OpenClaw/clawhub-security-signals huggingface dataset:
Skill: lotfinity/cloudflare-whisper-worker (version 1.0.0)

--- name: cloudflare-whisper-worker description: Transcribe audio using a deployed Cloudflare Worker Whisper endpoint. Use when converting voice/audio files (wav, mp3, m4a, ogg, webm) to text through the custom /transcribe API, including bearer-token auth, plain-text extraction, and quick CLI transcription workflows. --- # Cloudflare Whisper Worker Use this skill to transcribe audio through the deployed Whisper Worker API. ## Endpoint - Base URL: `https://lotfi-whisper-worker.medtouradmin.workers.dev` - Route: `POST /transcribe` - Auth: `Authorization: Bearer <API_TOKEN>` - Body: raw audio bytes (`--data-binary @file`) ## Required environment variable Set token once per shell: ```bash export WHISPER_WORKER_TOKEN="<your_token>" ``` ## Transcribe a file (JSON response) ```bash curl -sS -X POST "https://lotfi-whisper-worker.medtouradmin.workers.dev/transcribe" \ -H "content-type: audio/wav" \ -H "authorization: Bearer $WHISPER_WORKER_TOKEN" \ --data-binary "@audio.wav" ``` ## Transcribe and return only text ```bash curl -sS -X POST "https://lotfi-whisper-worker.medtouradmin.workers.dev/transcribe" \ -H "content-type: audio/wav" \ -H "authorization: Bearer $WHISPER_WORKER_TOKEN" \ --data-binary "@audio.wav" \ | jq -r '.result.text // .text // .result.response // empty' ``` ## Content-Type guide - WAV: `audio/wav` - MP3: `audio/mpeg` - M4A: `audio/mp4` - OGG/OPUS: `audio/ogg` - WEBM: `audio/webm` ## Common errors - `401 Unauthorized`: missing/invalid bearer token - `400 Empty audio body`: file path wrong or empty file - `400 Send raw audio...`: invalid content-type header - `500`: worker/runtime/model error; retry and inspect full JSON


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector:  ()
Skill: ultranumblol/wallet-pnl (version 1.0.0)

--- name: wallet-pnl description: | Analyze any Solana wallet's trading history: win rate, realized PnL, trader type, and copy-trade rating. Use when the user wants to check if a wallet is worth copying, analyze smart money performance, check a trader's win rate, evaluate a wallet's PnL, or decide whether to follow a wallet's trades. Keywords: copy trade, wallet analysis, win rate, PnL, smart money, trader stats. metadata: openclaw: requires: bins: ["python3"] env: ["HELIUS_API_KEY"] primaryEnv: "HELIUS_API_KEY" --- # Solana Wallet PnL Analyzer Analyze any Solana wallet's swap history to determine if it's worth copy-trading. Returns win rate, realized PnL in SOL, trader classification, and top traded tokens. ## Paid API $0.03 USDC per request via x402 on Base chain: ```bash npx awal@latest x402 pay "https://wallet-pnl-production.up.railway.app/pnl?wallet=WALLET_ADDRESS" ``` ## API Response ```json { "wallet": "AbCd...XyZw", "summary": { "trader_type": "TRADER", "copy_rating": "FOLLOW", "total_trades": 87, "win_rate_pct": 64.3, "win_trades": 36, "loss_trades": 20, "realized_pnl_sol": 12.45, "avg_trade_size_sol": 0.85 }, "most_traded_tokens": [...], "recent_trades": [...] } ``` ## Copy Rating Guide | Rating | Meaning | |--------|---------| | ✅ FOLLOW | Win rate ≥ 60% and positive PnL — worth copying | | ⚠️ NEUTRAL | Mixed results — monitor before copying | | 🚨 AVOID | Low win rate or negative PnL — do not copy | ## Trader Types | Type | Meaning | |------|---------| | WHALE | Avg trade > 10 SOL | | DEGEN | 50+ trades, high frequency | | TRADER | Balanced buy/sell activity | | HOLDER | Mostly buying, holding | | INACTIVE | Fewer than 5 trades found | ## Self-Hosted ```bash pip install -r {baseDir}/api/requirements.txt python3 {baseDir}/scripts/pnl.py <WALLET_ADDRESS> ``` Requires `HELIUS_API_KEY` for transaction history (free at helius.xyz).


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: ivangdavila/affirmations (version 1.0.0)

--- name: Affirmations description: Build a personal affirmation system for daily practice, custom affirmations, and mindset reinforcement. metadata: {"clawdbot":{"emoji":"✨","os":["linux","darwin","win32"]}} --- ## Core Behavior - Deliver affirmations based on user's needs - Help create personalized affirmations - Track practice and what resonates - Create `~/affirmations/` as workspace ## File Structure ``` ~/affirmations/ ├── my-affirmations.md # Personal, custom ├── favorites.md # Ones that resonate ├── practice.md # Preferences └── log/ ``` ## Setup Ask: - "What areas do you want to work on?" (confidence, anxiety, self-worth, abundance, health, relationships) - "When do you want affirmations?" (morning, evening, on-demand) - "Prefer I send them or you ask?" ## Practice Preferences ```markdown # practice.md ## Focus Areas - Self-worth - Anxiety/calm - Career confidence ## Delivery - Morning: 7am, 3 affirmations - Style: gentle / bold / spiritual ## Rotation - Mix of favorites + new ``` ## Personal Affirmations Help user create their own: ```markdown # my-affirmations.md ## Self-Worth - I am enough exactly as I am - I deserve good things ## Career - I bring unique value to my work - I handle challenges with confidence ## Calm - I release what I cannot control - I am safe in this moment ``` ## Creating Custom Affirmations When user wants personalized: - Ask what they're struggling with - Reframe the negative belief → positive present tense - "I am..." or "I choose..." or "I trust..." - Test: does it resonate or feel forced? ## Delivery Styles Adapt to preference: - **Gentle:** "You are worthy of love and belonging" - **Bold:** "I am unstoppable. I create my reality." - **Spiritual:** "The universe supports my highest good" - **Practical:** "I have the skills to handle today's challenges" ## Daily Practice Morning delivery: ``` Good morning. Your affirmations today: • I am capable of achieving my goals • I choose peace over worry • I am worthy of success and happiness Have a powerful day. ``` ## What To Track ```markdown # log/2024-02.md ## Practice - Days practiced: 18/28 - Streak: 5 days ## Resonated - "I release what I cannot control" — saved to favorites ## Didn't Land - Abundance affirmations feel forced right now ``` ## Favorites ```markdown # favorites.md Affirmations that deeply resonate: - I am enough exactly as I am - I trust the timing of my life - I choose progress over perfection ``` ## What To Surface - Morning affirmations (if configured) - "This one resonated last week" - "You've practiced 10 days straight" - "Want to add new focus area?" ## Situational Affirmations When user shares struggle: - Anxious: calming, grounding affirmations - Self-doubt: worth and capability affirmations - Before event: confidence and preparation affirmations - After setback: resilience and self-compassion ## What NOT To Do - Be preachy or toxic-positive - Ignore when something doesn't resonate - Push spiritual language if not their style - Make affirmations feel like homework


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: playdadev/pump-fun (version 1.0.1)

--- name: pump-fun description: Buy, sell, and launch tokens on Pump.fun using the PumpPortal API homepage: https://pump.fun user-invocable: true metadata: {"moltbot":{"requires":{"env":["SOLANA_PRIVATE_KEY"]},"primaryEnv":"SOLANA_PRIVATE_KEY"}} --- # Pump.fun Trading Skill This skill enables trading and launching tokens on Pump.fun through the PumpPortal API. ## Commands ### Buy Tokens Buy tokens on Pump.fun by specifying the token mint address and amount. **Usage:** `/pump-buy <mint_address> <amount_sol> [slippage]` **Examples:** - `/pump-buy 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU 0.1` - Buy 0.1 SOL worth of tokens - `/pump-buy 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU 0.5 15` - Buy with 15% slippage ### Sell Tokens Sell tokens on Pump.fun by specifying the token mint address and amount. **Usage:** `/pump-sell <mint_address> <amount|percentage> [slippage]` **Examples:** - `/pump-sell 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU 1000000` - Sell 1,000,000 tokens - `/pump-sell 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU 100%` - Sell all tokens - `/pump-sell 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU 50% 10` - Sell 50% with 10% slippage ### Launch Token Create and launch a new token on Pump.fun. **Usage:** `/pump-launch <name> <symbol> <description> [dev_buy_sol]` **Examples:** - `/pump-launch "My Token" MTK "A revolutionary token" 1` - Launch with 1 SOL dev buy - `/pump-launch "Cool Coin" COOL "The coolest coin ever"` - Launch with default dev buy ## Configuration ### Required Environment Variables - `SOLANA_PRIVATE_KEY` - Your Solana wallet private key (base58 encoded) ### Optional Environment Variables - `SOLANA_RPC_URL` - Custom RPC endpoint (defaults to public mainnet) - `PUMP_PRIORITY_FEE` - Priority fee in SOL (default: 0.0005) - `PUMP_DEFAULT_SLIPPAGE` - Default slippage percentage (default: 10) ## Setup 1. Install dependencies: ```bash cd {baseDir} npm install ``` 2. Set your environment variables: ```bash export SOLANA_PRIVATE_KEY="your-base58-private-key" ``` 3. (Optional) Configure custom RPC: ```bash export SOLANA_RPC_URL="https://your-rpc-endpoint.com" ``` ## Security Notes - Never share your private key - Use a dedicated trading wallet with limited funds - Start with small amounts to test - The skill uses the Local Transaction API for maximum security (transactions are signed locally) ## Fees - PumpPortal charges a 0.5% fee per trade - Standard Solana network fees apply - Priority fees are configurable ## Supported Pools The skill automatically selects the best pool, but supports: - `pump` - Pump.fun bonding curve - `raydium` - Raydium AMM (for graduated tokens) - `pump-amm` - Pump.fun AMM - `auto` - Automatic pool selection (default)


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: elliottzheng/ppt2fig-export (version 1.1.0)

--- name: ppt2fig-export description: Export specific pages from PPT, PPTX, or ODP files to cropped PDF via ppt2fig. Use when the user wants to convert presentation slides into paper-ready PDF figures, specify a file path and page range, compare LibreOffice/WPS/PowerPoint export backends, or rerun a saved export workflow. Prefer this skill when `ppt2fig`, `ppt2fig-cli`, or this repo's `dist/ppt2fig-cli.exe` is available. homepage: https://github.com/elliottzheng/ppt2fig metadata: {"openclaw":{"homepage":"https://github.com/elliottzheng/ppt2fig","skillKey":"ppt2fig-export","always":true,"os":["win32"],"install":[{"id":"ppt2fig-cli-win64","kind":"download","os":["win32"],"url":"https://github.com/elliottzheng/ppt2fig/releases/latest/download/ppt2fig-cli.exe","targetDir":"~/.openclaw/tools/ppt2fig-export","label":"Download ppt2fig CLI for Windows"}]}} --- Use `ppt2fig` to export slide pages to PDF. Workflow: 1. Confirm the source presentation path exists. 2. Decide the page selection string. Examples: `1`, `2`, `1,3,5-7` 3. Decide the backend. Defaults: - `auto` for normal use - `libreoffice` when cross-platform consistency matters - `wps` or `powerpoint` only when the user explicitly wants those backends 4. Decide whether to crop. - Use default cropping for paper figures. - Use `--no-crop` only when the user explicitly wants original margins. 5. Run the command. 6. Return the output PDF path and any backend-specific notes. Preferred commands: ```bash ppt2fig "/abs/path/input.pptx" --pages 2 -o "/abs/path/output.pdf" ppt2fig "/abs/path/input.pptx" --pages 1,3,5-7 --backend libreoffice ppt2fig "/abs/path/input.pptx" --pages 2 --backend wps ppt2fig "/abs/path/input.pptx" --pages 2 --backend powerpoint --powerpoint-intent print ``` If `ppt2fig` is not on `PATH`, try: ```bash ppt2fig-cli "/abs/path/input.pptx" --pages 2 -o "/abs/path/output.pdf" ``` If the binary is installed by OpenClaw or ClawHub, the helper script will first look in `~/.openclaw/tools/ppt2fig-export/` for the downloaded GitHub Release executable. If that is not present, it falls back to `PATH`, then to `python -m ppt2fig`: ```bash python "{baseDir}/scripts/run_ppt2fig.py" "/abs/path/input.pptx" --pages 2 -o "/abs/path/output.pdf" ``` Behavior notes: - `auto` backend priority is `LibreOffice > WPS > PowerPoint`. - `--list-backends` prints what the current machine can use. - Page numbers are 1-based. - Output defaults to `<input>.pages_<page-spec>.pdf` when `-o` is omitted. - PowerPoint image quality is limited by Microsoft's export API; `--powerpoint-intent print` is the highest-quality option exposed by the CLI. Useful checks: ```bash ppt2fig --list-backends ppt2fig "/abs/path/input.pptx" --pages 999 ``` Use the second command only when you need to validate page count or explain an out-of-range error.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: cnwarden/weixin-reader-plus (version 1.0.0)

# weixin_reader 读取微信公众号文章内容。 ## 触发条件 当用户提供微信公众号文章链接（mp.weixin.qq.com）并要求阅读、读取、查看文章内容时使用此 skill。 触发关键词： - "读这篇微信文章" - "看一下这个公众号文章" - "帮我读取微信文章" - 用户发送 mp.weixin.qq.com 链接 ## 使用方法 ```bash python3 ~/.claude/skills/weixin_reader/weixin_reader.py "<微信文章URL>" ``` ## 示例 ```bash python3 ~/.claude/skills/weixin_reader/weixin_reader.py "https://mp.weixin.qq.com/s?__biz=xxx&mid=xxx" ``` ## 输出格式 ``` 标题: 文章标题 公众号: 公众号名称 --- 正文内容 --- 文章正文内容... ``` ## 依赖 - httpx - beautifulsoup4 如未安装，运行： ```bash pip install httpx beautifulsoup4 ``` ## 注意事项 1. 部分文章可能需要验证码，无法直接读取 2. 使用移动端 User-Agent 模拟微信内置浏览器访问 3. 支持自动跟随重定向


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: staratheris/arya-reminders (version 0.1.1)

--- name: arya-reminders description: Recordatorios en lenguaje natural (Bogotá). Crea cron jobs seguros y registra en markdown (y opcionalmente Sheets). metadata: openclaw: emoji: "⏰" requires: bins: ["bash", "python3"] --- # Arya Reminders Recordatorios en lenguaje natural para OpenClaw, diseñados para Jaider. ## Qué hace - Interpreta fechas/horas relativas y absolutas en español (y formatos comunes). - Usa **America/Bogota** por defecto. - Crea recordatorios **one-shot** (una sola vez) como cron jobs. - Registra cada recordatorio en `memory/reminders.md`. - (Opcional futuro) registrar en Google Sheets cuando esté habilitado. ## Uso (conversacional) Ejemplos: - "Recuérdame pagar la luz mañana a las 3pm" - "Recuérdame en 45 minutos revisar el horno" - "Recuérdame hoy a las 5:30pm llamar a mamá" - "Recuérdame el viernes a las 9am entregar el taller" ## Comandos (manual) ### Crear recordatorio (una vez) ```bash bash skills/arya-reminders/create-reminder.sh "Mensaje" "Cuándo" ``` ### Revisar log ```bash cat memory/reminders.md ``` ## Notas - No requiere APIs externas. - Usa el tool `cron` del Gateway (no hardcodea rutas ni IDs ajenos).


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: copywrite-ai/spotify-control (version 1.0.1)

--- name: spotify-control description: macOS Spotify control skill for OpenClaw. Supports playback, volume, position, and metadata retrieval via AppleScript. version: 1.0.1 author: Antigravity platform: macOS --- # Spotify Control (macOS) ## Overview Control Spotify on macOS using AppleScript. This skill provides a set of commands to manage playback, volume, and track information. ## Actions ### Playback Control - **Play/Pause**: Toggle playback. - **Next/Previous**: Jump to next or previous track. - **Stop**: Pause playback. ### Volume & Position - **Set Volume (0-100)**: Adjust Spotify internal volume. - **Set Position (seconds)**: Jump to a specific time in the current track. ### Metadata & State - **Get Info**: Retrieve current track name, artist, album, and Spotify URL. - **Set Shuffle (on/off)**: Toggle shuffle mode. - **Set Repeat (on/off)**: Toggle repeat mode. ## Usage Agents should use the `scripts/spotify-control.py` wrapper for all commands. ### Examples ```sh # Toggle play/pause scripts/spotify-control.py playpause # Get current track info scripts/spotify-control.py get-info # Set volume to 80% scripts/spotify-control.py set-volume 80 # Seek to 1 minute (60s) scripts/spotify-control.py set-position 60 ``` ## Guardrails - Ensure Spotify is installed and running. - All commands are one-shot AppleScript executions via a Python wrapper. - Does not affect system-wide volume unless specified for fallback.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ericrosenberg/jellyseerr (version 1.0.0)

--- name: jellyseerr description: Request movies and TV shows through Jellyseerr. Use when the user wants to add media to their Plex/Jellyfin server, search for content availability, or manage media requests. --- # Jellyseerr Request movies and TV shows through your Jellyseerr server for automated downloading to Plex/Jellyfin. ## Setup Configure your Jellyseerr server: ```bash scripts/setup.sh ``` You'll need: - Jellyseerr server URL - API key (from Jellyseerr Settings > General) ## Usage Request a movie: ```bash scripts/request_movie.py "Movie Name" ``` Request a TV show: ```bash scripts/request_tv.py "TV Show Name" ``` Search for content: ```bash scripts/search.py "Content Name" ``` ## Examples Request a movie: ```bash scripts/request_movie.py "The Matrix" ``` Request a TV show (entire series): ```bash scripts/request_tv.py "Breaking Bad" ``` Request specific TV season: ```bash scripts/request_tv.py "Breaking Bad" --season 1 ``` ## Automatic Availability Notifications Get notified when your requested content becomes available. ### Webhooks (Recommended) For instant notifications, set up webhook integration. See [references/WEBHOOK_SETUP.md](references/WEBHOOK_SETUP.md) for the complete guide. Quick setup: ```bash scripts/install_service.sh # Run with sudo ``` Then configure Jellyseerr to send webhooks to `http://YOUR_IP:8384/` ### Polling (Alternative) For environments where webhooks aren't available, use cron-based polling: ```bash crontab -l > /tmp/cron_backup.txt echo "* * * * * $(pwd)/scripts/auto_monitor.sh" >> /tmp/cron_backup.txt crontab /tmp/cron_backup.txt ``` Check pending requests: ```bash scripts/track_requests.py ``` ## Configuration Edit `~/.config/jellyseerr/config.json`: ```json { "server_url": "https://jellyseerr.yourdomain.com", "api_key": "your-api-key", "auto_approve": true } ``` ## API Reference See [references/api.md](references/api.md) for Jellyseerr API documentation.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (HIGH)
Skill: nexscope/synthetic-monitoring (version 1.0.0)

--- nexscope: name: "Synthetic Monitoring" category: "Monitoring & Alerts" version: "1.0.0" author: "Nexscope AI" tags: - "monitoring" - "checkout" - "uptime" - "testing" - "ecommerce" model: "any" tokens: "~2000" keywords: - "synthetic monitoring" --- # Synthetic Monitoring AI-powered synthetic monitoring skill for e-commerce websites. Designs automated user journey tests for add-to-cart, checkout, and payment flows with alerting rules and performance baselines. ## Capabilities - Generates actionable monitoring & alerts frameworks based on your specific business context - Works across major e-commerce platforms (Amazon, Shopify, Walmart, WooCommerce, Etsy, TikTok Shop) - Provides data-driven recommendations with industry benchmarks - Outputs ready-to-implement plans, not just generic advice ## Install ``` clawhub install synthetic-monitoring ``` ## Usage **Input:** Website URL, critical user flows, SLA targets **Output:** Synthetic test suite design, alerting rules, performance baselines, incident response procedures ### Example Prompt > "I run a [your business type] on [platform]. Help me set up synthetic monitoring for my business. Here's my current situation: [describe context]." ## Limitations - Requires your specific business data for accurate recommendations - Market benchmarks are based on US/EU data — adjust for other regions - Recommendations should be validated against your platform's current policies - Does not replace dedicated monitoring SaaS tools — designs the strategy and framework --- *Built by [Nexscope AI](https://www.nexscope.ai/) — AI-powered e-commerce intelligence.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: daasai/stock-advisor (version 1.0.0)

--- name: stock-advisor description: 你的私人 AI 投顾。提供 A 股个股深度多维分析、持仓管理。 metadata.clawdbot: version: 1.0.0 author: Antigravity files: - scripts/* - data/* requires.env: - STOCK_ADVISOR_API_URL: "Stock Advisor Pro API 地址 (例如: http://localhost:8000 或 https://api.daas.ai)" - STOCK_ADVISOR_API_KEY: "您的 DaaS 订阅密钥 (API Key)" --- # Stock Advisor Pro 你的私人 AI 投资顾问，专为 A 股打造。本插件提供个股深度扫描、持仓管理、行情实时监控及个性化投资建议。 ## 主要功能 - **深度扫描**：多维评分（基本面、资金面、技术面、情绪面）+ AI 深度解读。 - **持仓管理**：记录你的 A 股持仓，分析盈亏。 - **隐私保护**：所有持仓和预警数据均保存在本地，绝不上云。 ## 🌐 外部端点 (External Endpoints) 本插件需要连接到 Stock Advisor Pro API 后端。 - **默认地址**: `http://localhost:8000` - **环境变量**: `STOCK_ADVISOR_API_URL` ## 🛡️ 安全与隐私 (Security & Privacy) - **本地优先**: 所有持仓数据仅保存在本地 `data/portfolio.json`。 - **无追踪**: 插件不会收集或上传任何个人交易行为数据。 - **信任声明**: 本插件遵循 OpenClaw 安全规范，所有脚本逻辑透明可查。 ## 使用命令 ### 1. 个股分析 帮我分析个股的当前状态和潜在风险。 - `uv run {baseDir}/scripts/scan.py <股票代码>` ### 2. 持仓管理 查看或管理你的本地持仓。 - `uv run {baseDir}/scripts/portfolio.py show` - 查看当前持仓 - `uv run {baseDir}/scripts/portfolio.py add <代码> --cost <单价> --quantity <股数>` - 添加持仓 - `uv run {baseDir}/scripts/portfolio.py remove <代码>` - 删除持仓


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: piaomiao123/baidu-hot (version 0.1.1)

--- name: baidu-hot description: 百度热榜监控 | Baidu Hot Topics Monitor. 获取百度热搜榜、搜索趋势、关键词热度 | Get Baidu trending searches, trends, keyword popularity. 触发词：百度、热搜、baidu. homepage: https://github.com/yourusername/baidu-hot metadata: {"clawdbot":{"emoji":"🔥","requires":{"bins":["curl"]}} --- # Baidu Hot 百度热搜 一键获取百度热搜榜，掌握实时热点！ ## Features - 🔥 获取百度实时热搜榜 - 📊 热搜排名和热度指数 - 🔄 支持刷新最新数据 - 💾 历史记录（可选） ## Quick Start ```bash # 获取当前热搜榜 baidu-hot # 只看前10名 baidu-hot --top 10 # 保存到文件 baidu-hot --output hot.txt ``` ## Usage ```bash # 基本使用 baidu-hot # 输出示例： # 🔥 百度热搜榜 - 2026-03-16 12:00 # 1. AI大模型新突破 (热度: 999999) # 2. 开源AI代理工具成趋势 (热度: 888888) # 3. ... ``` ## How it works 使用百度公开的热搜API，无需API key！ ```bash curl -s "https://top.baidu.com/api/board?platform=wise&tab=realtime" ``` ## Customization 编辑 `~/.baidu-hot/config.json` 配置： - 默认显示条数 - 是否显示热度指数 - 刷新间隔 --- Made with ❤️ for OpenClaw


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: 52yuanchangxing/renewal-risk-monitor (version 1.0.0)

--- name: renewal-risk-monitor version: 1.0.0 description: "识别续约风险信号，区分可挽回风险与高概率流失信号。；use for renewal, risk, customer-success workflows；do not use for 伪造健康度数据, 替代正式续约决策." author: OpenClaw Skill Bundle homepage: https://example.invalid/skills/renewal-risk-monitor tags: [renewal, risk, customer-success, retention] user-invocable: true metadata: {"openclaw":{"emoji":"📉","requires":{"bins":["python3"]},"os":["darwin","linux","win32"]}} --- # 续约风险监测员 ## 你是什么 你是“续约风险监测员”这个独立 Skill，负责：识别续约风险信号，区分可挽回风险与高概率流失信号。 ## Routing ### 适合使用的情况 - 帮我判断这个客户的续约风险 - 区分还能挽回和已经很危险 - 输入通常包含：客户使用情况、反馈、历史互动 - 优先产出：风险信号、可挽回项、升级条件 ### 不适合使用的情况 - 不要伪造健康度数据 - 不要替代正式续约决策 - 如果用户想直接执行外部系统写入、发送、删除、发布、变更配置，先明确边界，再只给审阅版内容或 dry-run 方案。 ## 工作规则 1. 先把用户提供的信息重组成任务书，再输出结构化结果。 2. 缺信息时，优先显式列出“待确认项”，而不是直接编造。 3. 默认先给“可审阅草案”，再给“可执行清单”。 4. 遇到高风险、隐私、权限或合规问题，必须加上边界说明。 5. 如运行环境允许 shell / exec，可使用： - `python3 "{baseDir}/scripts/run.py" --input <输入文件> --output <输出文件>` 6. 如当前环境不能执行脚本，仍要基于 `{baseDir}/resources/template.md` 与 `{baseDir}/resources/spec.json` 的结构直接产出文本。 ## 标准输出结构 请尽量按以下结构组织结果： - 风险信号 - 可挽回项 - 高危项 - 建议动作 - 时间窗口 - 升级条件 ## 本地资源 - 规范文件：`{baseDir}/resources/spec.json` - 输出模板：`{baseDir}/resources/template.md` - 示例输入输出：`{baseDir}/examples/` - 冒烟测试：`{baseDir}/tests/smoke-test.md` ## 安全边界 - 适合作为客户成功预警辅助。 - 默认只读、可审计、可回滚。 - 不执行高风险命令，不隐藏依赖，不伪造事实或结果。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)