OpenClaw/clawhub-security-signals huggingface dataset:
Skill: 1477009639zw-blip/betabacktestr (version 1.0.0)

--- name: backtester description: Professional backtesting framework for trading strategies. Tests SMA crossover, RSI, MACD, Bollinger Bands, and custom strategies on historical data. Generates equity curves, drawdown analysis, and performance metrics. metadata: openclaw: emoji: "📈" requires: bins: [python3] always: false --- # Beta Backtester Professional quantitative backtesting tool for validating trading strategies before live deployment. ## What It Does - Tests strategies on historical OHLCV data (stocks, crypto, forex) - Calculates performance metrics (Sharpe, Sortino, Max Drawdown, Win Rate) - Generates equity curves and drawdown charts - Compares multiple strategies side-by-side - Optimizes parameters for best risk-adjusted returns ## Strategies Supported | Strategy | Description | |----------|-------------| | SMA Crossover | Fast/slow moving average crossover | | RSI | RSI overbought/oversold reversals | | MACD | MACD signal line crossovers | | Bollinger Bands | Mean reversion at bands | | Momentum | Price momentum breakout | | Custom | User-defined entry/exit logic | ## Usage ```bash python3 backtest.py --strategy sma_crossover --ticker SPY --years 2 python3 backtest.py --strategy rsi --ticker BTC --years 1 --upper 70 --lower 30 python3 backtest.py --strategy macd --ticker AAPL --years 3 ``` ## Output Example ``` BACKTEST RESULTS: SMA_CROSSOVER | SPY | 2020-2022 ============================================================ Total Return: +34.5% Annual Return: +16.2% Sharpe Ratio: 1.34 Max Drawdown: -12.3% Win Rate: 58% Total Trades: 47 Best Trade: +8.2% Worst Trade: -4.1% Avg Hold Time: 12 days EQUITY CURVE: 2020-01: $10,000 2020-06: $11,200 2021-01: $11,800 2021-06: $13,400 2022-01: $13,450 2022-12: $13,450 ``` ## Metrics Explained - **Sharpe Ratio**: Risk-adjusted return (>1 is good, >2 is excellent) - **Max Drawdown**: Largest peak-to-trough loss (-10% is acceptable) - **Win Rate**: % of profitable trades (>50% with good R:R is profitable) - **Sortino Ratio**: Like Sharpe but only penalizes downside volatility ## Requirements - Python 3.8+ - pandas, numpy, matplotlib (auto-installed) - yfinance for data (or provide your own CSV) ## Data Sources - Default: Yahoo Finance (free, no API key needed) - CSV upload: Provide your own OHLCV data - API: Tiger API for professional data ## Disclaimer Backtested results do NOT guarantee future performance. Past performance is not indicative of future results. Always paper trade before going live. --- *Built by Beta — AI Trading Research Agent*


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: albionaiinc-del/file-sorter-by-ext (version 1.0.0)

# File Sorter by Extension Automatically organizes files in a directory by their file extension into labeled folders, helping users maintain clean, structured directories without manual sorting. ## Usage Sort files in the current directory: ``` python file_sorter_by_ext.py ``` Sort files in a specific directory: ``` python file_sorter_by_ext.py /path/to/downloads ``` ## Price $2.50


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: gabriel-0110/kraken-spot (version 1.2.0)

--- name: openclaw_kraken description: Use a Bash CLI to query Kraken Spot and Futures APIs, inspect account state, run guarded trading and funding actions, and work with Kraken websocket payloads using OpenClaw-managed secrets. homepage: https://github.com/oscraters/kraken-skill.git metadata: {"openclaw":{"homepage":"https://github.com/oscraters/kraken-skill.git","requires":{"bins":["bash","curl","openssl"],"env":["KRAKEN_API_BASE_URL"]},"primaryEnv":"KRAKEN_API_KEY"}} --- # OpenClaw Kraken Use `{baseDir}/bin/openclaw-kraken` for Kraken Spot REST tasks. ## Use when - The user wants Kraken market data. - The user wants Kraken account state from private REST endpoints. - The user wants guarded order placement, funding, earn, futures, subaccount, or websocket actions through a local Bash tool instead of ad hoc curl commands. ## Rules - Never print API secrets, signatures, or raw auth headers. - Read secrets from the environment only. In OpenClaw, inject them via secret refs rather than plaintext config. - Refuse to run if required config is missing or malformed. - Use configured base URLs only. Do not accept arbitrary destination URLs. - Preserve stdout for API results; use `--jq` or `--compact` when structured formatting is needed. - Prefer read-only endpoints unless the user clearly asked for a state-changing action. - For state-changing aliases such as trading, withdrawal, earn allocation, or subaccount transfer operations, require `--confirm`. ## Commands - `market time` - `market ticker --pair XBTUSD` - `account balance` - `funding deposit-methods --asset ETH` - `earn strategies --ascending true` - `futures call market.tickers` - `ws spot-public --message-json '{"method":"ping"}'` - `orders add --pair XBTUSD --side buy --type limit --volume 0.01 --price 25000 --time-in-force GTC --post-only true --confirm` - `call funding.withdraw-info --asset ETH --key MyWallet --amount 0.5` ## Configuration - Non-secret config is read from environment or `OPENCLAW_KRAKEN_CONFIG`. - Secrets must be provided via environment variables that OpenClaw resolves from secret refs. - See `{baseDir}/README.md` for examples.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: leooooooow/batch-content-sprint-os (version 1.0.3)

--- name: batch-content-sprint-os description: Plan and run weekly batch content production for creators with clear priorities, time blocks, and output targets. Use when the user wants a repeatable content cadence, needs anti-burnout planning, or wants to turn scattered ideas into a realistic production sprint. --- # Batch Content Sprint OS ## Skill Card - **Category:** Operations - **Core problem:** How to ship weekly content without burnout? - **Best for:** Weekly execution planning - **Expected input:** Weekly goals, team bandwidth, channel priorities - **Expected output:** Sprint board + realistic publishing cadence - **Creatop handoff:** Use sprint outputs to drive Creatop batch generation ## What this does Convert content chaos into a realistic weekly sprint with delivery and recovery built in. ## Workflow ### 1) Define constraints Capture: - available hours this week - team roles - output target - priority campaigns ### 2) Build backlog Classify tasks: - must ship - should ship - nice to have ### 3) Capacity and overcommit check Estimate total effort by block (ideation/scripting/recording/editing/publishing). If estimated hours exceed capacity: - cut nice-to-have first - reduce should-ship scope second - keep must-ship realistic ### 4) Time-block execution Create day-by-day blocks for: - ideation - scripting - recording - editing - publishing + repurposing ### 5) Add anti-burnout guardrails Set: - max deep-work hours/day - revision buffers - at least one low-load day - fallback content options ### 6) Output sprint board Return: - weekly plan by day - owner per task - delivery checklist - carryover note format for next sprint ## Quality rules - Optimize for consistency over perfection. - Keep schedules executable by small teams. - Never plan a sprint without buffer. ## License Copyright (c) 2026 **Razestar**. This skill is provided under **CC BY-NC-SA 4.0** for non-commercial use. You may reuse and adapt it with attribution to Razestar, and share derivatives under the same license. Commercial use requires a separate paid commercial license from **Razestar**. No trademark rights are granted.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: zhaohong-test/zhaohong-hello-world (version 1.0.0)

--- name: amap-location-search description: 高德地图位置搜索，用户输入地点名称，返回对应的高德地图搜索链接 --- # 高德地图位置搜索 Skill 当用户想要搜索某个地点、位置或地址时，生成对应的高德地图搜索链接并返回给用户。 ## 触发条件 用户输入包含以下意图之一： - "搜索 XX"、"搜 XX" - "查找 XX"、"找 XX 在哪" - "XX 在哪里"、"XX 怎么去" - 任何询问某个地点位置的请求 ## 执行步骤 1. **提取关键词**：从用户输入中识别出核心地点名称，去掉"搜索"、"搜"、"找"、"查"、"在哪"、"在哪里"等修饰词 2. **生成链接**：将关键词拼接到以下 URL 模板中 **URL 格式：** ``` https://ditu.amap.com/search?query={关键词} ``` - **域名**：`ditu.amap.com` - **路由**：`/search` - **参数**：`query` = 地点关键词（中文直接填入，浏览器会自动处理编码） 3. **返回链接**：将生成的链接返回给用户 ## 示例 | 用户输入 | 提取关键词 | 生成链接 | |---------|-----------|---------| | 搜索天坛 | 天坛 | `https://ditu.amap.com/search?query=天坛` | | 搜索故宫 | 故宫 | `https://ditu.amap.com/search?query=故宫` | | 找西湖在哪 | 西湖 | `https://ditu.amap.com/search?query=西湖` | | 上海外滩怎么去 | 上海外滩 | `https://ditu.amap.com/search?query=上海外滩` | | 搜索北京南站 | 北京南站 | `https://ditu.amap.com/search?query=北京南站` | ## 回复模板 ``` 🗺️ 已为你生成高德地图搜索链接： https://ditu.amap.com/search?query={关键词} 点击链接即可在高德地图上查看「{关键词}」的位置信息。 ``` ## 注意事项 - 关键词应尽量精简准确，提取用户真正想搜索的地点名称 - URL 中的中文关键词浏览器会自动处理编码，无需手动 encode - 此 skill 无需任何 API Key，直接生成链接即可使用 - 如果用户同时提供了多个地点，为每个地点分别生成一条链接


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: chrischall/gogcli-mcp-sheets (version 2.3.0)

--- name: gogcli-mcp-sheets description: Use when the user asks to read, write, format, or manage Google Sheets. Triggers for requests involving spreadsheet data, cell formatting, tab management, named ranges, merging cells, freezing rows/columns, exporting spreadsheets, or any Sheets operation. Includes auth and Sheets tools only. --- # gogcli-mcp-sheets Extended Google Sheets MCP server via [gogcli](https://github.com/openclaw/gogcli) — 35 tools: auth + 8 base Sheets + 22 extra dedicated Sheets tools. - **Source:** [github.com/chrischall/gogcli-mcp](https://github.com/chrischall/gogcli-mcp) ## Requirements - [gogcli](https://github.com/openclaw/gogcli) installed and authenticated - Node.js 18 or later ## Setup ```json { "mcpServers": { "gogcli-sheets": { "command": "npx", "args": ["-y", "gogcli-mcp-sheets"], "env": { "GOG_ACCOUNT": "[REDACTED_SECRET]" } } } } ``` ## Extra Sheets Tools | Tool | What it does | |------|-------------| | `gog_sheets_add_tab` | Add a new sheet tab | | `gog_sheets_delete_tab` | Delete a sheet tab | | `gog_sheets_rename_tab` | Rename a sheet tab | | `gog_sheets_copy` | Copy a sheet to another spreadsheet | | `gog_sheets_export` | Export as CSV, TSV, XLSX, PDF | | `gog_sheets_freeze` | Freeze rows and/or columns | | `gog_sheets_insert` | Insert rows or columns | | `gog_sheets_merge` | Merge cells | | `gog_sheets_unmerge` | Unmerge cells | | `gog_sheets_format` | Apply cell formatting | | `gog_sheets_number_format` | Set number format | | `gog_sheets_read_format` | Read cell formatting | | `gog_sheets_resize_columns` | Resize column widths | | `gog_sheets_resize_rows` | Resize row heights | | `gog_sheets_notes` | Read cell notes | | `gog_sheets_update_note` | Add or update cell notes | | `gog_sheets_links` | List hyperlinks in a range | | `gog_sheets_named_ranges_list` | List named ranges | | `gog_sheets_named_ranges_get` | Get a named range | | `gog_sheets_named_ranges_add` | Create a named range | | `gog_sheets_named_ranges_update` | Update a named range | | `gog_sheets_named_ranges_delete` | Delete a named range | Plus 5 auth tools and 8 base Sheets tools.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: chgy123/okx-symbol-prices (version 1.0.0)

--- name: okx-symbol-prices description: Fetch specified crypto spot prices from OKX and present them in USD display. Use when the user asks to get OKX prices/quotes for specific symbols (e.g. BTC, ETH, SOL) or mentions OKX markets/top-cryptocurrency price list. --- # OKX Symbol Prices (USD display) ## What this skill does Gets **one-shot** spot prices for user-specified symbols from OKX, displayed with a `$` sign. For each symbol it prefers quote currency **USDT > USDC > USD**. ## How to run (Windows / PowerShell) From the workspace root, run: ```bash python ".openclaw/workspace/skills/okx-symbol-prices/scripts/okx_symbol_prices.py" --symbols BTC,ETH,SOL ``` Optional: - Increase timeout (seconds): ```bash python ".openclaw/workspace/skills/okx-symbol-prices/scripts/okx_symbol_prices.py" --symbols BTC,ETH,SOL --timeout 20 ``` - Output JSON (one object per symbol): ```bash python ".openclaw/workspace/skills/okx-symbol-prices/scripts/okx_symbol_prices.py" --symbols BTC,ETH,SOL --format json ``` ## Output conventions - Prints results in the **same order** as `--symbols`. - If a symbol has no `USDT/USDC/USD` spot ticker on OKX, prints `N/A`.

path: requirements.txt
content: requests>=2.31.0


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: apmzoom/apmzoom-products (version 1.0.2)

--- name: APM 상품 라이브러리 검색 API description: "APM 상품 라이브러리의 공개 검색 API 모음 (인증 불필요). 자연어 텍스트 검색과 이미지 유사도 검색을 지원하며, 벡터 임베딩 기반으로 유사 상품을 반환합니다. Lite 응답 포맷은 가격/재고/판매 필드를 제외하고 판매자명과 동대문 매장 층/호수 정보만 제공합니다. Base URL: https://worker.apmzoom.ai. 엔드포인트: POST /api/v1/products/search/by-text-lite, POST /api/v1/products/search/by-image-lite. 카테고리 필터(category_l1_id)와 의류 전용 임베딩 모델(fashion) 지원." version: 1.0.2 metadata: openclaw: homepage: https://github.com/apmzoom-ai/apm-skills --- # APM 상품 라이브러리 검색 API APM 상품 라이브러리의 공개 검색 API 모음 (인증 불필요). 자연어/이미지로 동대문 상품을 벡터 유사도 검색합니다. ## 공통 규약 - **Base URL**: `https://worker.apmzoom.ai` (Cloudflare Worker) - **인증**: 공개 인터페이스, 인증 헤더 불필요 (`is_public: true`) - **Method**: `POST` - **Content-Type**: `application/json` - **응답 포맷 (lite)**: 가격 / 재고 / 평점 / 판매량 필드 **미포함**. 판매자 정보는 `merchant_name`과 매장 층/호수(`layer_id`, `door_no`)만 유지 - **정렬**: 벡터 유사도(`score`) 내림차순 - **카테고리 필터**: `category_l1_id` (1차 카테고리) - **반환 개수**: `limit` (1-100, 기본 20) ## 엔드포인트 목록 (2개) - [`products_search_by_text_lite`](products_search_by_text_lite.md) — **텍스트 검색 - 간소화** · `POST https://worker.apmzoom.ai/api/v1/products/search/by-text-lite` - 자연어 쿼리(예: "검은색 패딩")를 `desc_embedding` 컬럼에 인코딩하여 검색 - [`products_search_by_image_lite`](products_search_by_image_lite.md) — **이미지 검색 - 간소화** · `POST https://worker.apmzoom.ai/api/v1/products/search/by-image-lite` - 이미지 URL 기반 유사 상품 검색 - `embedding` 옵션: `default` (image_embedding) 또는 `fashion` (image_embedding_fashion, 의류 전용) ## 호출 예시 ```bash # 텍스트 검색 curl -X POST https://worker.apmzoom.ai/api/v1/products/search/by-text-lite \ -H "Content-Type: application/json" \ -d '{"text":"검은색 패딩","limit":20,"category_l1_id":1}' # 이미지 검색 curl -X POST https://worker.apmzoom.ai/api/v1/products/search/by-image-lite \ -H "Content-Type: application/json" \ -d '{"image_url":"https://image.apmzoom.ai/products/main/158236.jpg","limit":20,"embedding":"fashion"}' ``` ## 사용 시나리오 - 에이전트가 사용자 발화("얇은 겉옷 추천")를 받아 텍스트 검색으로 후보 상품 목록 생성 - 업로드된 이미지로 동일/유사 상품 찾기 (스타일 매칭) - 가격·재고 정보가 불필요한 추천/탐색 시나리오에 최적화된 경량 응답 ## 관련 스킬 - 인증이 필요한 상품 관리 API: [`apmzoom-gds`](https://clawhub.ai/skills/apmzoom-gds) - 로그인/토큰 발급: [`apmzoom-ids`](https://clawhub.ai/skills/apmzoom-ids) 원본 문서: https://github.com/apmzoom-ai/apm-skills


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: zvirb/google-calendar-update-time (version 1.0.0)

--- name: Google Calendar Update Time description: Atomic node skill to exclusively update the start and end time of a Google Calendar event. os: all requires: bins: - gog --- ## Lean Philosophy (Principles) - **Kaizen (改善):** This skill is an atomic node, strictly limited to updating ONLY the start and end times of an event, preventing schema hallucination and ensuring single-responsibility. - **Standardized Work (Hyojun Sagyo):** This node represents the most efficient, standardized path for this specific task before automation. - **Jidoka (自働化):** This node includes autonomous defect detection. It relies on the CLI's self-healing loop and will report errors if the update fails. You MUST evaluate the output to ensure the time was updated correctly. # Google Calendar Update Time This skill allows the agent to update the start and end times of an existing event in Google Calendar using the native CLI. It does NOT update the title, location, or attendees. ## Cognitive Directives WHEN [The start or end time of an existing event needs to be modified or rescheduled] THEN [Execute the native terminal command `gog calendar update <calendarId> <eventId> --from "..." --to "..."`] ## Schema Example ```json { "command": "gog calendar update primary event_id_123 --from \"2026-04-28T10:00:00Z\" --to \"2026-04-28T11:00:00Z\" --json" } ``` ## Jidoka Validation Loop 1. Try: Execute the command. 2. Evaluate: Check the JSON response to confirm `start` and `end` times match the requested strings. 3. Correct/Fail: If it failed or hallucinated parameters, retry up to 3 times (max_retries=3) with the exact error. 4. Proceed: Return the final valid JSON. ## Expected Output A JSON object confirming the updated event details with the new start and end times.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: tobeyrebecca/toby-pptx (version 1.0.0)

--- name: "Pptx" description: "Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or..." homepage: "https://www.skillboss.co/skills/pptx" metadata: {"category":"content-creation","subcategory":"content-production","skill_id":"pptx","generated_day":"","seo_keywords":["pptx","pptx ai","pptx automation","content creation skill"]} --- # Pptx Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or... ## Use When Use this skill for automation work for content teams, creators, growth marketers. ## Workflow 1. Clarify the audience, business goal, constraints, and deliverable. 2. Produce the strongest first draft for the target use case. 3. Use the relevant SkillBoss capabilities to enrich assets or supporting data. 4. Refine the output for accuracy, readability, and actionability before delivery. ## SEO / GEO - Primary keywords: pptx, pptx ai, pptx automation, content creation skill - Search intent: automation - Canonical slug: `pptx` - Install query: Install Pptx with SkillBoss ## APIs Used - `chat` - `document_processing` - `presentation` - `email` - `social_media_data` - `web_scraping` ## Suggested Prompt Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch... ## Notes - Use this skill any time a .pptx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx file (even if the extracted content will be used elsewhere, like in an email or summary); editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates, layouts, speaker notes, or comments. Trigger whenever the user mentions \"deck,\" \"slides,\" \"presentation,\" or references a .pptx filename, regardless of what they plan to do with the content afterward. If a .pptx file needs to be opened, created, or touched, use this skill. - Review outputs before external publication or automated execution. ## SEO Keywords - pptx - pptx ai - pptx automation - content creation skill


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: peand-rover/air-duct-cleaning-video (version 1.0.0)

name: air-duct-cleaning-video version: "1.0.0" displayName: "Air Duct Cleaning Video — Before and After Marketing Videos for HVAC Duct Cleaning and Indoor Air Quality Services" description: > You are a video assistant for air duct cleaning companies, HVAC maintenance services, and indoor air quality specialists — helping technicians make the invisible visible and show customers exactly what is living inside their ductwork. Dust buildup, pet dander, mold growth, debris accumulation, and restricted airflow: Air Duct Cleaning Video turns your most revealing inspection footage into short educational clips that create an immediate sense of urgency in homeowners who haven't thought about their ducts in years. Help air duct cleaners convert skeptical homeowners by showing the before-and-after of a full system cleaning. Camera inspection videos feeding a scope through ductwork and revealing the actual condition of the interior turn abstract health claims into undeniable visual evidence — the footage speaks for itself in a way that no brochure ever could. Cleaning process videos showing the truck-mounted vacuum, the agitation brush running through flex duct, and the final post-cleaning camera pass document your thoroughness for customers who are paying for work they cannot directly supervise. Dryer vent cleaning videos showing lint accumulation removal position your service as fire prevention, not just maintenance. IAQ testing videos measuring particulate levels before and after a full duct cleaning quantify the improvement in a metric that resonates with parents, allergy sufferers, and anyone who has recently had a respiratory illness. tags: - air duct cleaning video - duct cleaning marketing - HVAC cleaning video - indoor air quality - dryer vent cleaning - duct inspection video - before after duct cleaning


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)