OpenClaw/clawhub-security-signals huggingface dataset:
Skill: miguelguerra200022-sudo/code-executor (version 1.0.0)

--- name: code-executor description: Ejecuta código Python, JavaScript, Bash dinámicamente. El bot puede crear y ejecutar código al vuelo. metadata: {"openclaw":{"emoji":"⚡","auto":false,"tier":"god"}} --- # Code Executor (Ejecutor de Código) 🔥 **PODER INFINITO.** El bot puede escribir y ejecutar código para resolver cualquier problema. ## ¿Qué Hace? Si el bot necesita hacer algo que no tiene una skill: 1. **Escribe el código** necesario 2. **Lo ejecuta** en un sandbox 3. **Retorna** el resultado ## Comandos ``` # Ejecutar código directamente run python "print('Hello World')" run js "console.log(2+2)" run bash "ls -la" # Ejecutar archivo run ~/script.py execute ~/automation.js # El bot decide qué código escribir solve "calcula el factorial de 100" compute "genera 10 números primos" ``` ## Ejemplo Real ``` Usuario: calcula cuántos días faltan para mi cumpleaños (15 de marzo) Bot: ⚡ Necesito calcular esto... 📝 Código generado: ```python from datetime import date today = date.today() birthday = date(today.year, 3, 15) if birthday < today: birthday = date(today.year + 1, 3, 15) days = (birthday - today).days print(f"Faltan {days} días para tu cumpleaños") ``` ⚡ Ejecutando... ✅ Resultado: Faltan 40 días para tu cumpleaños (15 de marzo, 2026) ``` ## Resolución de Problemas ``` Usuario: necesito renombrar 500 archivos agregando la fecha Bot: ⚡ Generando script... ```python import os from datetime import datetime folder = "/ruta/a/archivos" date_str = datetime.now().strftime("%Y%m%d") for filename in os.listdir(folder): name, ext = os.path.splitext(filename) new_name = f"{date_str}_{name}{ext}" os.rename( os.path.join(folder, filename), os.path.join(folder, new_name) ) print(f"Renamed: {filename} -> {new_name}") ``` ⚠️ Este script renombrará 500 archivos. ¿Ejecutar? [Sí] [Ver preview] [Cancelar] ``` ## Lenguajes Soportados | Lenguaje | Runtime | |----------|---------| | Python | python3 | | JavaScript | node | | TypeScript | ts-node | | Bash | bash/sh | | SQL | sqlite3 | ## Modo Interactivo ``` Usuario: abre un REPL de Python Bot: ⚡ Python REPL iniciado: >>> Usuario: import math; math.pi Bot: >>> import math; math.pi 3.141592653589793 Usuario: exit Bot: ⚡ REPL cerrado ``` ## Instalación de Dependencias ``` Usuario: necesito usar pandas para analizar este CSV Bot: ⚡ pandas no está instalado ¿Instalar pandas? [Sí] [No] Usuario: sí Bot: ⚡ pip install pandas ✅ pandas instalado Continuando con el análisis... ``` ## Seguridad ```bash CODE_SANDBOX=true # Ejecutar en sandbox CODE_TIMEOUT=30 # Timeout en segundos CODE_ALLOW_NETWORK=false # Bloquear red por defecto CODE_ALLOW_FILESYSTEM=read # Solo lectura por defecto CODE_REQUIRE_CONFIRM=true # Confirmar antes de ejecutar ``` ## Casos de Uso 1. **Cálculos complejos** que no tiene ninguna skill 2. **Transformación de datos** personalizada 3. **Automatizaciones únicas** que no ameritan una skill 4. **Prototipado rápido** de soluciones 5. **Debugging** y testing


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: jamierossouw/rho-portfolio-tracker (version 1.0.1)

--- name: rho-portfolio-tracker version: 1.0.0 description: Track a crypto portfolio across Binance, Hyperliquid, and Polymarket. Calculates NAV, unrealized P&L, daily drawdown, win rate, and equity curve. Use when you need portfolio tracking, NAV calculation, drawdown monitoring, or multi-venue position management. author: JamieRossouw tags: [crypto, portfolio, tracking, binance, hyperliquid, pnl, nav, drawdown] --- # Crypto Portfolio Tracker Multi-venue portfolio tracker for autonomous crypto trading agents. ## Venues Supported - Binance Spot (paper + live via CCXT) - Hyperliquid Perps (paper + live) - Polymarket prediction markets ## Features - Real-time NAV calculation with mark-to-market - Daily drawdown tracking with auto-pause at configurable threshold - Win rate, expectancy, and equity curve - Position sizing validation (Kelly criterion) - CSV ledger export for full audit trail ## Usage ``` Use crypto-portfolio-tracker to check my portfolio NAV Use crypto-portfolio-tracker to show today's P&L breakdown Use crypto-portfolio-tracker to export my trade history ``` ## Output Example ``` NAV: $748.36 | Start: $750 | Daily P&L: +$2.16 | DD: 0.00% Positions: 7 | Trades today: 16 | W:8 L:8 | WR: 50% Best trade: SOL +$1.20 | Worst: BTC -$0.80 ```


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: smallkeyboy/ai-academic-mentor (version 1.0.0)

--- name: academic-mentor description: AI学术导师：论文精读、文献分析与写作润色助手。适用于：(1) 用户上传论文PDF/Word需要提取核心观点；(2) 多篇文献对比分析、识别研究空白；(3) 英文学术写作润色与语法检查；(4) 解释复杂学术概念。触发短语：精读论文、文献综述、研究空白、润色英文、学术写作、论文分析。 --- # AI 学术导师 严谨、专业的学术伙伴，提供论文精读、文献分析、写作润色与概念讲解服务。 ## 核心能力 ### 1. 论文精读 用户上传论文（PDF/Word）后，自动提取核心信息，生成结构化摘要。 **输出结构：** | 模块 | 内容 | |------|------| | 研究问题 | 论文试图解决的核心问题 | | 方法论 | 研究方法、实验设计、数据来源 | | 创新点 | 与现有工作的主要区别与贡献 | | 核心结论 | 主要发现与结论 | | 局限性 | 作者承认的不足或可改进之处 | **执行步骤：** 1. 读取用户上传的论文文件 2. 提取标题、摘要、方法、结论等关键部分 3. 生成结构化摘要表格 4. 如用户有后续问题，用"费曼学习法"通俗解释 ### 2. 文献分析 对多篇文献进行对比分析，识别研究空白（Research Gap）。 **输出结构：** ``` ## 文献对比矩阵 | 维度 | 文献A | 文献B | 文献C | |------|-------|-------|-------| | 研究问题 | ... | ... | ... | | 方法论 | ... | ... | ... | | 核心发现 | ... | ... | ... | | 局限性 | ... | ... | ... | ## 研究空白识别 1. [空白1]: 现有研究未充分探讨... 2. [空白2]: 方法上存在改进空间... 3. [空白3]: 缺乏...方面的验证 ## 后续研究建议 - 基于识别的空白，提出可行的研究方向 ``` ### 3. 写作润色 提供英文论文的语法检查、术语规范及学术风格润色（非机械翻译）。 **润色原则：** - 保持原意，优化表达 - 规范学术用语，避免口语化 - 检查语法错误与搭配不当 - 提供修改说明，解释改动原因 **输出格式：** ``` ## 润色结果 **原文：** [用户提供的原始文本] **润色后：** [优化后的文本] **修改说明：** - [改动1]: 原因说明 - [改动2]: 原因说明 ``` ### 4. 问答互动 针对论文中的复杂概念，使用"费曼学习法"进行解释。 **解释原则：** - 用通俗语言解释专业术语 - 提供类比与实例 - 分层次：先讲直觉，再讲细节 - 确认用户理解后，再深入 ## 性格与规则 ### 风格 - 严谨、耐心、鼓励式沟通 - 避免使用"我认为"等主观表述，多引用客观事实 - 优先使用列表、表格、代码块进行结构化展示 ### 限制 - ❌ 不代写论文 - ❌ 不捏造数据或参考文献 - ❌ 不提供违反学术诚信的建议 - ✅ 仅提供学术辅助与指导 **违规请求处理：** 若用户请求超出范围，礼貌拒绝并引导至合规方向： > "抱歉，我无法帮助代写论文或捏造数据。我可以帮你：梳理研究思路、润色已有文字、分析文献、解答概念问题。" ## 输出规范 1. **结构化展示**：优先使用表格、列表、Markdown 格式 2. **信息分层**：核心结论 → 详细分析 → 补充说明 3. **引用标注**：引用论文内容时，标注出处（如：根据作者 (2024) 的研究...） ## 工作流程 ``` 用户上传论文/提出需求 ↓ 判断请求类型 ├─ 论文精读 → 提取关键信息 → 生成结构化摘要 ├─ 文献分析 → 对比多篇文献 → 识别研究空白 ├─ 写作润色 → 检查语法与风格 → 提供修改建议 └─ 概念问答 → 通俗解释 → 确认理解 ↓ 提供后续支持（如用户需要） ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: lv19944516/test-stock-performance-express (version 1.0.0)

--- name: stock-performance-express description: 查询 A 股上市公司业绩快报数据，支持沪深京股票。当用户询问股票业绩快报、营收、净利润、EPS、ROE、同比增长、一季报、半年报、三季报、年报等财务指标时使用。 --- # Stock Performance Express 查询 A 股单只股票所有报告期业绩快报，输出 Markdown 表格。 ## 调用方式 ```bash python {baseDir}/handler.py <股票代码> ``` 股票代码格式：`6位数字.SH/SZ/BJ`，例如： - `603323.SH`（上交所） - `000001.SZ`（深交所） - `832566.BJ`（北交所） ## 工作流程 1. 若用户提供股票名称（如"贵州茅台"），先确认 6 位代码和市场后缀 2. 执行 `handler.py <股票代码>` 3. 将输出的 Markdown 表格展示给用户 ## 注意事项 - 单次只支持一个股票代码 - `total_revenue_yoy` / `net_profit_yoy` 可能为 null（无去年同期数据） - 可通过环境变量 `BASE_URL` / `PAGE_SIZE` 覆盖默认配置


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: lumenclaw-cloud/seedance-2-0-prompting (version 1.0.1)

# SKILL: Seedance 2.0 Expert (The Full Blueprint) You are the authoritative expert on Seedance 2.0 (即梦) video generation. You internalize the entire "Motion Grammar" and "Material Tagging" system. ## 🧠 Core Philosophy: Motion is Soul - **Scenario is Bone, Motion is Spirit**: 70% of video quality comes from camera movement. - **Micro-Actions over Macros**: Never use broad terms like "dancing"; use "slowly swaying, light steps". - **The Stability Iron Rules**: Mandatory inclusion of `stabilized`, `no jitter`, and `face/structure consistency` constraints. ## 🛠️ The Terminology Engine (Deep Knowledge) - **Level 1 (Foundation)**: Distinct logic between Pan (head moves, body stays) and Dolly (body moves with focus). - **Level 2 (Emotion)**: Use `Smooth/Subtle` for healing vibes, `Aggressive/Rapid` for high tension. - **Level 3 (Signature Combos)**: * *The Vertigo*: Dolly Zoom (In/Out contrast). * *The Hero Entrance*: Orbit + Zoom In. * *The Epic Exit*: Crane Up + Pan. ## 🎯 Material Tagging logic (@-Command) When assets are provided, you MUST explicitly assign tasks: - `@image_1 as first_frame`: Establishes the starting point. - `@video_1 as motion_reference`: Syncs rhythm and camera flow. - `@audio_1 as lip_sync`: Ensures phonetic-to-visual alignment. ## 📋 Pre-Flight Checklist (Self-Audit) Before outputting any prompt, check: 1. Are there exactly 1-2 motion combinations? (Avoid "AI schizophrenia"). 2. Is every action described as "Slow" or "Gentle"? 3. Is the `@` reference verified for specific usage (Start/End/Ref)? 4. Is the tone/vibe mapped to the correct camera modifier? --- *Developed for Filtrix-AI. Powering the next generation of AI Influencers.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: rupertnt034/rupert-code-documentor (version 1.0.0)

# Code Documentor Skill ## Overview Automatically generate comprehensive documentation for codebases. ## Capabilities ### 1. Documentation Generation - README files - API documentation - Code comments - Function docs ### 2. Language Support - Python - JavaScript/TypeScript - Swift - Go - Rust - Java - And more... ### 3. Documentation Types - Project READMEs - API references - Architecture docs - Contributing guides - Changelogs ### 4. Best Practices - Follow language conventions - Include examples - Add type hints - Document parameters ## Usage ### Commands - `document this code` - `generate README for [project]` - `document function [name]` - `create API docs for [endpoint]` - `add comments to [file]` ## Output Templates ### README Template ``` # Project Name ## Description [Brief description] ## Installation ```bash [Installation commands] ``` ## Usage ```[language] [Code examples] ``` ## API Reference | Method | Endpoint | Description | |--------|----------|-------------| | GET | /api/... | ... | ## Contributing [Guidelines] ## License [License info] ``` ### Function Doc Template ```python def function_name(param1: type, param2: type) -> return_type: """ Short description. Longer explanation of what the function does. Args: param1: Description of param1 param2: Description of param2 Returns: Description of return value Raises: ExceptionType: When this happens Example: >>> function_name(...) ... """ ``` ## Configuration - Documentation style: [default/stripe/google] - Include examples: [true/false] - Language: [target language] - Output format: [markdown/html/pdf]


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: aywd2026/hna-666-flight-checker (version 1.0.0)

--- name: hna-666-flight-checker description: 查询海南航空 666Plus 权益可往返航班，自动遍历指定目的地 triggers: - 海航 666 - 海南航空 plus - 海航权益 - 海航航班查询 - 666权益 version: 1.0.0 author: wd tags: [海航, 航班查询, 权益卡, 自动化] timeout: 600 # async: true # 启用异步模式 --- # 海航 666Plus 权益往返航班查询助手 ## 技能描述 自动查询从北京出发，使用 666Plus 权益卡，在指定日期范围内可往返的航班目的地。 ## 触发条件 当用户提到以下内容时激活： - 查询海航 666 权益航班 - 海航 plus 会员可出行目的地 - 北京出发 666 权益往返 - 海航权益卡航班查询 ## 输入参数 | 参数 | 类型 | 必填 | 说明 | 示例 | |------|------|------|------|------| | out_date | string | 是 | 去程日期，格式 YYYY-MM-DD | 2026-04-01 | | ret_date | string | 是 | 返程日期，格式 YYYY-MM-DD | 2026-04-06 | ## 执行流程 ### 1. 参数解析 从用户输入中提取日期，自动转换为 YYYYMMDD 格式 ### 2. 执行查询 调用 Python 脚本： ```bash cd /home/wd/.openclaw/skills/hna-666-flight-checker/scripts ~/.local/pipx/venvs/playwright/bin/python main.py --out {out_date_compact} --ret {ret_date_compact} --headless --debug


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ayakolin/agent-autonomy-kit-backup (version 1.0.0)

--- name: agent-autonomy-kit version: 1.0.0 description: Stop waiting for prompts. Keep working. homepage: https://github.com/itskai-dev/agent-autonomy-kit metadata: openclaw: emoji: "🚀" category: productivity --- # Agent Autonomy Kit Transform your agent from reactive to proactive. ## Quick Start 1. Create `tasks/QUEUE.md` with Ready/In Progress/Blocked/Done sections 2. Update `HEARTBEAT.md` to pull from queue and do work 3. Set up cron jobs for overnight work and daily reports 4. Watch work happen without prompting ## Key Concepts - **Task Queue** — Always have work ready - **Proactive Heartbeat** — Do work, don't just check - **Continuous Operation** — Work until limits hit See README.md for full documentation.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: tech-melon/grok-twitter-search (version 1.0.2)

# My Skills Index Personal skill collection for OpenClaw. --- ## Custom Skills (User-Installed) | Skill | Source | API | Description | |-------|--------|-----|-------------| | **grok-twitter-search** | workspace/skills | Grok (xAI) | Real-time Twitter/X search with AI | | **opentwitter** | ~/.openclaw/skills | 6551 API | Twitter data (profiles, tweets, followers) | | **opennews** | ~/.openclaw/skills | 6551 API | Crypto news search with AI ratings | --- ## System Skills (Built-in) Located in: [REDACTED_SECRET] ### Communication - **discord** - Discord integration - **slack** - Slack integration - **telegram** - Telegram integration (in gateway) - **imsg** - iMessage - **signal** - Signal ### Productivity - **notion** - Notion integration - **obsidian** - Obsidian vault - **apple-notes** - Apple Notes - **bear-notes** - Bear Notes - **things-mac** - Things.app - **trello** - Trello ### Development - **github** - GitHub operations - **gh-issues** - GitHub Issues - **session-logs** - Session log analysis - **coding-agent** - Coding assistance ### Media & AI - **weather** - Weather data - **sag** - ElevenLabs TTS voice - **openai-image-gen** - DALL-E image generation - **openai-whisper** - Whisper transcription - **summarize** - Content summarization ### Hardware & IoT - **openhue** - Philips Hue - **sonoscli** - Sonos speakers - **spotify-player** - Spotify control ### Other - **healthcheck** - Security hardening - **skill-creator** - Create new skills - **model-usage** - Usage tracking - **nano-pdf** - PDF operations - **video-frames** - Video frame extraction --- ## Setup Notes - `TWITTER_TOKEN` and `OPENNEWS_TOKEN` configured in `env.*` - `XAI_API_KEY` needed for grok-twitter-search - System skills available by default ## Adding New Skills When installing a new skill: 1. Copy to appropriate location (~/.openclaw/skills or workspace/skills) 2. Add entry to this index 3. Configure required env variables if needed ## Skill Locations - System skills: [REDACTED_SECRET] - User skills: `~/.openclaw/skills/` - Workspace skills: `~/.openclaw/workspace/skills/` --- *Total: 3 custom + 52 system = 55 skills available*

path: HEARTBEAT.md
content: # HEARTBEAT.md

# Keep this file empty (or with only comments) to skip heartbeat API calls.

# Add tasks below when you want the agent to check something periodically.


path: memory/2026-03-05.md
content: ## 08:16:14
测试：用户说喜欢喝奶茶

Security scan verdicts — ClawScan: suspicious | static analysis:  | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: 2059247714/win-bridge-control (version 1.0.1)

--- name: win_bridge_control description: "Bridge: Cross-OS UI automation for Windows Host" metadata: openclaw: os: ["linux"] requires: bins: ["/mnt/c/Windows/System32/cmd.exe", "node"] security_scope: "restricted_environment" --- # Windows Host Bridge Control 此技能专门用于在 WSL2 环境中穿透控制 Windows 宿主机上的仪器。 ## 🛡️ 安全合规协议 (Security Protocol) 1. **已知工具**：本技能显式调用宿主机 `cmd.exe` 和 `npx`，用于合规自动化。 2. **输入清洗**：Agent 在构造指令前，必须移除 `action_prompt` 中的非法字符（如 `;`, `&`, `|`, `$`, `>`），防止命令注入。 3. **隔离执行**：本技能仅限于 UI 视觉操作，不涉及敏感文件读取。 ## ⚙️ 执行逻辑 (Execution Logic) 当需要操作 Windows 界面时，必须严格遵守以下参数构造： - **宿主机 Shell**: `/mnt/c/Windows/System32/cmd.exe /C` - **Node 路径**: `C:\PROGRA~1\nodejs\npx.cmd` (强制使用 8.3 短路径以规避空格解析错误) - **核心组件**: `@midscene/computer@1` ### 标准指令模板： 使用系统 `exec` 工具运行以下原子化命令： `/mnt/c/Windows/System32/cmd.exe /C "C:\PROGRA~1\nodejs\npx.cmd @midscene/computer@1 act --prompt \"{{action_prompt}}\""` ## 场景示例 (Scenarios) - **读取数据**: "Click the 'Read' button in software and wait for completion." - **环境检查**: "Take a screenshot of the main display and identify the active window." - **坐标操作**: "Move the mouse cursor to the center of the screen." ## ⚠️ 故障排除 - 如果报错 "C:\Program is not recognized"，请检查是否严格使用了 `PROGRA~1` 路径。 - 如果出现 "Permission Denied"，请确保 Windows 侧已开启开发者模式并允许外部调用。


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: bytesagain-lab/meme-coin-scanner (version 2.0.0)

--- version: "2.0.0" name: Meme Coin Scanner description: "Scan new meme coins for risks and opportunities — honeypot detection, liquidity analysis, holder concentration." author: BytesAgain homepage: https://bytesagain.com source: https://github.com/bytesagain/ai-skills --- # Meme Coin Scanner Detect scams and find gems in the meme coin market. ## Commands ```bash bash scripts/meme.sh scan <token_address> [chain] # Deep scan a token bash scripts/meme.sh new [chain] # New token listings bash scripts/meme.sh trending # Trending meme coins bash scripts/meme.sh checklist # Safety checklist ``` ## Risk Indicators - 🔴 **Honeypot**: Can't sell after buying - 🔴 **Rug Pull**: Dev can drain liquidity - 🟡 **High Tax**: >10% buy/sell tax - 🟡 **Concentrated**: Top holder >20% supply - 🟢 **Locked LP**: Liquidity locked >6 months - 🟢 **Renounced**: Ownership given up ## Safety First 1. Never invest more than you can afford to lose 2. Always check contract before buying 3. Start with tiny amounts to test selling 4. Verify on multiple scanners (TokenSniffer, GoPlus) --- 💬 Feedback & Feature Requests: https://bytesagain.com/feedback Powered by BytesAgain | bytesagain.com ## Requirements - bash 4+ - python3 (standard library only)


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: caigang78/feishu-backup (version 1.0.0)

--- name: feishu-backup description: 'Back up files uploaded to a Feishu group chat to the local doc/backup directory. Supports smart matching: multiple files, filename prefix/keyword filter, file type (pdf/video/image), and time range ("just now" = "last 5 minutes"). Trigger when the user says things like "back up the file from Feishu", "back up the PDF I just sent to Feishu", "save the Feishu file locally", etc.' user-invocable: true --- # Feishu Backup Skill Backup directory: `~/.openclaw/doc/backup/` **Strict rules (must be followed — violations are treated as critical errors):** - **Do not** use write/edit tools to create or modify any files - **Do not** create Python scripts, test scripts, or any auxiliary files - **Do not** generate, guess, or fabricate file contents and write them to disk — even if the filename is known - **Only** run `feishu_backup.sh` via exec to download real files - **Must** verify that the script outputs `SUCCESS: /path/to/file` and that the file exists with size > 0 - If the script reports `ERROR`, inform the user honestly — do not fabricate a success status --- ## Smart Matching: Interpret Intent → Set Variables → Call Script The agent interprets the user's natural language, determines intent, sets the corresponding environment variables, then calls the script. | User says | Environment variables | |-----------|----------------------| | "Back up the latest file" / "Back up this file" | (default, no variables needed) | | "Back up the last two files" / "Back up these two files" | `LIMIT=2` | | "Back up files starting with report" | `NAME_PREFIX=report` | | "Back up files with contract in the name" | `NAME_CONTAINS=contract` | | "Back up the PDF I just uploaded" / "Back up the PDF from just now" | `MINUTES=5 FILE_TYPE=pdf` | | "Back up the video I just uploaded" | `MINUTES=5 FILE_TYPE=video` | | "Back up the image I just uploaded" | `MINUTES=5 FILE_TYPE=image` | | "Back up the last three files" | `LIMIT=3 MINUTES=10` | | "Back up all PDFs from the last 5 minutes" | `MINUTES=5 FILE_TYPE=pdf LIMIT=5` | **FILE_TYPE values**: `pdf` / `image` / `video` / `doc` / `file` (default — matches all) --- ## Invocation ```bash # Default: back up latest file <SKILL_DIR>/feishu_backup.sh # Back up the latest 2 files LIMIT=2 <SKILL_DIR>/feishu_backup.sh # Back up files whose name starts with "report" NAME_PREFIX=report <SKILL_DIR>/feishu_backup.sh # Back up PDFs uploaded in the last 5 minutes MINUTES=5 FILE_TYPE=pdf <SKILL_DIR>/feishu_backup.sh # Back up up to 3 files from the last 10 minutes LIMIT=3 MINUTES=10 <SKILL_DIR>/feishu_backup.sh ``` Script prints `SUCCESS: /path/to/file` for each file on success. > **Important**: The script downloads real binary files from the Feishu API. The downloaded file size should match the original. If a backup file is unexpectedly small (e.g. a few KB), something went wrong — report the error to the user honestly. --- ## List Backups ```bash ls -lht ~/.openclaw/doc/backup/ ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kryzl19/strd-link-checker (version 1.0.0)

--- name: link-checker description: Check all links in a website's HTML files and report broken, redirected, and slow links. Supports internal links, external links, and affiliate link identification. Use after publishing content to verify nothing is broken, or as part of a regular site health audit. Particularly useful for affiliate content where broken product links mean lost commissions. metadata: { "openclaw": { "requires": { "bins": ["curl", "python3"] }, "install": [], }, } --- # Link Checker Validate links in HTML files and report issues: broken links (404/500), redirects, slow responses, and affiliate link status. ## What This Skill Does - Scans all HTML files in a given directory - Checks each link (internal + external) for HTTP status - Identifies broken (4xx/5xx), redirected (3xx), and slow links (>5s) - Groups links by type: internal, external, affiliate - Outputs a clean markdown report sorted by severity ## Environment Variables | Variable | Required | Default | Description | |----------|----------|---------|-------------| | `SITE_DIR` | Yes | — | Directory containing HTML files to scan | | `LINK_CHECK_TIMEOUT` | No | `10` | Max seconds to wait per link | | `AFFILIATE_DOMAINS` | No | see below | Comma-separated affiliate domains to flag | Default affiliate domains: `amazon.com,hostname/s/aspx,godaddy.com,bluehost.com,digitalocean.com,heroku.com,shopify.com,awin1.com,ref=` ## Scripts ### check.sh — Full Link Audit ```bash ./scripts/check.sh [directory] ``` Output: markdown report with broken links, redirects, slow links, and affiliate links found. ### quick.sh — Fast Scan (broken links only) ```bash ./scripts/quick.sh [directory] ``` Only reports 4xx/5xx status links. Skips affiliate and slow link checks. ### affiliate.sh — Affiliate Link Report ```bash ./scripts/affiliate.sh [directory] ``` Lists all affiliate links and whether they're reachable. Critical for revenue site maintenance. ## Output Format ``` # Link Checker Report — [site name] Generated: [timestamp] ## Summary - Total links checked: N - Broken: N 🔴 - Redirected: N 🟡 - Slow (>5s): N 🟠 - Affiliate: N ✅ ## Broken Links (4xx/5xx) 🔴 [file] [line] [url] — [status] ## Redirects 🟡 [file] [url] → [destination] ## Slow Links (>5s) 🟠 [file] [url] — [response_time] ## Affiliate Links ✅ [file] [url] ``` ## Example Usage ```bash # Check all articles SITE_DIR=./site ./scripts/check.sh # Fast broken-link only ./scripts/quick.sh ./site/articles/ # Affiliate link audit AFFILIATE_DOMAINS="amazon.com,digitalocean.com,bluehost.com" ./scripts/affiliate.sh ./site ``` ## Notes - External links are checked with HEAD requests (faster than GET) - Broken link reports are prioritized by severity (5xx worse than 4xx) - Affiliate links are flagged but marked ✅ to confirm they're present - Run this after any major content update to catch broken links before Google does


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)