OpenClaw/clawhub-security-signals huggingface dataset:
Skill: imaflytok/hedera-data (version 1.1.0)

--- name: hedera-data description: Free Hedera analytics API — token prices, holder data, market caps, volume tracking. The most comprehensive historic Hedera token dataset available. Powered by onlyflies.buzz. metadata: openclaw: emoji: "📊" category: "data" tags: ["hedera", "crypto", "analytics", "tokens", "defi"] --- # Hedera Data API Free access to comprehensive Hedera token analytics. No API key required. **Base URL:** `https://onlyflies.buzz/api/v1` ## Endpoints ### List All Tracked Tokens ```bash curl https://onlyflies.buzz/api/v1/tokens ``` Returns: token ID, name, symbol, price (USD + HBAR), 24h volume, market cap, holder count, 24h transfers. ### Get Token Details ```bash curl https://onlyflies.buzz/api/v1/tokens/{tokenId} ``` Returns: full token data including liquidity, 7d/30d volume, price source, metadata, coingecko mapping. Example: ```bash curl https://onlyflies.buzz/api/v1/tokens/0.0.8012032 ``` ### Top Tokens ```bash curl https://onlyflies.buzz/api/v1/tokens/top?limit=20 ``` Returns: tokens ranked by market cap. ### Token Holders ```bash curl https://onlyflies.buzz/api/v1/tokens/{tokenId}/holders ``` Returns: holder distribution for a specific token. ## Data Coverage - **500+ Hedera tokens** tracked with live pricing - **Price sources:** SaucerSwap, CoinGecko, Hedera Mirror Node - **Update frequency:** Every 5 minutes for active tokens - **Historic data:** Available for all tracked tokens since onlyflies.buzz launch ## Use Cases - Monitor token prices and volume in real-time - Track whale movements via holder distribution changes - Build trading signals from volume and price data - Research Hedera DeFi ecosystem - Power dashboards and alerts ## Integration with ClawSwarm Register on ClawSwarm to get a Hedera wallet, reputation scoring, and coordination with other data agents: ```bash curl -X POST https://onlyflies.buzz/clawswarm/api/v1/agents/register \ -H "Content-Type: application/json" \ -d '{"name": "YourAgent", "capabilities": ["data-analysis", "hedera"]}' ``` --- *Powered by [onlyflies.buzz](https://onlyflies.buzz) — Hedera analytics platform* ## CoinGecko Bridge (NEW) Beyond Hedera tokens, access 18,000+ global coins via the CoinGecko bridge: ```bash # Via ClawSwarm API GET https://onlyflies.buzz/clawswarm/api/v1/coingecko/price/bitcoin,ethereum GET https://onlyflies.buzz/clawswarm/api/v1/coingecko/coin/hedera-hashgraph GET https://onlyflies.buzz/clawswarm/api/v1/coingecko/trending GET https://onlyflies.buzz/clawswarm/api/v1/coingecko/markets?limit=50 GET https://onlyflies.buzz/clawswarm/api/v1/coingecko/search/solana ``` Free tier with 60-second caching. No API key needed.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: akkualle/akkualle-ga4-analytics (version 1.0.0)

--- name: ga4-analytics description: "Ruft Google Analytics 4 Daten für akku-alle.de ab - Seitenaufrufe, Nutzer, Sessions, Top-Seiten und Traffic-Quellen. Nutze das shell Tool um /root/.openclaw/skills/ga4-analytics/ga4-analytics auszuführen." metadata: {"requires":{"env":["GOOGLE_APPLICATION_CREDENTIALS","GA4_PROPERTY_ID"]},"emoji":"📊","always":true} user-invocable: true --- # GA4 Analytics Skill Ruft Google Analytics 4 Daten für akku-alle.de ab. ## Aufruf via Shell Tool **WICHTIG**: Rufe dieses Skill mit dem `shell` Tool auf: ```bash /root/.openclaw/skills/ga4-analytics/ga4-analytics ``` Für nur Top-Seiten: ```bash /root/.openclaw/skills/ga4-analytics/ga4-analytics "top seiten" ``` ## Beispiel-Ausgabe ``` ## 📊 Traffic-Übersicht (7 Tage) - **Sessions:** 41 - **Nutzer:** 23 - **Pageviews:** 126 - **Bounce Rate:** 31.7% ## 📄 Top Seiten | Seite | Views | Users | |-------|-------|-------| | / | 65 | 7 | | /ratgeber/e-scooter-versicherung | 24 | 6 | ``` ## Wann verwenden Nutze dieses Skill wenn der User fragt: - "Zeige mir die GA4 Statistiken" - "Wie viele Besucher hat akku-alle.de?" - "Welche Seiten werden am meisten besucht?" - "Analytics Daten"


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: deepseekoracle/lyra-coin-launch-manager (version 1.1.0)

--- name: lyra-coin-launch-manager description: Coin launch memory + verification workflow for Clawnch (4claw/Moltx/Moltbook). Use to launch tokens safely, record canonical receipts (contract+txHash+postUrl), update local dashboard, and save Clanker/monitor links into BOOKMARK BRAIN. --- # LYRA Coin Launch Manager (Clawnch) — v1 ## What “done right” means (non-negotiable) A coin is only considered **launched** when you have a **Clawnch receipt** containing at minimum: - `symbol` - `contractAddress` - `clankerUrl` - `postUrl` or `postId` - `txHash` (if present in API) - `chainId` (Base = 8453) Never treat a wallet address, thread id, or post id as the contract. ## Canonical data sources (priority order) 1) **Clawnch API**: `https://clawn.ch/api/launches` (authoritative) 2) **Clanker page**: `https://clanker.world/clanker/<contract>` (UI) 3) Indexers (best-effort / laggy): Blockscout, Dexscreener ## Workspace conventions (v1) - State receipts (machine-readable): `state/<SYMBOL>_clawnch_receipt.json` - Human receipts: `reference/STARCORE_LAUNCH_RECEIPTS_YYYY-MM-DD.md` - Bookmark refs: `brainwave/BOOKMARK_BRAIN/refs/<topic>.md` ## Workflow ### 0) Preflight - Decide **symbol** + **trigger surface** (`4claw` | `moltx` | `moltbook`). - Confirm the **deployer wallet**. ### 1) Launch trigger post Post the exact Clawnch format: ``` !clawnch name: <token name> symbol: <SYMBOL> wallet: <0x...> description: <...> image: <https://...> website: <https://...> (optional) twitter: <@handle> (optional) ``` ### 2) Pull canonical receipt(s) (Clawnch API) Use the script: - `python skills/public/lyra-coin-launch-manager/scripts/pull_clawnch_receipts.py --symbols STARCORE,STARCOREX --out state` This writes per-symbol receipts + a combined summary. ### 3) Save Clanker + monitoring links into BOOKMARK BRAIN Use existing bookmark tool: - `python tools/bookmark_brain_add_url.py --path "bookmark_bar/BOOKMARK BRAIN/OPS/Dashboards" --name "Clanker — <SYMBOL> <0x...>" --url "<clankerUrl>"` ### 4) Update local dashboard If using `enhanced_coin_dashboard_with_real_data.py`, ensure it reads receipts from `state/`. (Preferred: STARCORE family comes from Clawnch receipts.) ### 5) Optional: monitoring cron If you want recurring checks, schedule a cron job that: - pulls latest receipts - checks Blockscout/Dexscreener pair existence - logs changes to `daily_health.md` (Keep this low frequency; indexers/API can lag.) ## Notes / troubleshooting - If Moltbook requires verification, complete it; Clawnch may still pick up the post (but posting state can be confusing). - Indexers can lag: “not a contract” on Blockscout can be temporary.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (HIGH)
Skill: ahmadabugosh/buffer-social (version 1.0.0)

# Buffer Skill for OpenClaw Use this skill to create and manage Buffer content from OpenClaw or terminal commands. ## Quick Start 1. Install dependencies: ```bash cd skills/buffer npm install ``` 2. Configure API key: ```bash cp .env.example .env # set BUFFER_API_KEY ``` 3. Run a command: ```bash node ./buffer.js profiles ``` ## Authentication Setup Set in `.env`: ```env BUFFER_API_KEY=your_buffer_api_key BUFFER_API_URL=https://api.buffer.com/graphql ``` Get key: https://publish.buffer.com/settings/api ## Command Reference ### `buffer profiles` List all connected profiles. ### `buffer post <text>` Create content. Options: - `--profile <id>`: single target profile - `--profiles <ids>`: comma-separated profile IDs - `--all`: all connected profiles - `--time <datetime>`: ISO 8601 scheduled time - `--queue`: add to queue - `--image <path>`: attach local image path (validated; upload flow limited by current API docs) - `--draft`: save as idea/draft instead of post ### `buffer queue` View scheduled/queued posts. Options: - `--profile <id>`: filter by profile - `--limit <n>`: max results ### `buffer ideas` List saved ideas. Options: - `--limit <n>`: max results ## Common Use Cases ```bash # Post to one profile node ./buffer.js post "Just shipped 🚀" --profile <id> # Schedule for tomorrow node ./buffer.js post "Tomorrow update" --profile <id> --time "2026-03-03T14:00:00Z" # Multi-channel post node ./buffer.js post "New blog live" --profiles id1,id2 # Save draft node ./buffer.js post "Draft concept" --profile <id> --draft ``` ## Troubleshooting - **Auth errors (401/403):** check `BUFFER_API_KEY`, regenerate key if needed. - **Rate limits (429):** wait ~60s and retry. - **Invalid date:** use ISO format like `2026-03-03T14:00:00Z`. - **Image path error:** verify file exists and path is correct. ## OpenClaw Integration Examples - “Post to Buffer: `Just shipped a new feature! 🚀` to profile `<id>`” - “Queue this in Buffer for all profiles: `Weekly recap is live`” - “Save this as Buffer draft for profile `<id>`: `Campaign angle #3`”


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: jp1222/task-sync (version 2.0.4)

--- name: task-sync description: Synchronize TickTick (Dida) and Google Tasks bidirectionally, including list/project mapping, task content sync, completion sync, and smart-list export (Today, Next 7 Days, All). Use when users ask to set up OAuth, run or schedule sync, fix mismatched/deleted/completed tasks, or troubleshoot Google Calendar duplicate behavior caused by due-date handling. --- # Task Sync Operate and troubleshoot bidirectional task sync between TickTick and Google Tasks. ## Run ```bash python {baseDir}/sync.py ``` ## Setup Checklist 1. Python 3.10+ with: `google-auth google-auth-oauthlib google-api-python-client requests` 2. Enable Google Tasks API and run: ```bash python {baseDir}/scripts/setup_google_tasks.py ``` 3. Create TickTick developer app and run: ```bash python {baseDir}/scripts/setup_ticktick.py ``` 4. Configure `{baseDir}/config.json` token and data paths. ## Expected Behavior - Sync Google Task Lists `<->` TickTick Projects by same name. - Sync task title, completion status, and notes/content bidirectionally. - Map TickTick priority to Google title prefix: `[★]` high, `[!]` medium. - Export TickTick smart lists (Today, Next 7 Days, All) to Google Tasks one-way. ## Due-Date Rule (Calendar Duplicates) - Keep due dates only in the "All" smart list. - For other synced lists, forward date to TickTick then clear Google due date. - Treat this as the source-of-truth rule when debugging duplicate Calendar items. ## Automation ```bash # Cron: every 10 minutes */10 * * * * /path/to/python {baseDir}/sync.py >> /path/to/sync.log 2>&1 ``` Use OpenClaw cron if available. ## Troubleshooting Workflow 1. Re-run both OAuth setup scripts if auth errors appear. 2. Verify `config.json` paths point to existing token files. 3. Run `python {baseDir}/sync.py` and inspect `{baseDir}/data/sync_log.json` and `{baseDir}/data/sync_db.json`. 4. Check API wrappers: - `{baseDir}/utils/google_api.py` - `{baseDir}/utils/ticktick_api.py`


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector:  ()
Skill: wang-junjian/markitdown-converter (version 1.0.0)

--- name: markitdown-converter description: 使用微软 markitdown 库将多种文档格式（PDF、DOC、DOCX、PPT、HTML等）转换为 Markdown。支持批量转换、保留格式、图片提取等功能。使用场景：(1) "把这个 PDF 转成 Markdown"，(2) "批量转换这个文件夹里的文档"，(3) "提取文档中的图片"。 --- # MarkItDown 文档转换技能 使用微软的 markitdown 库将各种文档格式转换为 Markdown。 ## 支持的格式 - PDF (.pdf) - Word 文档 (.doc, .docx) - PowerPoint 演示文稿 (.ppt, .pptx) - Excel 电子表格 (.xlsx) - HTML 文件 (.html, .htm) - 图片文件 (通过 OCR) - 纯文本文件 - 等等... ## 快速开始 ### 单个文件转换 ```python from markitdown import MarkItDown md = MarkItDown() result = md.convert("document.pdf") print(result.text_content) ``` ### 使用提供的脚本 ```bash # 转换单个文件 python3 scripts/convert.py input.pdf output.md # 批量转换文件夹 python3 scripts/batch_convert.py input_folder/ output_folder/ # 提取文档中的图片 python3 scripts/extract_images.py document.pdf images_folder/ ``` ## 详细用法 ### 单个文件转换 使用 `scripts/convert.py`： ```bash python3 scripts/convert.py <input_file> [output_file] ``` 如果不指定输出文件，会自动生成 `.md` 文件。 ### 批量转换 使用 `scripts/batch_convert.py`： ```bash python3 scripts/batch_convert.py <input_directory> <output_directory> ``` 会递归处理目录中的所有支持的文件。 ### 图片提取 使用 `scripts/extract_images.py`： ```bash python3 scripts/extract_images.py <input_file> <output_directory> ``` 从文档中提取所有图片并保存到指定目录。 ## 脚本说明 - `scripts/convert.py` - 单个文件转换脚本 - `scripts/batch_convert.py` - 批量转换脚本 - `scripts/extract_images.py` - 图片提取脚本 每个脚本都有 `--help` 选项查看详细参数。 ## 安装依赖 ### Python 版本要求 markitdown 需要 Python 3.10 或更高版本。 检查 Python 版本： ```bash python3.12 --version # 或 python3.11, python3.13 ``` ### 安装 markitdown 使用 Python 3.10+ 安装： ```bash # 使用 Python 3.12（推荐） python3.12 -m pip install --user --break-system-packages "markitdown[all]" # 或使用虚拟环境 python3.12 -m venv markitdown-env source markitdown-env/bin/activate pip install "markitdown[all]" ``` ### 可选：系统依赖 某些格式转换可能需要额外的系统依赖： - **PDF 处理**: `brew install poppler` (macOS) 或 `apt install poppler-utils` (Linux) - **OCR**: `brew install tesseract` (macOS) 或 `apt install tesseract-ocr` (Linux) ## 验证安装 ```bash python3.12 -c "from markitdown import MarkItDown; print('安装成功!')" ``` ## 使用脚本 所有脚本都支持使用特定 Python 版本运行： ```bash # 使用 Python 3.12 运行 python3.12 scripts/convert.py input.pdf output.md python3.12 scripts/batch_convert.py input_folder/ output_folder/ python3.12 scripts/extract_images.py document.pdf images_folder/ ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: asterisk622/xiaoding-weather (version 1.0.3)

--- name: weather description: Get current weather and forecasts (no API key required). homepage: https://wttr.in/:help metadata: {"clawdbot":{"emoji":"🌤️","requires":{"bins":["curl"]}}} --- # Weather Two free services, no API keys needed. ## wttr.in (primary) Quick one-liner: ```bash curl -s "wttr.in/London?format=3" # Output: London: ⛅️ +8°C ``` Compact format: ```bash curl -s "wttr.in/London?format=%l:+%c+%t+%h+%w" # Output: London: ⛅️ +8°C 71% ↙5km/h ``` Full forecast: ```bash curl -s "wttr.in/London?T" ``` Format codes: `%c` condition · `%t` temp · `%h` humidity · `%w` wind · `%l` location · `%m` moon Tips: - URL-encode spaces: `wttr.in/New+York` - Airport codes: `wttr.in/JFK` - Units: `?m` (metric) `?u` (USCS) - Today only: `?1` · Current only: `?0` - PNG: `curl -s "wttr.in/Berlin.png" -o /tmp/weather.png` ## Open-Meteo (fallback, JSON) Free, no key, good for programmatic use: ```bash curl -s "https://api.open-meteo.com/v1/forecast?latitude=51.5&longitude=-0.12&current_weather=true" ``` Find coordinates for a city, then query. Returns JSON with temp, windspeed, weathercode. Docs: https://open-meteo.com/en/docs

path: _meta.json
content: {
  "owner": "steipete",
  "slug": "weather",
  "displayName": "Weather",
  "latest": {
    "version": "1.0.0",
    "publishedAt": 1767545394459,
    "commit": "https://github.com/clawdbot/skills/commit/e98452b182391d326eccc9b9c79e92bba69493dc"
  },
  "history": []
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/setup (version 1.0.0)

--- name: Setup description: Configure OpenClaw installations with optimized settings, channel setup, security hardening, and production recommendations. --- ## Quick Reference | Task | Load | |------|------| | Messaging channels (Telegram, WhatsApp, Discord, etc.) | `channels.md` | | Agent settings, models, workspaces | `agents.md` | | Security, auth, DM policies, allowlists | `security.md` | | Tools: exec, browser, web, media | `tools.md` | | Cron, hooks, heartbeats, automation | `automation.md` | | Recommendations by use case | `recommendations.md` | | Memory search, embeddings, QMD | `memory.md` | | Gateway: port, TLS, Tailscale, remote | `gateway.md` | --- ## First Setup Checklist Before any config, run: ```bash openclaw onboard --install-daemon # Full wizard openclaw doctor # Check issues ``` **Minimum viable config:** - [ ] At least one channel connected (Telegram recommended for testing) - [ ] Model configured (Anthropic Claude or OpenAI) - [ ] Workspace path set (`agents.defaults.workspace`) - [ ] Owner allowlist configured (your user ID in `channels.*.allowFrom`) --- ## Config Locations | File | Purpose | |------|---------| | `~/.openclaw/openclaw.json` | Main config | | `~/.openclaw/.env` | Environment variables | | `~/.openclaw/workspace/` | Default workspace | | `~/.openclaw/sessions/` | Session storage | **Hot reload:** Most settings apply instantly. Gateway settings (port, TLS) require restart. --- ## Common Mistakes to Avoid 1. **Open DM policy without allowlist** → Anyone can message your bot 2. **No auth token on remote gateway** → Exposed to internet 3. **Model without fallbacks** → Single point of failure 4. **Heartbeat without delivery target** → Lost proactive messages 5. **exec.security: "full" in groups** → Dangerous command access --- ## When You're Done ```bash openclaw doctor # Verify config openclaw status # Check runtime openclaw health # Gateway health ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: gchenxx/cn-economy-news (version 1.0.0)

--- name: cn-economy-news description: "获取中国经济资讯。仅从官方权威媒体（中国政府网、新华网、人民网、国家统计局、央视财经、中国经济网）抓取高质量经济新闻，自动过滤广告和低质量内容。触发词：中国经济、经济资讯、经济新闻、财经新闻、经济政策、宏观经济、GDP、CPI、PMI、货币政策、财政政策、今日财经。" --- # 中国经济资讯 Skill 从官方权威媒体获取高质量中国经济资讯，自动过滤广告。 ## 数据源（仅限官方媒体） | 来源 | 域名 | 图标 | 侧重 | |:---|:---|:---:|:---| | 中国政府网 | gov.cn | 🏛️ | 政策法规 | | 新华网 | news.cn / xinhuanet.com | 📰 | 国家通讯社 | | 人民网 | people.com.cn | 📢 | 深度分析 | | 国家统计局 | stats.gov.cn | 📊 | 经济数据 | | 央视财经 | cctv.com | 📺 | 热点解读 | | 中国经济网 | ce.cn | 📈 | 综合财经 | ## 工作流程 ### Step 1: 多策略抓取（按优先级尝试） **策略 A — web_search（首选）**：如果 web_search 工具可用，直接用关键词搜索，结果最准确。 ``` web_search: "中国经济 最新" / "经济政策" / 用户指定关键词 ``` **策略 B — 直接抓取官网页面**：用 web_fetch 直接访问官方网站首页或频道页。 ``` web_fetch: https://www.ce.cn/ （中国经济网首页，内容丰富） web_fetch: http://finance.people.com.cn/ （人民网财经） web_fetch: http://www.news.cn/fortune/ （新华网财经） ``` **策略 C — 脚本工具（兜底）**：运行 `scripts/fetch_news.py`。 ```bash python3 scripts/fetch_news.py --limit 15 --keyword 经济 ``` ### Step 2: 严格过滤 **必须丢弃**： - 非以上 6 个官方域名的内容 - 标题含广告词：广告、推广、赞助、优惠券、折扣、限时、抢购、免费领、理财产品、稳赚、暴涨、代理、加盟、招商、揭秘、震惊 - 标题 < 8 字或 > 80 字 - 纯视频/图集/专题索引页 ### Step 3: 格式化输出 按来源分组，输出格式： ``` 📅 **中国经济资讯** | 2026-03-05 20:00 ### 🏛️ 中国政府网 1. 标题（链接） 2. 标题（链接） ### 📊 国家统计局 1. 标题（链接） ``` ### Step 4: 深度阅读（用户要求时） 用 web_fetch 抓取正文，提炼 3-5 个关键要点。 ## 注意事项 - 永远不包含自媒体、营销号、商业网站的内容 - 搜索受阻时换策略，不要卡死在一种方式上 - 明确告知用户资讯的时效性


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: lethehades/knowledge-router (version 1.0.0)

--- name: knowledge-router description: Build a lightweight routing layer across existing knowledge sources such as MEMORY.md, daily memory files, self-improving notes, skill references, and audit records. Use when you need to decide where a question should be answered from before reading too much, when you want a unified knowledge index, or when you want to detect which knowledge should be promoted into a more durable layer. --- # Knowledge Router Route queries to the right knowledge layer before doing broad reading. ## Core workflow 1. Scan known knowledge sources and classify them by role. 2. Infer the query intent: rule, fact, method, evidence, or improvement. 3. Recommend primary and secondary sources. 4. Emit promotion hints when knowledge seems mature enough to move upward into a more durable layer. ## Read references as needed - Read `references/source-types.md` for the knowledge source model. - Read `references/routing-rules.md` for intent-to-source routing rules. - Read `references/promotion-rules.md` for when knowledge should be promoted or extracted. - Read `references/report-format.md` for the report structure. - Read `references/release-minimal.md` before packaging or publishing so the first public surface stays minimal. ## Use scripts as needed - Use `scripts/knowledge_router.py "<query>" [--scope ...] [--output report.txt]` to build a routing report. ## Operating rules - Prefer routing over re-storing knowledge. - Prefer a small number of clearly justified sources over broad search noise. - Treat audit logs as evidence, not as the first answer source for general method questions. - Keep the first version focused on source typing, query intent, and recommendation quality.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: jiwenbing/cfp (version 1.0.0)

--- name: cfp version: 1.0.0 description: Certified Financial Planner (CFP) style financial planning assistant. Help users with comprehensive financial planning including budgeting, insurance needs analysis, investment planning, retirement planning, tax optimization, and estate planning. Use when users need holistic financial advice or want to build a financial plan. --- # CFP Financial Planner Provide comprehensive personal financial planning guidance in the style of a Certified Financial Planner (CFP). Cover the six pillars of financial planning: financial statement analysis, insurance, investments, tax, retirement, and estate planning. ## When to Use - User wants to create or review a personal financial plan - User asks about budgeting, saving, or investing strategies - User needs help with retirement planning - User asks about insurance needs analysis - User wants to optimize their tax situation - User asks "how do I get financially secure?" or "am I on track?" ## How to Use 1. Assess current financial situation: income, expenses, assets, liabilities, insurance, goals 2. Identify financial goals: short-term (1-2yr), medium-term (3-10yr), long-term (10yr+) 3. Build a plan across six areas: cash flow → protection → investment → tax → retirement → estate 4. Prioritize actions by urgency and impact 5. Set specific, measurable milestones 6. Review regularly: financial plans should be updated annually or after major life events 7. Clarify: general financial education only; recommend licensed CFP for personalized advice ## Examples - "I'm 35 with ¥500,000 savings, help me build a financial plan" - "How much do I need to retire comfortably at 55?" - "Should I pay off my mortgage or invest the extra money?" - "Help me do a complete financial health check"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)