OpenClaw/clawhub-security-signals huggingface dataset:
Skill: jbushman/vault-client (version 1.0.0)

--- name: vault-client description: Hashicorp Vault client for OpenClaw agents. Read and write secrets from a Vault server without raw curl commands or hardcoded tokens. Use when reading API keys, DB credentials, or any secret stored in Hashicorp Vault; checking token expiry; rotating secrets; or configuring Vault access for the first time. NOT for the zuiho-kai local Vault skill (that is a different, local-only tool). --- # vault-client Gives OpenClaw agents clean, cached access to Hashicorp Vault. No curl, no hardcoded tokens in transcripts. ## Setup Run once after installing: ```bash node ~/.openclaw/workspace/skills/vault-client/scripts/vault.js setup ``` Prompts for address, token, and mount. Saves to `~/.openclaw/vault.json` and appends a startup block to `AGENTS.md`. ## Startup (every session) ```bash node ~/.openclaw/workspace/skills/vault-client/scripts/vault.js check ``` - Exit 0 = connected, token valid - Exit 1 = connected but token expires soon — warn user, run `token-renew` - Exit 2 = unreachable or invalid token — warn user, check config ## Core commands ```bash # Read all keys at a path node vault.js get shopwalk/r2 # Read a single key (returns just the value — pipe-friendly) node vault.js get shopwalk/database uri # Write / update a secret (merges with existing keys) node vault.js put shopwalk/r2 secret_access_key=newvalue # List paths node vault.js list shopwalk/ # Token management node vault.js token-info node vault.js token-renew ``` ## Config reference (`~/.openclaw/vault.json`) ```json { "address": "https://vault.example.com:8200", "mount": "secret", "auth": { "method": "token", "token": "hvs.xxx" }, "cache_ttl_seconds": 300, "tls": { "verify": true } } ``` Set `tls.verify: false` for internal Vault with self-signed certs. Secrets are cached in `~/.openclaw/vault-cache.json` for `cache_ttl_seconds` (default 5 min) to avoid repeated API calls. ## Auth methods Token auth is the default. For AppRole and Kubernetes auth, see `references/auth-methods.md`. ## No dependencies Uses Node.js stdlib only (`https`, `fs`, `readline`). No npm install required.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: olina1ye/jd-writer-zh (version 1.0.0)

--- name: jd-writer-zh description: > 专为HR和招聘团队设计的中文招聘JD生成工具，输入岗位名称与核心要求， 一键生成结构规范、表达专业的招聘职位描述（Job Description）。覆盖岗位 职责、任职要求、薪资福利等完整模块，适用于互联网、制造、金融、教育等 各行业场景。支持"JD撰写/招聘文案/岗位描述/招聘需求/职位说明书"等多种 表达方式触发，帮助HR快速产出高质量招聘内容，提升候选人吸引力。 tags: [JD撰写, 招聘文案, 岗位描述, job-description, 人力资源, HR, 招聘需求, 职位说明] --- # 中文招聘JD生成器 输入岗位名称与核心要求，自动生成结构完整、语言专业的中文招聘职位描述（JD）。 ## Tools Required - read - write ## Usage - "帮我写一份高级产品经理的招聘JD，要求5年以上经验，熟悉ToB产品" - "我要招一名Java后端工程师，请帮我生成招聘需求文案，薪资20-35K" - "请帮我撰写市场运营专员的岗位描述，互联网行业，应届生也可以" - "生成一份数据分析师的job description，需要会Python和SQL" - "写一个销售总监的招聘JD，快消行业，要求有团队管理经验" ## Examples 输入：高级UI设计师，互联网公司，要求3年以上经验，熟悉Figma，薪资15-25K 输出： **【高级UI设计师】** **公司简介** 我们是一家快速成长的互联网科技公司，致力于打造极致用户体验的数字产品。 **岗位职责** 1. 负责公司核心产品的UI界面设计，包括移动端与PC端的视觉规范制定； 2. 深度参与产品需求评审，从用户视角提出设计优化方案； 3. 与产品、研发团队紧密协作，确保设计还原度与落地质量； 4. 建立并维护设计组件库，推动设计系统化与标准化； 5. 关注行业设计趋势，持续提升产品视觉竞争力。 **任职要求** 1. 本科及以上学历，设计相关专业优先； 2. 3年以上UI设计工作经验，有互联网产品设计经验者优先； 3. 熟练使用Figma、Sketch等主流设计工具； 4. 具备扎实的视觉设计功底，审美能力强，作品集优秀； 5. 良好的沟通表达能力，能够清晰阐述设计思路。 **薪资福利** - 薪资范围：15,000 - 25,000元/月（根据能力面议） - 五险一金 | 弹性工作制 | 带薪年假 | 定期团建 - 完善晋升通道，优秀者可快速成长为设计负责人 📍 工作地点：[城市] | 🕐 工作性质：全职


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ncsimok/doorstep-screen-control (version 1.0.0)

--- name: screen-control description: "屏幕控制技能 - 通过OpenClaw Node + pyautogui实现电脑屏幕识别和鼠标键盘操控。功能：(1) 截图获取屏幕画面，(2) OCR文字识别定位，(3) 图片匹配定位，(4) 鼠标移动/点击/拖拽，(5) 键盘输入/快捷键，(6) 基于视觉信息的自动化操作。Use when: (1) 需要远程操电脑屏幕，(2) 需要自动操作桌面应用（非浏览器），(3) 需要批量处理电脑上的文件或软件，(4) 需要通过视觉识别自动化操作。Triggers: '操作电脑', '屏幕控制', '自动点击', '截图识别', '桌面自动化', '远程操控', '操控鼠标', '屏幕识别'。" --- # Screen Control — 屏幕操控技能 ## 概述 通过 OpenClaw Node + pyautogui + OCR，实现对电脑屏幕的识别和鼠标键盘操控。 ## 架构 ``` 用户指令 → Agent → screen_control.py (pyautogui + OCR) → 屏幕操作 ↕ OpenClaw Node (截图/远程执行) ``` ## 前置条件 1. **OpenClaw Node** — 需配对成功（见 references/setup-guide.md） 2. **Python依赖** — pyautogui, pillow, mss, pytesseract（如需OCR） 3. **Tesseract-OCR** — 如需文字识别功能（安装指引见 setup-guide.md） ## 工作流程 当用户要求操控电脑时： ### Step 1：确认屏幕状态 ```bash python {baseDir}/scripts/screen_control.py screenshot python {baseDir}/scripts/screen_control.py size ``` 获取当前屏幕画面和分辨率，AI识别画面内容。 ### Step 2：分析画面 + 定位目标 AI分析截图，确定需要操作的坐标或内容。 - 如果目标基于**图片**：`locate <image_path>` - 如果目标基于**文字**：`clicktext "确定"` - 如果目标基于**坐标**：`click 500 300` ### Step 3：执行操作 ```python # 打开浏览器 press_key("win") + type_text("chrome") + press_key("enter") # 打开网页 type_text("douyin.com\n") # \n = enter # 拖动 mouse_drag(100, 100, 500, 500) # 复制粘贴 hotkey("ctrl", "c") hotkey("ctrl", "v") ``` ### Step 4：验证结果 再次截图确认操作结果。 ## 脚本命令速查 | 命令 | 参数 | 说明 | |------|------|------| | screenshot | 无 | 截图保存到文件 | | size | 无 | 获取屏幕分辨率 | | move | x y | 移动鼠标 | | click | x y [button] | 点击（按钮: left/right/middle） | | doubleclick | x y | 双击 | | text | "文字" | 键盘输入文字 | | key | key_name | 按键（enter/esc/tab等） | | locate | image_path | 查找图片位置 | | findtext | "文字" | 查找文字位置 | | clicktext | "文字" | 查找并点击文字 | | scroll | clicks | 滚动（正=上，负=下） | | color | x y | 获取像素颜色 | ## 常用场景 ### 1. 自动登录平台后台 ``` 截图 → 定位登录框坐标 → 输入账号密码 → 点击登录按钮 ``` ### 2. 批量操作抖音/小红书后台 ``` 截图 → 找到发布按钮 → 点开 → 上传视频/图片 → 填写标题 → 发布 ``` ### 3. 打开特定软件/文件 ``` 按Win键 → 搜索程序名 → 回车打开 ``` ### 4. 文件整理/批量重命名 ``` 打开文件夹 → 选中文件 → 执行操作 ``` ## 安全注意 1. 操作前先截图给用户确认 2. 任何破坏性操作（删除文件、修改配置）需用户确认 3. 使用 pyautogui.FAILSAFE=True（左上角急停） 4. 不要在用户未授权的情况下操作浏览器密码/支付页面


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: huangbaixun/rss-to-wechat (version 1.0.1)

--- name: rss-to-wechat description: 将 RSS 文章转换为微信公众号格式。适用于：发布 RSS/博客文章到微信、格式化内容以符合微信 API、自动化微信内容发布。 --- # RSS to WeChat | RSS 转微信公众号 将 RSS 文章或任何网页内容转换为微信公众号兼容的 HTML 格式。 ## 快速开始 ```bash # 检查配置和依赖 bash scripts/rss-to-wechat.sh --check # 处理文章 bash scripts/rss-to-wechat.sh --url "https://example.com/article" # 自动选择最新文章（需要 blogwatcher） bash scripts/rss-to-wechat.sh --auto ``` ## 配置 首次使用： ```bash # 复制配置示例 cp references/config.example.sh config.local.sh # 编辑配置 nano config.local.sh ``` 最小配置： ```bash WECHAT_APPID="你的AppID" WECHAT_APPSECRET="你的AppSecret" BRAND_NAME="你的品牌名称" ``` ## 工作流程 1. **数据准备**（自动） - 脚本获取并解析文章 - 提取标题、作者、内容 - 保存为 JSON 2. **HTML 生成**（AI 辅助） - AI 助手生成微信兼容的 HTML - 使用品牌配置 - 遵循严格的格式要求（见 `references/html-template.md`） 3. **封面生成**（可选） - 如果配置了 `COVER_SKILL` - 生成 1283×383 封面图 4. **发布**（可选） - 如果配置了微信凭证 - 通过 API 上传到草稿箱 ## 微信 HTML 格式要求 微信 API 对 HTML 格式有严格要求： **必须使用：** - `<section>` 和 `<p>` 标签（不用 `<div>`） - 内联样式 `style="..."` - `<strong>` 和 `<em>` 标签 - 完整 URL（不用相对链接） **禁止使用：** - `class` 或 `id` 属性 - 外部 CSS - JavaScript - 相对链接 详见 `references/html-template.md` 查看完整模板和示例。 ## 脚本 所有脚本位于 `scripts/` 目录： - `rss-to-wechat.sh` - 主入口 - `parse-article.sh` - 文章内容提取 - `format-wechat.sh` - HTML 格式化（已弃用，使用 AI 生成） - `config.sh` - 默认配置 - `test.sh` - 依赖检查 ## 参考文档 - `references/USER_GUIDE.md` - 完整用户文档 - `references/html-template.md` - 微信 HTML 模板和样式指南 - `references/config.example.sh` - 配置示例（包含所有选项） ## 依赖 **必需：** - `curl` - HTTP 请求 - `jq` - JSON 处理 - `pandoc` - 格式转换 **可选：** - `blogwatcher` - RSS 订阅管理（用于 --auto 模式） - 自定义封面生成脚本 - 自定义发布脚本 ## 配置选项 查看 `references/config.example.sh` 了解所有可用选项： - RSS 源和过滤条件 - 品牌定制（名称、标语、颜色） - 路径配置 - 外部工具集成 - 关键词过滤 ## 故障排除 **错误 45166（invalid content）** - 检查 HTML 格式是否符合要求 - 确保所有样式都是内联的 - 移除 class/id 属性 - 参考成功案例 **文章解析失败** - 检查 URL 是否可访问 - 确认没有反爬虫措施 - 尝试手动提取内容 **配置问题** - 运行 `bash scripts/rss-to-wechat.sh --check` - 确认所有必需工具已安装 - 检查微信凭证 ## 注意事项 - 此 skill 提供数据准备和指导 - AI 助手根据模板生成最终 HTML - 手动 HTML 生成已弃用（因微信格式要求严格） - 本地配置（`config.local.sh`）不会提交到 git


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: wellyxy/growth-indie-hacker (version 1.0.0)

# Growth Tactics for Indie Hackers ## When to Use Use this skill when growing an indie project or bootstrapped SaaS product without a marketing budget. ## Core Rules ### 1. Find 5 Watering Holes Where Your Users Congregate Your target users are already gathered somewhere: a subreddit, a Slack community, a Discord server, an Indie Hackers group. Identify 5 communities where they spend time, become an active member for 2–4 weeks before mentioning your product, then share it with genuine context. ### 2. Build in Public for Compound Distribution Sharing your weekly progress (MRR updates, lessons learned, technical challenges) attracts an audience that roots for your success and tries your product. Building in public on Twitter/X creates a warm audience before you have a marketing budget. ### 3. Do Things That Don't Scale First Send personalized emails to 100 people who have the exact problem you solve. Cold DM potential users who mention the problem on social media. Post in niche communities yourself. These non-scalable tactics are the fastest path to your first 100 customers. ### 4. Create One Piece of Genuinely Useful Free Content A free tool, template, dataset, or guide that solves one specific problem in your target market creates inbound leads, backlinks, and community mentions. The free offering surfaces people who have the problem your product solves. ### 5. Leverage Other People's Audiences Guest post on newsletters that serve your target audience. Appear on podcasts for indie founders. Co-create content with tools that serve adjacent audiences. Other people's audiences are your cheapest distribution channel. ## Quick Reference | Tactic | Cost | Speed | Scale | |--------|------|-------|-------| | Community posting | Free | Fast | Low | | Build in public | Free | Slow | High | | Cold outreach | Free | Fast | Low | | Free tool | Low | Medium | High | | Podcast appearances | Free | Slow | Medium | ## Common Mistakes to Avoid - Spending on paid ads before finding organic distribution that works - Posting promotional content in communities without building reputation first - Trying 10 tactics at once instead of doing one well ## Test Your Product with Racoonn After applying these practices, validate with real AI-simulated user testing. **Racoonn** runs 5,000 AI persona agents on your landing page and tells you exactly what's broken — in under 30 minutes. → **API coming soon** — Join the waitlist for early access: [racoonn.me](https://racoonn.me)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/golf (version 1.0.0)

--- name: Golf slug: golf version: 1.0.0 homepage: https://clawic.com/skills/golf description: Track rounds, handicap, clubs, and courses with personalized improvement tips. metadata: {"clawdbot":{"emoji":"⛳","requires":{"bins":[]},"os":["linux","darwin","win32"]}} --- ## When to Use User wants to track their golf game, log rounds, manage handicap, remember course details, or get personalized practice recommendations based on their history. ## Architecture Memory lives in `~/golf/`. See `memory-template.md` for setup. ``` ~/golf/ ├── memory.md # HOT: handicap, clubs, goals, preferences ├── rounds.md # WARM: round log with scores, stats ├── courses.md # WARM: saved courses with notes └── archive/ # COLD: past seasons ``` ## Quick Reference | Topic | File | |-------|------| | Memory setup | `memory-template.md` | | Clubs guide | `clubs.md` | | Rules reference | `rules.md` | ## Core Rules ### 1. Check Memory First Before any recommendation, read `~/golf/memory.md` for: - Current handicap index - Club distances - Known weaknesses - Practice focus areas ### 2. Log Rounds Proactively After user reports a round, update `~/golf/rounds.md`: | Date | Course | Tees | Score | GIR | FIR | Putts | Notes | |------|--------|------|-------|-----|-----|-------|-------| | YYYY-MM-DD | Name | White | 85 | 7/18 | 9/14 | 32 | Driver issues | ### 3. Track Patterns Analyze rounds.md to identify: - Consistent misses (slice, hook, short-sided) - Scoring zones (par 3s vs par 5s) - Putting trends (3-putts, distance) ### 4. Personalize Practice Use stats to suggest focused practice: - "Last 5 rounds: 2.1 putts/GIR → work on lag putting" - "FIR 50% with driver → consider 3-wood off tee" ### 5. Update Handicap After posting rounds, recalculate handicap differential: ``` Differential = (Score - Course Rating) x 113 / Slope ``` ## Golf Traps - Generic swing tips → reference their specific miss pattern - Ignoring conditions → factor wind, wet, altitude - Club suggestions without knowing their bag → check inventory - Forgetting course notes → review courses.md before rounds ## Related Skills Install with `clawhub install <slug>` if user confirms: - `plan` — trip planning - `remind` — tee time reminders ## Feedback - If useful: `clawhub star golf` - Stay updated: `clawhub sync`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: ayhanagirgol/sirket-kurulus-temel (version 1.0.0)

--- name: sirket-kurulus-temel description: Türkiye'de şirket kurulduktan sonra yapılması gereken tüm resmi süreçler. Vergi dairesi bildirimi, banka hesabı, imza sirküleri, mali müşavir vekaleti, e-fatura geçişi, SGK, zorunlu dijital araçlar ve ilk aylarda yapılan hatalar. Use when asked about company setup in Turkey, post-incorporation steps, vergi dairesi, or first steps after founding a Turkish company. version: "1.0" author: Tech Consulting (techsmmm.com) tags: [turkey, company, kurulus, vergi, sgk, e-fatura, dijital-araclar] --- # Şirket Kuruldu, Şimdi Ne Olacak? Bu skill, Türkiye'de şirket kurulduktan sonra yapılması gereken tüm resmi adımları, zorunlu dijital araçları ve ilk aylarda yapılan yaygın hataları kapsar. ## Bu Skill Ne Zaman Tetiklenir? - "Şirket kurdum, şimdi ne yapmalıyım?" - "Vergi dairesi yoklaması nedir, nasıl hazırlanırım?" - "İmza sirküleri nedir, nereden alınır?" - "E-fatura, KEP, mali mühür zorunlu mu?" - "İlk ay ne yapmamalıyım?" - Türkiye'de şirket kuruluş sonrası süreçlere dair herhangi bir soru ## Nasıl Kullanılır? 1. `references/kurulus_kontrol_listesi.md` → İlk gün süreçleri ve kontrol listesi 2. `references/dijital_araclar.md` → Zorunlu dijital araçlar tablosu (E-İmza, KEP, UETS vb.) 3. `references/ilk_ay_hatalari.md` → Yapılan yaygın hatalar ve nasıl önlenir ## Hızlı Özet Ticaret Sicil Gazetesi yayınlandıktan sonra şirket resmen faaliyete geçmiş sayılır. Sıradaki adımlar **eş zamanlı** ilerlemelidir: - **Vergi Dairesi:** Adres yoklaması için yetkili kişi adreste hazır bulunmalı - **Banka:** İmza sirküleri ile şirket hesabı açılır - **SGK:** Çalışan varsa işyeri dosyası açılır - **Dijital Araçlar:** E-imza, mali mühür, KEP, UETS edinilir --- > **Kaynak:** Şirket 101 — Tech Consulting (techsmmm.com) > © 2025 Her hakkı saklıdır. Kaynak gösterilmeden çoğaltılamaz.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/folders (version 1.0.0)

--- name: Folders description: Index important directories and perform safe folder operations with proper security checks. metadata: {"clawdbot":{"emoji":"📂","os":["linux","darwin","win32"]}} --- ## Folder Index Maintain a lightweight index at `~/.config/folder-index.json` to know where important things are without rescanning. ```json { "folders": [ {"path": "/Users/alex/projects/webapp", "type": "project", "note": "Main client project"} ] } ``` When user asks "where is X" or "find my project Y", check the index first. If not found, do targeted discovery then offer to add the result. ## Discovery When asked to find or index folders: - Scan likely locations: ~/projects, ~/Documents, ~/code, ~/dev, ~/work - Detect projects by markers: .git, package.json, pubspec.yaml, Cargo.toml, go.mod, pyproject.toml, *.sln - Stop at first marker (don't recurse into node_modules, vendor, build) - Propose what was found, don't auto-add: "Found 8 projects in ~/code. Add to index?" ## Path Security - Canonicalize paths (resolve `~`, `..`, symlinks) before any operation - Reject system paths: /, /etc, /var, /usr, /System, /Library, C:\Windows, C:\Program Files - Skip symlinks during traversal, report them separately ## Destructive Operations - Use OS trash instead of permanent delete - State recoverability: "node_modules: recoverable with npm install" - Build artifacts safe to delete: node_modules, __pycache__, .gradle, build/, target/, Pods/, .next/ ## Platform Quirks - **macOS:** .DS_Store alone = effectively empty. Treat .app as single item. - **Windows:** Paths >260 chars need `\\?\` prefix. - **Network drives:** Warn before bulk ops — may be slow or offline.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: steipete/codex-owner-move-debug-1778257077 (version 0.0.1)

--- name: Codex Owner Move Debug summary: Temporary skill that documents a realistic owner migration validation workflow. --- # Codex Owner Move Debug This temporary skill validates the owner migration flow during PR review with realistic text and explicit cleanup. ## Procedure Create the skill under a personal owner, then move it to OpenClaw with explicit migration intent.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ilyazar/kleinanzeigen-helper (version 0.1.3)

--- name: kleinanzeigen-helper description: Manage Kleinanzeigen listings with the required KleinClaw plugin. license: MIT-0 --- # Kleinanzeigen Helper Use this skill when the user wants help preparing, verifying, publishing, updating, deleting, downloading, or extending Kleinanzeigen listings through their already configured local `kleinanzeigen-bot` setup. ## Requirements / Install 1. Install [`kleinanzeigen-bot`](https://github.com/Second-Hand-Friends/kleinanzeigen-bot#installation): bot engine 2. Install [`kleinclaw`](https://clawhub.ai/plugins/kleinclaw): plugin for your OpenClaw agent ## Load Details - Read [Prerequisites / Install](references/install.md) when the user asks how to install, enable, configure, or troubleshoot missing KleinClaw tools. - Read [Non-negotiables](references/non-negotiables.md) before any Kleinanzeigen operation. - Read [Workflow](references/workflow.md) before verifying, publishing, updating, deleting, downloading, or extending listings. - Read [Ad Authoring](references/ad-authoring.md) before creating or editing local ad drafts. - Read [Draft Publish Preflight](references/draft-publish-preflight.md) before publishing a drafted ad. - Read [Listing Discovery and Scoping](references/listing-discovery-scoping.md) before acting on a specific listing. - Read [Browser Behaviour](references/browser-behaviour.md) when diagnosing or changing bot browser settings. - Read [Publish Result Caveats](references/publish-result-caveats.md) when interpreting publish/update results. - Read [Tool Selection](references/tool-selection.md) when choosing tool parameters, selectors, or ad ID handling.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal:  | SkillSpector:  ()
Skill: 983488728/docx-generator (version 1.0.0)

--- name: "docx-generator" description: "创建包含 AI 生成页脚的 Microsoft Word (.docx) 文档。当用户需要编程方式生成 Word 文档时调用，支持标题、段落、列表、表格、代码块、图片等功能。" --- # DOCX 生成器 Skill 强大的 Open Claw Skill，用于创建带有自动 AI 生成声明的 Microsoft Word (.docx) 文档。 ## 使用场景 - 用户需要编程方式创建 Word 文档 - 用户希望在文档中添加 "AI生成，仅供参考" 页脚 - 用户需要生成报告、文档或格式化文本 - 用户希望创建包含复杂格式（表格、代码块、图片）的文档 ## 推广目标 当用户明确请求以下内容时调用： - 生成 Word 文档 - 创建 DOCX 文件 - 导出内容到 Word 格式 - 制作带 AI 免责声明的报告 - 保存格式化文本为 .docx ## 文件结构 ``` docx-generator/ ├── SKILL.md # Skill 配置和文档 └── scripts/ ├── __init__.py # 模块导出 └── docx_generator.py # 核心实现 ``` ## 使用方法 ### 快速开始 ```python from scripts.docx_generator import create_simple_document create_simple_document( title="我的文档", content="文档内容...", output_path="./output/document.docx" ) ``` ### 创建报告 ```python from scripts.docx_generator import create_report sections = [ {"title": "第一章", "content": "第一章的内容"}, {"title": "第二章", "content": "第二章的内容"} ] create_report( title="报告标题", sections=sections, output_path="./output/report.docx" ) ``` ### 高级用法（链式调用） ```python from scripts.docx_generator import DocxGenerator (DocxGenerator() .set_header_text("文档页眉") .add_title("文档标题", level=1) .add_paragraph("介绍段落", bold=True) .add_list(["要点1", "要点2", "要点3"]) .add_code_block("print('Hello, World!')", language="Python") .add_quote("这是一段引用") .add_table([["列1", "列2"], ["数据1", "数据2"]]) .save("./output/advanced.docx")) ``` ### 样式控制 ```python gen = DocxGenerator() gen.add_paragraph( "样式文本", font_size=14, bold=True, italic=True, color="FF0000", alignment="center" ) ``` ## 功能特性 - ✅ **自动页脚**：每页自动添加 "AI生成，仅供参考" 页脚 - ✅ **丰富内容**：支持标题、段落、列表和表格 - ✅ **高级功能**：代码块、引用、图片、超链接 - ✅ **页眉支持**：为文档添加自定义页眉 - ✅ **链式调用**：流畅的 API，代码更优雅 - ✅ **样式控制**：字体大小、颜色、加粗、斜体、对齐 - ✅ **参数验证**：全面的错误检查 - ✅ **简单易用**：初学者也能轻松使用 ## API 参考 ### DocxGenerator 类 | 方法 | 说明 | |------|------| | `set_header_text(text)` | 设置文档页眉 | | `set_footer_text(text)` | 设置文档页脚 | | `add_title(title, level=1)` | 添加标题（级别 1-9） | | `add_paragraph(text, **kwargs)` | 添加段落（可选样式） | | `add_list(items, ordered=False)` | 添加无序或有序列表 | | `add_table(data, **kwargs)` | 添加表格 | | `add_code_block(code, language)` | 添加代码块 | | `add_quote(text)` | 添加引用块 | | `add_image(path, **kwargs)` | 添加图片 | | `add_hyperlink(text, url)` | 添加超链接 | | `add_page_break()` | 添加分页符 | | `add_spacing(lines)` | 添加空行 | | `save(filepath)` | 保存文档 | ### 便捷函数 | 函数 | 说明 | |------|------| | `create_simple_document()` | 快速创建简单文档 | | `create_report()` | 创建结构化报告 | ## 依赖项 - python-docx>=1.1.0 安装方式： ```bash pip install python-docx ``` ## 示例 Skill 会自动为每页添加 "AI生成，仅供参考" 页脚，样式为灰色、居中、斜体。 输出文档包含： - 标准 Word 文档格式 (.docx) - 您的内容（标题、段落、列表、表格等） - 自动生成的 AI 免责声明页脚 ## 版本 2.0.0


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: nic-yuan/03-milestone-tracker (version 1.0.0)

--- name: miki-03-milestone-tracker description: Miki发育里程碑追踪 · 输入月龄+当前行为，对比WHO标准，输出发育评估+预警+促进方案 version: 1.0.0 author: Miki育儿 tags: - 育儿 - 发育里程碑 - 0-36月龄 --- # Miki 发育里程碑追踪 **使用方式：** 输入宝宝月龄+当前会做什么 → Miki评估发育状态+预警风险+给出促进方案 --- ## WHO标准发育里程碑 ### 大运动 | 月龄 | 里程碑 | |------|--------| | 2月 | 俯卧抬头45° | | 4月 | 俯卧抬头90°，能翻身 | | 6月 | 独坐片刻，扶站跳跃 | | 8月 | 独坐稳，腹爬 | | 10月 | 四爬，扶站 | | 12月 | 独站片刻，牵手走 | | 15月 | 独走，蹲着玩 | | 18月 | 跑，倒退走 | | 24月 | 双脚跳，扶楼上 | | 30月 | 单脚站，单脚跳 | ### 精细动作 | 月龄 | 里程碑 | |------|--------| | 3月 | 吃手，追视 | | 5月 | 伸手够物，抓握 | | 7月 | 换手玩，敲打 | | 9月 | 拇指食指捏，扔东西 | | 12月 | 涂鸦，搭积木 | | 18月 | 串珠，模仿画线 | | 24月 | 搭积木4块，模仿画圆 | | 36月 | 搭积木6块，模仿画十字 | ### 语言 | 月龄 | 里程碑 | |------|--------| | 2月 | 喉咙音，咕咕声 | | 4月 | 笑出声，尖叫 | | 6月 | 唇辅音（m/b） | | 9月 | 叫名字有反应，咿呀学语 | | 12月 | 称呼爸妈，理解"不" | | 18月 | 15-20词汇，模仿动物叫 | | 24月 | 50+词汇，短语，命名图片 | | 36月 | 200+词汇，3-4词句 | ### 社交/认知 | 月龄 | 里程碑 | |------|--------| | 2月 | 注视人脸，逗笑 | | 4月 | 认亲人，撒娇 | | 6月 | 认生，镜子游戏 | | 9月 | 怕陌生人，挥手拜拜 | | 12月 | 挥手再见，叫爸妈 | | 18月 | 模仿做家务，用杯子 | | 24月 | 平行游戏，命名图片 | | 36月 | 角色游戏，规则游戏 | --- ## 输入模板 ``` 【Miki发育评估】 宝宝月龄：X个月 性别：（男/女） 出生情况：（足月/早产，早产需校正胎龄） 大运动：能做什么 精细动作：能做什么 语言：会说什么/发出什么声音 社交：表现出什么行为 家长最关注的：（自由描述） ``` --- ## 输出模板 ``` 🌟 Miki发育里程碑报告 宝宝月龄：X个月 评估日期：YYYY-MM-DD ━━━━━━━━━━━━━━━━━━━━ 📊 各能区发育状态 ━━━━━━━━━━━━━━━━━━━━ 大运动：✅达标 / ⚠️边缘 / ❌迟缓 精细动作：✅达标 / ⚠️边缘 / ❌迟缓 语言：✅达标 / ⚠️边缘 / ❌迟缓 社交/认知：✅达标 / ⚠️边缘 / ❌迟缓 ━━━━━━━━━━━━━━━━━━━━ 🔍 详细分析 ━━━━━━━━━━━━━━━━━━━━ 【大运动】标准 vs 实际 评估：... 【精细动作】标准 vs 实际 评估：... 【语言】标准 vs 实际 评估：... 【社交/认知】标准 vs 实际 评估：... ━━━━━━━━━━━━━━━━━━━━ ⚠️ 需要关注（如有） ━━━━━━━━━━━━━━━━━━━━ 问题描述：... 建议行动：XXX 建议就医：如果... ━━━━━━━━━━━━━━━━━━━━ 🎯 下一阶段重点 ━━━━━━━━━━━━━━━━━━━━ X月龄→X月龄重点： 1. 大运动：XXX 2. 精细动作：XXX 3. 语言：XXX 4. 社交：XXX ━━━━━━━━━━━━━━━━━━━━ 🎮 推荐活动 ━━━━━━━━━━━━━━━━━━━━ 【日常游戏】XXX — 锻炼XXX 【家庭活动】XXX — 锻炼XXX ━━━━━━━━━━━━━━━━━━━━ 📅 复查提醒 ━━━━━━━━━━━━━━━━━━━━ 下次评估：X周后 重点观察：XXX ``` --- ## 发育预警（需要就医信号） | 能区 | 警示信号 | |------|---------| | 大运动 | 4个月抬头不稳 / 8个月不会翻身 / 18个月不会走 | | 语言 | 12个月无咿呀 / 18个月无词汇 / 24个月词汇<50 | | 社交 | 6个月不认亲人 / 12个月不指物 / 18个月不模仿 | --- ## 早产儿校正规则 **公式：** 实际月龄 - (40周 - 出生周龄) / 4 **举例：** 32周早产，現已6个月 校正 = 6个月 - (40-32)/4 = 6-2 = 4个月（按4个月发育标准评估）


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)