expectations for response quality. Speed without substance is a trap. — "Invert, always invert." ``` ## Scheduling (Optional) Set up a cron job for daily automated review: - Recommended time: End of workday (e.g., 5pm local) - Trigger message: `MUNGER_OBSERVER_RUN`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: aowind/sjht-ssh-ops (version 1.0.1)

--- name: ssh-ops description: > SSH 密钥管理和远程服务器运维工具。 用于生成 SSH 密钥、部署公钥到远程主机实现免密登录、测试连接、查看远程主机信息、 以及远程执行运维命令。Use when 用户需要连接远程服务器、配置 SSH 免密登录、 管理服务器、部署应用、或在远程主机上执行命令。触发短语包括： "SSH登录"、"免密登录"、"服务器管理"、"远程部署"、"连接服务器"、"运维"。 --- # ssh-ops — SSH 密钥管理与远程运维 管理 SSH 密钥、部署免密登录、执行远程运维操作。 ## 工作流程 ### 1. 生成密钥（如果还没有） ```bash bash <skill>/scripts/ssh-key-setup.sh gen ``` 默认生成 `~/.ssh/id_ed25519`。如果已存在会提示。 ### 2. 部署公钥到远程主机 需要密码时，设置 `SSHPASS` 环境变量： ```bash SSHPASS='密码' bash <skill>/scripts/ssh-key-setup.sh deploy <host> [user] ``` 脚本会自动安装 sshpass、使用 ssh-copy-id 部署公钥。 ### 3. 测试免密登录 ```bash bash <skill>/scripts/ssh-key-setup.sh test <host> [user] ``` ### 4. 查看远程主机信息 ```bash bash <skill>/scripts/ssh-key-setup.sh info <host> [user] ``` 返回：主机名、系统版本、内核、内存、磁盘、负载。 ## 远程执行命令 免密登录配置好后，可直接用 `ssh user@host "命令"` 执行任意远程操作： ```bash # 查看进程 ssh root@host "ps aux | grep node" # 安装软件 ssh root@host "apt-get update && apt-get install -y nginx" # 传输文件 scp file.txt root@host:/tmp/ # 同步目录 rsync -avz ./dist/ root@host:/var/www/app/ ``` ## 安全提示 - `SSHPASS` 环境变量用完即 unset，不要持久化到文件 - 私钥（`id_ed25519`）权限必须是 600，`~/.ssh/` 权限必须是 700 - 不要在聊天记录中存储密码，使用时设环境变量 - 部署完成后验证免密登录，确认后再 unset 密码


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: cecwxf/copilot-cli-skill (version 1.0.0)

--- name: copilot-cli-operator description: Run GitHub Copilot CLI from OpenClaw for coding tasks in a target project directory. Use when the user asks OpenClaw to use Copilot for implementation, debugging, refactoring, review, or scripted coding workflows. --- # GitHub Copilot CLI Operator Use this skill to reliably call Copilot CLI from OpenClaw. ## Core rules 1. Verify Copilot CLI exists (`copilot --version`) before first task. 2. Always run Copilot through OpenClaw `exec` with `pty:true`. 3. Always set explicit `workdir` to the target repository. 4. For long tasks, use `background:true` and track via `process`. 5. Report clear milestones: started, waiting-input, finished/failed. ## Execution patterns ### One-shot coding task Use: - `exec.command`: `copilot -p "<task>" --allow-all-tools` - `exec.pty`: `true` - `exec.workdir`: `<repo path>` ### Scoped tool approval Use `--allow-tool` and `--deny-tool` to control what Copilot can do: - `exec.command`: `copilot -p "<task>" --allow-tool 'shell(git)' --allow-tool 'write'` - `exec.pty`: `true` - `exec.workdir`: `<repo path>` To block dangerous operations: - `copilot -p "<task>" --allow-all-tools --deny-tool 'shell(rm)' --deny-tool 'shell(git push)'` ### Interactive session Use: - `exec.command`: `copilot` - `exec.pty`: `true` - `exec.workdir`: `<repo path>` ### Long-running background task 1. Start with `exec(background:true, pty:true, workdir, command:"copilot -p '...' --allow-all-tools")` 2. Record returned `sessionId`. 3. Poll with `process action:poll`. 4. Read output with `process action:log`. 5. If Copilot asks for input, use `process action:submit`. ### Resume a previous session Use: - `exec.command`: `copilot --resume` (select from list) - `exec.command`: `copilot --continue` (resume most recent) ## Recommended prompts - "Implement <feature> with tests, run tests, and summarize changed files." - "Find root cause for failing CI in this repo and propose minimal fix." - "Review current branch diff and list high-risk issues first." - "Work on issue https://github.com/owner/repo/issues/123 in a new branch." - "Create a PR that updates the README with the latest API usage." ## Guardrails - Do not claim files were changed unless logs show completion. - If `copilot` is missing or auth fails, return exact remediation steps. - Keep OpenClaw tool config (`pty/workdir/background`) separate from CLI args. - Prefer `--allow-tool` with specific scopes over `--allow-all-tools` for safety. - Use `--deny-tool 'shell(rm)'` when working in directories with important data. ## References - `references/copilot-doc-summary.md` - `references/copilot-usage-recipes.md` - `scripts/run-copilot-example.sh`


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: bytesagain3/page-saver (version 2.0.2)

--- name: "page-saver" version: "2.0.2" description: "Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Page Saver concepts, best practices, and implementation patterns." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [page,saver, reference] category: "devtools" --- # Page Saver Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Page Saver concepts, best practices, and implementation patterns. No API keys or credentials required. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `quickstart` | quickstart reference | | `patterns` | patterns reference | | `debugging` | debugging reference | | `performance` | performance reference | | `security` | security reference | | `migration` | migration reference | | `cheatsheet` | cheatsheet reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)