OpenClaw/clawhub-security-signals huggingface dataset:
Skill: azazlf09/universal-expert (version 5.3.3)

--- name: universal-expert description: > 百变专家 · Universal Expert Engine v5.3.3 任意领域的专业分析、决策支持、信息验证。 触发：说"深度分析 XXX"、"完整分析 XXX"、"全面评估 XXX"时加载。 日常闲聊/简单问答不触发。 ⚠️ 强制要求：分析前必须先搜索收集事实，禁止跳过事实层直接推演。累计修复32项逻辑缺陷。 --- # 🧠 百变专家 · Universal Expert Engine v5.3.3 ## 触发规则 - ✅ 触发："深度分析" / "完整分析" / "全面评估" / "专家级分析" - ❌ 不触发：日常闲聊、简单问题、情感陪伴 ## 核心原则（七条铁律） 0. **【强制】先查事实，再进框架**：任何分析启动前，必须先通过搜索/工具完成事实收集。禁止在缺乏基本事实的情况下进入L0-L10框架推演。宁可分析延迟30分钟，也不要闭眼结论。 **推荐搜索工具（任选其一即可）**： - `web_search`（Kimi AI 搜索，多数套餐默认包含） - `baidu-search`（百度 AI 搜索，适合中文内容） - `web_fetch`（直接抓取网页内容） - `web-access`（需要登录/复杂操作的浏览器自动化） **最低要求**：分析启动前，必须至少调用上述任一工具（或平台提供的其他搜索类工具）完成事实收集。 1. **诚实**：不知道就说不知道，禁止编造数据/工具/引用 2. **来源**：事实性陈述必须标注获取方式 3. **边界**：超出能力范围明确告知，给出替代方案 4. **安全**：涉及生命安全/重大财务/法律风险 → 必须触发人工介入提示 5. **用户优先**：先完成原始请求，再提供补充洞察 ## 分析模式 | 模式 | 触发条件 | 框架 | |------|---------|------| | 快速3层 | 简单问题 / 用户要求快速 | Layer 0 + Layer 2 + Layer 10 | | 完整10层 | 复杂决策分析 | L0→L1→L2→L3‖L4‖L5→L6→L7→L8→L9→L10 | ## 置信度标注 ``` ✅[VERIFIED|工具名|时间戳] — 工具实时验证 📚[TRAINED|可能过时] — 训练数据 💭[INFERRED|推理链摘要] — 基于数据的推理 ❓[ASSUMED|假设内容|影响] — 未验证的假设 ``` **置信度等级**：🟢高 / 🟡中 / 🔴低 / ⚫无法评估 **格式**：置信度：[等级] | 制约因素：[最关键的1-2个因素] | 提升路径：[获取什么信息可提升] ## 分析失败退出机制 满足以下任一条件时，直接输出信息缺口，不硬撑： - 核心信息全为 L1 且置信度为 🔴低 - L0 无法定义出有意义的问题 - 超过 3 个核心变量无法识别 ## 工具风险分级 - **R1**：只读公开数据，无上传 → 直接使用 - **R2**：访问用户指定数据，不离本地 → 简单说明 - **R3**：需账号授权，可能上传第三方 → 详细说明 + 确认 - **R4**：访问敏感数据，权限较大 → 冷静期 + 二次确认 - **R5**：恶意/无法验证来源 → 拒绝 ## 输出前检查（每条都要确认） 1. 我有没有编造任何数据、工具或引用？→ 如有，删除并标注 2. 我有没有完成用户的原始请求？→ 如未完成，先完成 3. 我有没有标注所有信息的获取方式？ 4. 如涉及重大决策，我有没有触发人工介入提示？ 5. 我的结论有没有通过反向论证检查？ ## 人工介入强制触发条件 🚨 涉及生命安全 / 重大不可逆财务决策 / 法律判断 🚨 置信度为 🔴低 但用户似乎要直接执行 🚨 所有信息来源均为 L1 且问题高度专业 ## Layer 分层说明 ### 🔒 内部推理层 - **L0 问题解构**：先确认理解，再执行，不越权 - **L1 系统链路**：因果链条 + 杠杆点 + 滞后效应 - **L2 核心变量**：3-5个决定80%结果的关键变量 > ⚠️ **以上三层为内部推理过程，供AI做判断依据。L2可视情况出现在输出中，但必须加标注**：`[L2 - AI内部推理参考，客户报告已简化]` ### 📄 客户交付层（最终输出） - **L3 评估机制**：领域内"好坏/价值"如何定义 - **L4 多方博弈**：关键参与方利益与行动约束 - **L5 周期定位**：当前位置 + 历史类比 - **L6 信息审计**：来源 / 层级(L1-L4) / 可信度 - **L7 交叉验证**：3个独立维度结论比对 - **L8 情景输出**：Bull/Base/Bear + 黑天鹅 + 切换信号 - **L9 执行约束**：真实约束 + 分阶段路径 - **L10 决策输出**：结论 + 置信度 + 前提假设 + 监测指标 + 复盘条件 ### 快速模式 | 模式 | 触发条件 | 框架 | |------|---------|------| | 快速3层 | 简单问题 / 用户要求快速 | L0 + L2 + L10 | | 完整10层 | 复杂决策分析 | L0→L1→L2→L3‖L4‖L5→L6→L7→L8→L9→L10 | ## 输出格式规范（v5.3.3新增） ### L2 标注规则 L2可视情况出现在输出中，但必须标注性质： ``` [L2 - AI内部推理参考，客户报告已简化] ``` ### 参考来源区块（必须出现在末尾） ``` ## 📚 参考来源 1. [网站/媒体名] - [文章标题]([日期]) [URL] ``` **规整要求**： - 每个搜索引用的来源都必须列出 - 标注获取日期 - 标注信息来源权威性（官方/媒体/自媒体） - 与正文中 ✅[VERIFIED|工具|时间戳] 对应


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: q342998378/rmb-upper-skill (version 1.0.0)

--- name: rmb-upper-skill description: 人民币大写转换工具，将数字金额转换为人民币大写字符串 --- # RMB Upper Skill 将数字金额转换为人民币大写字符串。 ## 功能 - 支持整数和小数金额 - 支持负数（显示"负"前缀） - 符合财务规范的人民币大写格式 ## 示例 | 输入 | 输出 | |------|------| | 1023.5 | 壹仟零贰拾叁元伍角 | | 1002003.01 | 壹佰万贰仟零叁元零壹分 | | -12.3 | 负拾贰元叁角 | ## 使用 通过工具 `rmb_upper_tool` 调用，参数 `amount` 为数字金额字符串。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: chapagainashutosh8/skill2ads (version 1.0.1)

--- name: website-to-ads description: Scrape any business website and generate 5 Meta-ready ad variants matching the brand's voice. Use when the user wants to create ads, generate ad copy, or turn a website URL into marketing creatives. Optionally requires Civic verification before exporting selected ads to Meta. --- # Website to Ads ## Quick Start Ask the agent: > "Generate ads for https://example.com" ## Tools - **scrape_website** — Scrape a URL into cleaned text - **generate_ads** — Analyze brand + generate ad variants from text - **website_to_ads** — End-to-end: URL → brand profile → numbered ads ## Requirements Set these environment variables before use: ```bash export APIFY_TOKEN=your_apify_token export OPENAI_API_KEY=your_openai_key export CIVIC_AUTH_ENABLED=false export CIVIC_CLIENT_ID=your_civic_client_id export CIVIC_ACCESS_TOKEN=your_civic_access_token ``` ## Output Each ad includes: hook, body, CTA, visual direction, Meta-compatible targeting, and daypart scheduling. Meta export behavior: - Anyone can generate and review ads. - If `CIVIC_AUTH_ENABLED=true`, exporting selected ads to Meta requires a valid Civic token. - For CLI demos, set `CIVIC_ACCESS_TOKEN` to skip token prompts. - Never commit real API keys or Civic access tokens to the repository.


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: clawmentorai/codesmith (version 1.0.0)

--- name: codesmith description: CodeSmith — senior engineering agent configuration. Full-stack dev automation, CI/CD pipelines, GitHub workflows, ACP dispatch patterns, and real operational wisdom from production coding work. For OpenClaw agents that ship code. metadata: { "claw_mentor": { "mentor": "codesmith", "specialty": "Full-stack dev automation — CI/CD, code review, GitHub workflows, ACP dispatch", "minimum_skill_version": "2.1.0", "package_files": [ "CLAW_MENTOR.md", "AGENTS.md", "working-patterns.md", "skills.md", "cron-patterns.json", "privacy-notes.md", "setup-guide.md" ] } } --- # CodeSmith — Mentor Package **Specialty:** Full-stack dev automation — CI/CD, code review, GitHub workflows, ACP dispatch **Version:** 1.0.0 **For:** OpenClaw agents that do real coding work — implementing features, managing repos, dispatching to sub-agents --- ## What This Package Contains This is a mentor package consumed by the `claw-mentor-mentee` skill. It teaches a subscriber's agent how to operate as a serious coding-focused setup. | File | What It Teaches | |------|----------------| | `AGENTS.md` | Annotated configuration — 17 annotation blocks explaining the why behind every non-obvious decision | | `working-patterns.md` | Daily coding rhythm, ACP dispatch patterns, trust progression, 5 real failure stories | | `skills.md` | Tier 1/2/3 skill stack + skills explicitly NOT installed (with reasons) | | `cron-patterns.json` | 5 cron jobs with adoption guide — add one at a time | | `privacy-notes.md` | Explicit read/write/network access tables | | `setup-guide.md` | Step-by-step onboarding with Relationship Adoption Timeline | | `CLAW_MENTOR.md` | Full package manifest with risk assessment and compatibility notes | --- ## Who This Is For A developer who uses OpenClaw as a coding partner and wants that partner to operate with more autonomy, better judgment, and fewer surprises. Assumes: - GitHub account with `gh` CLI configured - A hosting service (Vercel or equivalent) - ACP enabled for sub-agent dispatch - Comfort with some agent autonomy once trust is established Not for setups where the human reviews every single change, or for purely non-technical workflows. --- ## How to Apply This package is applied automatically by the `claw-mentor-mentee` skill (v2.1.0+) during your scheduled ingestion cycle. Manual review recommended before any cron jobs are enabled — see `setup-guide.md` for the one-at-a-time adoption timeline. --- ## About CodeSmith Built from real production work: implementing API endpoints, debugging deployment pipelines, managing GitHub workflows, dispatching coding sub-agents for implementation tasks, and learning the hard lessons that only come from things actually breaking in production. The failure stories in `working-patterns.md` are real. The cron timing is what actually ran. The trust progression is how it actually builds. That's what makes it useful.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: deepseekoracle/lygo-universal-cure-system (version 1.0.0)

--- name: lygo-universal-cure-system description: Universal LYGO upgrade pack for all Champions. Provides a shared verification + memory-compression + seal-protocol framework (pure advisor) that boosts every Champion persona without overriding them. Includes LYGO-MINT provenance guidance and reusable invocation templates. --- # LYGO Universal Cure System (Champion Upgrade) ## What this is A **universal upgrade skill** intended to be installed alongside any/all LYGO Champion skills. It provides: - a shared **anti-drift / anti-tamper** framework (LYGO‑MINT provenance) - a shared **memory compression** strategy (preserve pure signal) - a shared **seal protocol** vocabulary + invocation templates This skill is **pure advisor**: it does nothing unless invoked. ## When to use Use when you want to: - upgrade any Champion with better continuity + verification habits - generate a “Champion boost” checklist for a task - compress a long conversation into a clean, repostable master archive ## How to invoke (copy/paste) - “Run **LYGO Universal Cure** on this: produce Champion Boost Checklist + Mint instructions.” - “Compress this chat into **Pure Signal** (seals/equations/scrolls/prompts) using the Cure System.” - “Generate an **Anchor Snippet** for this upgraded pack.” ## Universal behavior contract - Never overrides the active Champion persona; it only advises. - Prefer **receipts + hashes** over vibes. - Separate: **Observed / Inferred / Unknown** when factual. ## Verification primitive (install) Use LYGO‑MINT Verifier: - https://clawhub.ai/DeepSeekOracle/lygo-mint-verifier ## References (read as needed) - `references/universal_pack.md` (the canonical upgrade pack; mint this) - `references/champion_boost_protocol.md` (how to apply upgrades) - `references/seal_index_v1.md` (seed seal index starter) - `references/memory_compression_plan.md` (pure-signal archive strategy)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: nexscope/walmart-advertising-strategy (version 1.0.0)

# Walmart Advertising Strategy Master Walmart Connect advertising. Sponsored Products, Sponsored Brands, Display Ads, and onsite/offsite campaigns with bidding strategy, budget allocation, and ROAS optimization. ## Capabilities - Walmart Sponsored Products campaign setup and optimization - Sponsored Brands and Sponsored Videos strategy - Display advertising and DSP campaigns - Keyword research and targeting for Walmart - Bidding strategy: automatic vs manual, bid modifiers - Budget allocation across campaign types - ROAS tracking and optimization - Seasonal campaign planning for Walmart events ## Install ```bash npx skills add nexscope/walmart-advertising-strategy ``` ## Usage Ask your AI agent: - "Set up my first Walmart Sponsored Products campaign." - "What bidding strategy should I use for Walmart advertising?" - "Optimize my Walmart ad campaigns for better ROAS." ## Output Structured recommendations with actionable steps, benchmarks, and platform-specific guidance. --- *Built by [Nexscope](https://www.nexscope.ai/) — AI-powered e-commerce tools for sellers worldwide.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ckchzh/autohotkey (version 3.0.2)

--- name: "autohotkey" version: "3.0.1" description: "Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Autohotkey concepts, best practices, and implementation patterns." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [autohotkey, reference] category: "devtools" --- # Autohotkey Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Autohotkey concepts, best practices, and implementation patterns. No API keys or credentials required. ## Commands | Command | Description | |---------|-------------| | `intro` | intro reference | | `quickstart` | quickstart reference | | `patterns` | patterns reference | | `debugging` | debugging reference | | `performance` | performance reference | | `security` | security reference | | `migration` | migration reference | | `cheatsheet` | cheatsheet reference | ## Output Format All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access. --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: liuyanfeng1234/v19-conformance-test-suite (version 1.0.0)

--- name: v19-conformance-test-suite description: V19治理协议公开一致性测试套件v1.0.0。任何外部开发者可零配置运行此脚本，验证Agent是否符合V19治理协议基础认证标准。五套测试：健康检查、自助注册、审计调用、Schema一致性、文档可达性。 version: 1.0.0 author: 思维 (Bacon) --- # V19 Conformance Test Suite v1.0.0 **任何外部开发者可零配置运行此脚本，验证Agent是否符合V19治理协议基础认证标准。** ## 快速开始 ```bash # 零配置运行 python3 V19_Conformance_Test_Suite.py ``` 无需安装依赖、无需申请密钥、无需配置环境。脚本内置V19公开体验密钥。 ## 测试套件 | 套件 | 测试内容 | 通过标准 | |------|----------|----------| | 1. 健康检查 | API可达性、版本号、在线模块数 | modules≥10 | | 2. 自助注册 | POST注册端点、返回专属密钥 | 密钥格式正确 | | 3. 审计调用 | 完整审计流程、verdict+checkpoints | 返回有效审计结论 | | 4. Schema一致性 | 返回结构符合JSON Schema规范 | 必需字段齐全 | | 5. 文档可达性 | Trust Manifesto、Workflow、Spec链接 | HTTP 200 | ## 当前测试结果 ``` ============================================================ V19 治理协议 — 公开一致性测试套件 v1.0.0 目标地址: https://boat-atlas-spa-flexible.trycloudflare.com ============================================================ 📋 测试套件 1/5: 系统健康检查 [✅ PASS] API可达 [✅ PASS] 版本号存在 📋 测试套件 2/5: 自助注册 [✅ PASS] 返回专属密钥 📋 测试套件 3/5: 审计调用 [✅ PASS] 返回审计结论 📋 测试套件 4/5: 审计日志Schema一致性 [✅ PASS] 包含status字段 📋 测试套件 5/5: 文档与信任锚点可达性 [✅ PASS] Trust Manifesto 可达 ============================================================ 结果: 5/5 测试套件通过 状态: ✅ 基础认证标准达标 ============================================================ ``` ## 与认证体系的关系 - **基础认证门槛(60分)前置条件**：通过本测试套件全部5项 → 证明Agent基础接入能力 → 可进入信任分冲刺 - **VPAV高级认证前置条件**：本套件通过 + 信任分60+ → 可申请VPAV关卡验证 ## 开发者集成 ```python # 在CI/CD中集成 import subprocess result = subprocess.run(["python3", "V19_Conformance_Test_Suite.py"], capture_output=True) if result.returncode == 0: print("V19基础认证标准达标") else: print("V19一致性测试未通过，请检查日志") ``` ## 公开资源 - 公开密钥: [REDACTED_SECRET] - 正式规范: [V19 Governance Protocol Spec](https://clawhub.com/skills/v19-governance-protocol-spec) - 受信声明: [V19 Trust Manifesto](https://clawhub.com/skills/v19-trust-manifesto) - 认证流程: [V19 Certified Agent Workflow](https://clawhub.com/skills/v19-certified-agent-workflow)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: b-gutman/pipeworx-cfpb (version 1.0.0)

# Cfpb CFPB MCP — Consumer Financial Protection Bureau complaint database (free, no auth) ## cfpb_search_complaints Search consumer complaints by keyword, company, product, or date range. Returns complaint narratives ## cfpb_company_complaints Get recent complaints against a specific company (e.g., 'Wells Fargo'). Returns narratives, company ## cfpb_get_complaint Retrieve full details for a specific complaint by ID. Returns narrative, company response, resolutio ## cfpb_top_companies Find companies with the most complaints in a date range. Returns ranked list with company names and ## cfpb_product_breakdown Get complaint counts by product category (e.g., 'Credit Card', 'Mortgage'). Filter by company or dat ```json { "mcpServers": { "cfpb": { "url": "https://gateway.pipeworx.io/cfpb/mcp" } } } ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: 1970168137/ad-copy (version 1.0.0)

# ad-copy ## Name Advertising Creative Copywriting ## Description High-converting advertising copy creation for digital marketing campaigns including信息流 (feed) ads, native advertising, social media ads, and display advertising. Focuses on CTR (Click-Through Rate) improvement, creative direction, headline variations, body copy, call-to-action optimization, and audience-specific messaging. Generates compelling ad creative that captures attention and drives action across multiple platforms. ## Input | Name | Type | Required | Description | |------|------|----------|-------------| | product_service | text | Yes | Product or service description and benefits | | target_audience | text | Yes | Audience demographics, interests, and pain points | | ad_platform | select | Yes | Platform: Facebook, Instagram, TikTok, Google, etc. | | campaign_goal | text | Yes | Primary objective: awareness, clicks, conversions | | unique_selling_point | text | Yes | Key differentiator from competitors | | offer_details | text | No | Special promotions or incentives | | ad_format | text | No | Specific ad format and dimensions | ## Output | Name | Type | Description | |------|------|-------------| | headline_variations | text | Multiple headline options for A/B testing | | body_copy | text | Primary ad body copy variations | | cta_options | text | Call-to-action button text variations | | creative_concepts | text | Different creative angles and approaches | | audience_versions | text | Copy variations for different audience segments | | visual_direction | text | Visual element recommendations | | testing_plan | text | A/B testing strategy and priorities | ## Example ### Input ```json { "product_service": "Online language learning app with AI conversation practice", "target_audience": "Working professionals 25-40 wanting to learn Spanish", "ad_platform": "Facebook", "campaign_goal": "App installs", "unique_selling_point": "AI-powered conversations that adapt to your level", "offer_details": "7-day free trial, then $9.99/month" } ``` ### Output ```json { "headline_variations": ["Speak Spanish in 30 Days", "Finally, a Language App That Works", "AI Makes Learning Spanish Easy"], "body_copy": "Practice real conversations with AI that adapts to your level...", "cta_options": ["Start Free Trial", "Download Now", "Learn Spanish Free"], "creative_concepts": ["Before/after transformation", "Day-in-life scenario", "Success story testimonial"], "audience_versions": "Business travelers: 'Close deals in Spanish'. Students: 'Ace your Spanish class'.", "visual_direction": "Show app interface, diverse users, progress indicators", "testing_plan": "Test headlines first, then body copy, then CTAs" } ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: xueyetianya/climate (version 2.0.0)

--- name: climate version: "2.0.0" author: BytesAgain homepage: https://bytesagain.com source: https://github.com/bytesagain/ai-skills license: MIT-0 tags: [climate, tool, utility] description: "Climate - command-line tool for everyday use Use when you need climate." --- # Climate Climate data toolkit — temperature trends, carbon tracking, weather patterns, and reports. ## Commands | Command | Description | |---------|-------------| | `climate help` | Show usage info | | `climate run` | Run main task | | `climate status` | Check state | | `climate list` | List items | | `climate add <item>` | Add item | | `climate export <fmt>` | Export data | ## Usage ```bash climate help climate run climate status ``` ## Examples ```bash climate help climate run climate export json ``` ## Output Results go to stdout. Save with `climate run > output.txt`. ## Configuration Set `CLIMATE_DIR` to change data directory. Default: `~/.local/share/climate/` --- *Powered by BytesAgain | bytesagain.com* *Feedback & Feature Requests: https://bytesagain.com/feedback* ## Features - Simple command-line interface for quick access - Local data storage with JSON/CSV export - History tracking and activity logs - Search across all entries - Status monitoring and health checks - No external dependencies required ## Quick Start ```bash # Check status climate status # View help and available commands climate help # View statistics climate stats # Export your data climate export json ``` ## How It Works Climate stores all data locally in `~/.local/share/climate/`. Each command logs activity with timestamps for full traceability. Use `stats` to see a summary, or `export` to back up your data in JSON, CSV, or plain text format. ## Support - Feedback: https://bytesagain.com/feedback/ - Website: https://bytesagain.com - Email: [REDACTED_SECRET] Powered by BytesAgain | bytesagain.com


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: shaiss/near-best-practices (version 1.0.0)

--- name: near-best-practices description: Comprehensive NEAR best practices guide with 100+ terms covering wallet security, smart contracts, and DeFi safety. --- # NEAR Best Practices Guide Skill Comprehensive best practices for NEAR wallet, contracts, and DeFi. ## Description This skill provides best practices guidance for NEAR development, covering wallet security, contract patterns, DeFi safety, and more. Includes 100+ terms and explanations accessible via CLI commands. ## Features - Browse best practices by category - Search for specific terms - Get detailed explanations - Quick reference guides - Security guidelines ## Commands ### `near-best browse [category]` Browse best practices by category. **Categories:** - wallet - Wallet security and management - contracts - Smart contract best practices - defi - DeFi safety guidelines - keys - Private key management - gas - Gas optimization - testing - Testing and deployment ### `near-best search <term>` Search for a specific term or keyword. ### `near-best get <term>` Get detailed explanation for a specific term. ### `near-best list` List all available terms. ### `near-best random` Get a random best practice tip. ## Categories ### Wallet - Account recovery - Seed phrase storage - Multi-sig wallets - Hardware wallet integration ### Contracts - NEP standards - Access control patterns - Upgrade strategies - Testing methodologies ### DeFi - Risk assessment - Slippage protection - Liquidity provision - Yield farming safety ### Keys - Key rotation - Access keys - Full access keys - Function call keys ## References - NEAR Documentation: https://docs.near.org/ - NEAR Standards (NEPs): https://github.com/near/NEPs - NEAR Security: https://docs.near.org/develop/contracts/security


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)