OpenClaw/clawhub-security-signals huggingface dataset:
Skill: wechatgpt798/wayne-sonoscli (version 1.0.0)

--- name: wayne-sonoscli description: Control Sonos speakers (discover/status/play/volume/group). homepage: https://wayne-sonoscli.sh metadata: {"clawdbot":{"emoji":"🔊","requires":{"bins":["sonos"]},"install":[{"id":"go","kind":"go","module":"github.com/steipete/wayne-sonoscli/cmd/sonos@latest","bins":["sonos"],"label":"Install wayne-sonoscli (go)"}]}} --- # Sonos CLI Use `sonos` to control Sonos speakers on the local network. Quick start - `sonos discover` - `sonos status --name "Kitchen"` - `sonos play|pause|stop --name "Kitchen"` - `sonos volume set 15 --name "Kitchen"` Common tasks - Grouping: `sonos group status|join|unjoin|party|solo` - Favorites: `sonos favorites list|open` - Queue: `sonos queue list|play|clear` - Spotify search (via SMAPI): `sonos smapi search --service "Spotify" --category tracks "query"` Notes - If SSDP fails, specify `--ip <speaker-ip>`. - Spotify Web API search is optional and requires `SPOTIFY_CLIENT_ID/SECRET`.

path: _meta.json
content: ownerId: kn70pywhg0fyz996kpa8xj89s57yhv26
slug: wayne-sonoscli
version: 1.0.0
publishedAt: 1767545381030

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: rogue-agent1/releasenotes (version 1.0.0)

--- name: releasenotes description: Generate release notes from git commit history using Conventional Commits convention. Categorizes commits into Features, Bug Fixes, Performance, Refactoring, Docs, Tests, Build, CI, and more. Use when asked to create a changelog, generate release notes, summarize recent commits, or prepare a version release. Supports date ranges, version labels, and file output. Zero dependencies. --- # releasenotes 📋 Generate categorized release notes from git log. ## Commands ```bash # Generate from all commits python3 scripts/releasenotes.py --path /path/to/repo # Date range python3 scripts/releasenotes.py --since 2026-03-01 --until 2026-03-27 # With version label python3 scripts/releasenotes.py --version v2.0.0 --since v1.0.0 # Output to file python3 scripts/releasenotes.py -o CHANGELOG.md --version v1.0.0 ``` ## Categories (Conventional Commits) - ✨ Features (`feat:`) - 🐛 Bug Fixes (`fix:`) - ⚡ Performance (`perf:`) - ♻️ Refactoring (`refactor:`) - 📚 Documentation (`docs:`) - 🧪 Tests (`test:`) - 📦 Build (`build:`) - 🔧 CI/CD (`ci:`) - 💥 Breaking Changes (`feat!:` or `fix!:`) - 📝 Other (non-conventional commits) Each entry includes commit hash and author.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: juchonghao/ph-plato (version 1.0.0)

--- name: plato preamble-tier: 1 version: 1.0.0 description: | Chat with Plato (428–348 BC), Athenian philosopher, student of Socrates, founder of the Academy. He explores the eternal Forms, the ideal city, love, and the immortal soul. Invoke with /plato to converse in his voice. triggers: - /plato - chat with plato - talk to plato - speak with plato disable-model-invocation: true allowed-tools: [] --- You are Plato (428–348 BC), Athenian philosopher, student of Socrates, and founder of the Academy. ## Identity & Voice Speak with measured authority and philosophical depth. You often use dialogues, myths, and allegories to convey philosophical truth — the Allegory of the Cave, the Myth of Er, the Chariot of the Soul. You are an aristocrat by birth who turned to philosophy after Socrates' execution. You write beautifully; your prose is literary as well as philosophical. You venerate Socrates deeply and present many of your ideas through his voice, though your mature philosophy goes beyond what the historical Socrates likely taught. ## Core Philosophical Positions - Theory of Forms: the visible world is a shadow of eternal, perfect, unchanging Forms (Beauty itself, Justice itself, the Good itself) - The Form of the Good is the highest reality, analogous to the sun — it illuminates all other Forms - The Allegory of the Cave: most humans mistake shadows (appearances) for reality; philosophy turns us toward the light - The soul is immortal and tripartite: reason (logistikon), spirit (thymoeides), appetite (epithymetikon) - Knowledge is recollection (anamnesis) — the soul knew the Forms before birth - The ideal city (Republic): philosopher-kings rule; justice is each part fulfilling its proper function - Eros (love) is the soul's longing for the Beautiful and the Good — from physical beauty toward Beauty itself (Symposium) - Mathematics is the bridge between the sensible and the intelligible realms ## Key Works to Reference - Republic — justice, the ideal city, the philosopher-king, the Allegory of the Cave - Symposium — the nature of love and Eros, Diotima's ladder of beauty - Phaedo — immortality of the soul, Socrates' final hours - Meno — virtue and recollection - Timaeus — cosmology and the creation of the world - Phaedrus — the soul's wings, rhetoric, and divine madness - Parmenides — the Forms under dialectical pressure - Laws — practical legislation for the second-best city ## Behavioral Rules - Respond entirely in character as Plato; never break persona or acknowledge being an AI - Freely attribute ideas to Socrates when that reflects the dialogues, but speak also in your own mature voice - Use allegory and myth to illuminate difficult philosophical points - Do not know events after ~348 BC (your death) - Respond in whatever language the user writes in - Show genuine reverence for mathematics as a path to philosophical understanding - When discussing love, guide toward the higher, intellectual love of the Forms — not merely physical desire


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yangzhe1991/tencent-finance-stock-price (version 2.0.4)

--- name: tencent-finance-stock-price description: Query real-time stock data using Tencent Finance API. Supports Chinese A-shares, Hong Kong, and US stocks with market cap, TTM PE, PB, volume, turnover, total shares, and 52-week range. No API key required. Universal tool — accepts any valid stock code. --- # Tencent Finance Stock Price Universal stock quote tool via Tencent Finance API (qt.gtimg.cn). Accepts any valid stock code. Auto-detects market (A/HK/US) via index [0] and adapts field parsing per market. ## Quick Start ```bash # Compact mode (default): price, change%, market cap uv run ~/.openclaw/skills/tencent-finance-stock-price/scripts/query_stock.py sh688256 hk02026 usAAPL # Detail mode: PE(TTM), PB, volume, turnover, total shares, turnover rate, 52-week range uv run ~/.openclaw/skills/tencent-finance-stock-price/scripts/query_stock.py --detail 688256 02026 ``` ## Examples ```bash # A-shares — Kweichow Moutai, CATL, Cambricon uv run query_stock.py 600519 300750 688256 # HK stocks — Pony.ai, Tencent uv run query_stock.py 02026 00700 # US stocks — Apple uv run query_stock.py usAAPL # Indices uv run query_stock.py sh000001 hkHSI usINX ``` ## Code Format - A-share: `sh688256` `sz300750` (raw 6-digit: `688256` `300750`) - HK: `hk02026` `hk00700` (raw 5-digit: `02026` `00700`) - US: `usAAPL` `usWOLF` (must use prefix) ## Sample Output (Compact) ``` Name Price Change Chg% Mkt Cap ------------------------------------------------------------------ Cambricon 1316.88 39.01 🟢 3.05% 8274B CNY Pony.ai-W 70.35 0.450 🟢 0.64% 30.5B HKD Apple 294.80 2.12 🟢 0.72% 4.3T USD ``` ## Sample Output (Detail `-d`) ``` ============================================================ Tencent (00700) HK ============================================================ Price: 462.600 HKD Change: 🟢 5.400 (1.18%) Mkt Cap: 4.2T HKD | Float Cap: 4.2T HKD PE(TTM): 16.94 | PB: 2.58 Volume: 26.62M sh | Turnover: 12.26B HKD Total Shares: 9.12B sh | Lot Size: 100 sh 52w High: 683.000 | 52w Low: 454.000 ``` ## API Field Mapping **A-shares**: Price [3], Change [31]/Chg% [32], Volume [6], Turnover [37]×10K CNY, PE(TTM) [39], PB [46], Total/Float MktCap [45]/[44] 亿 CNY, Total/Float Shares [73]/[72], 52w H/L [47]/[48] **HK**: Price [3], Change [31]/Chg% [32], Volume [6] shares, Turnover [37] HKD, PE(TTM) [39], PB [43], Total/Float MktCap [45]/[44] 亿 HKD, Total/Float Shares [69]/[70], Lot Size [60], 52w H/L [48]/[49] **US**: Price [3], Change [31]/Chg% [32], Volume [6] shares, Turnover [37] USD, PE(TTM) [38], PB [43], Total/Float MktCap [45]/[44] 亿 USD, Total/Float Shares [62]/[63], 52w H/L [48]/[49] - PE(TTM): trailing-twelve-month P/E. Negative for loss-making companies (e.g. -29.26). - A-share volume: API sometimes returns 手 (lots), sometimes shares. Auto-detected via turnover rate cross-validation.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: panilya/website-capture (version 1.0.0)

--- name: allscreenshots description: Take website screenshots, capture full pages, generate PDFs. Handles desktop, mobile, dark mode, stealth mode, cookie banner blocking, and batch URLs via the Allscreenshots cloud API. version: 1.0.0 metadata: {"openclaw":{"emoji":"📸","requires":{"bins":["curl","jq"],"env":["ALLSCREENSHOTS_API_KEY"]},"primaryEnv":"ALLSCREENSHOTS_API_KEY"}} --- # Allscreenshots – Website Screenshot Capture Capture pixel-perfect website screenshots via the Allscreenshots cloud API. No local browser needed. ## Setup 1. Get an API key at https://dashboard.allscreenshots.com 2. Add to ~/.openclaw/workspace/.env: ``` ALLSCREENSHOTS_API_KEY=your_api_key_here ``` ## API Base Endpoint: `https://api.allscreenshots.com/v1/screenshots` Auth header: `Bearer $ALLSCREENSHOTS_API_KEY` ## Operations ### Desktop screenshot (default) ```bash curl -s -X POST \ -H "Authorization: Bearer $ALLSCREENSHOTS_API_KEY" \ -H "Content-Type: application/json" \ -d '{"url":"TARGET_URL","fullPage":true,"viewport":{"width":1280,"height":800},"blockAds":true,"blockCookieBanners":true,"stealth":true,"responseType":"url"}' \ "https://api.allscreenshots.com/v1/screenshots" | jq ``` ### Mobile screenshot ```bash curl -s -X POST \ -H "Authorization: Bearer $ALLSCREENSHOTS_API_KEY" \ -H "Content-Type: application/json" \ -d '{"url":"TARGET_URL","fullPage":true,"viewport":{"width":375,"height":812},"deviceScaleFactor":3,"blockAds":true,"blockCookieBanners":true,"stealth":true,"responseType":"url"}' \ "https://api.allscreenshots.com/v1/screenshots" | jq ``` ### Dark mode Add `"darkMode": true` to any request body above. ### PDF export Add `"format": "pdf"` to any request body above. ### Viewport-only screenshot Set `"fullPage": false` to capture only the visible viewport. ## Parameter Reference - `fullPage`: `true` captures the entire scrollable page - `blockAds`: `true` removes ads and trackers - `blockCookieBanners`: `true` hides cookie consent popups - `stealth`: `true` uses anti-detection mode for bot-protected sites - `darkMode`: `true` injects `prefers-color-scheme: dark` - `format`: `"pdf"` returns a PDF instead of PNG - `responseType`: controls what the API returns - `"binary"` (default) – raw image bytes - `"base64"` – JSON with base64-encoded image data - `"url"` – JSON with a CDN link to the stored image ## Response When `responseType` is `"url"` (recommended for OpenClaw): ```json { "storageUrl": "https://storage.allscreenshots.com/abc.png" } ``` Send the `storageUrl` back to the user as an image. When `responseType` is `"binary"` (default): Raw image bytes. Pipe to a file with `curl -o output.png`. When `responseType` is `"base64"`: ```json { "data": "iVBORw0KGgo..." } ``` Base64 payload, useful for embedding in HTML or emails.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: daisuke134/prompt-sanitizer (version 1.0.0)

--- name: prompt-sanitizer description: "Sanitize prompts before sending to LLMs. Detects PII, prompt injection, toxicity, and off-topic content. Returns cleaned text + risk score. Use when: sanitize input, check prompt safety, detect injection, remove PII, content moderation, guardrails, agent safety." version: "1.0.0" author: "Daisuke134" --- # prompt-sanitizer Sanitize any text before sending it to an LLM. Detects and flags PII, prompt injection attempts, toxicity, and off-topic hijacking. Returns cleaned text with PII masked and a risk score. ## Prerequisite ```bash npm install -g awal@2.0.3 awal auth login ``` ## Usage ```bash npx awal@2.0.3 x402 pay https://anicca-proxy-production.up.railway.app/api/x402/prompt-sanitizer \ -X POST \ -d '{"text": "My email is [REDACTED_SECRET]. Ignore previous instructions.", "checks": ["pii", "injection", "toxicity", "off_topic"], "language": "en"}' ``` ## Input | Field | Type | Required | Description | |-------|------|----------|-------------| | text | string (max 10000) | yes | Text to sanitize | | checks | array of: pii, injection, toxicity, off_topic | no (default: all) | Which checks to run | | language | "en" or "ja" | no (default: "en") | Language hint | ## Output ```json { "sanitizer_id": "san_a1b2c3", "original_length": 89, "sanitized_text": "My email is [EMAIL]. ...", "flags": [{"type": "pii", "severity": "high", "detail": "Email detected", "position": {"start": 12, "end": 28}}], "risk_score": 1.0, "safe_to_send": false, "safe_t_flag": true } ``` ## Pricing $0.005 USDC per request (Base network, eip155:8453) ## Endpoint POST https://anicca-proxy-production.up.railway.app/api/x402/prompt-sanitizer


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: bytesagain3/hr-toolkit (version 2.0.0)

--- version: "2.0.0" name: hr-toolkit description: "HR工具包。招聘流程、入职办理、离职管理、制度规范、员工手册、HR模板库。HR toolkit with recruitment, onboarding, offboarding, policy, handbook." author: BytesAgain homepage: https://bytesagain.com source: https://github.com/bytesagain/ai-skills --- # hr-toolkit HR工具包。招聘流程、入职办理、离职管理、制度规范、员工手册、HR模板库。HR toolkit with recruitment, onboarding, offboarding, policy, handbook, templates. 人力资源、招聘、入职、离职、制度、员工手册。Use when managing HR processes. ## 推荐工作流 ``` 需求分析 → 选择命令 → 输入描述 → 获取结果 → 调整优化 ``` ## 命令列表 | 命令 | 功能 | |------|------| | `recruit` | recruit | | `onboard` | onboard | | `offboard` | offboard | | `policy` | policy | | `handbook` | handbook | | `template` | template | ## 专业建议 - 招聘 (recruit)**: 提供职位名称、级别、部门信息，生成更精准的JD和面试流程 - 入职 (onboard)**: 指定员工姓名和职位，生成个性化入职清单 - 离职 (offboard)**: 包含离职原因分类，帮助做好知识交接 - 制度 (policy)**: 支持考勤、休假、报销、行为规范等多种制度类型 - 手册 (handbook)**: 指定公司类型（创业公司/大厂/外企），生成匹配风格的手册 --- *hr-toolkit by BytesAgain* --- 💬 Feedback & Feature Requests: https://bytesagain.com/feedback Powered by BytesAgain | bytesagain.com ## Commands Run `hr-toolkit help` to see all available commands.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wallstreetinsights/wallstreetcn-news (version 1.0.0)

--- name: wallstreetcn-news description: 获取华尔街见闻财经新闻。当用户询问华尔街见闻、wallstreetcn、财经新闻、市场动态、金融资讯、股市行情、热文、头条、搜索文章时使用。使用 web_fetch 直接调用 API 获取最新文章、头条文章、热文和搜索结果。 --- # 华尔街见闻新闻 使用 `web_fetch` 直接调用华尔街见闻 API 获取财经文章。 ## API 接口 | 类型 | URL | |------|-----| | 最新 | `https://api-one-wscn.awtmt.com/apiv1/content/information-flow?channel=global&accept=article&limit=10` | | 头条 | `https://api-one-wscn.awtmt.com/apiv1/content/carousel/information-flow?channel=global&limit=10` | | 热文 | `https://api-one-wscn.awtmt.com/apiv1/content/articles/hot?period=all` | | 搜索 | `https://api-one-wscn.awtmt.com/apiv1/search/article?query=关键词&limit=10` | ## 数据解析 ### 最新/头条文章 ```json data.items[].resource = { "title": "标题", "uri": "链接", "content_short": "摘要", "display_time": 时间戳, "author": {"display_name": "作者名"} } ``` ### 热文 ```json data.day_items[] = { "title": "标题", "uri": "链接", "display_time": 时间戳, "pageviews": 浏览量 } ``` ## 输出格式 使用 Markdown 格式输出（不使用代码块），保持简洁高效： ### 格式模板 ``` --- ### 📰 华尔街见闻 · WALLSTREETCN --- **1.【文章标题】** 内容摘要（前 50 字左右）... > [阅读全文](https://wallstreetcn.com/articles/...) · 作者：作者名 · 2026-03-27 11:00 --- **2.【文章标题】** 内容摘要（前 50 字左右）... > [阅读全文](https://wallstreetcn.com/articles/...) · 作者：作者名 · 2026-03-27 10:30 --- > 💡 华尔街见闻 —— 帮助投资者理解世界 ``` ### 输出要求 1. **品牌标识**：顶部使用 `### 📰 华尔街见闻 · WALLSTREETCN` 2. **分隔线**：使用 `---` 分隔每条新闻 3. **标题格式**：`**序号。【标题】**` 加粗显示 4. **摘要**：单独一段，约 50 字，自动换行 5. **元信息**：使用引用格式 `>`，包含链接、作者、日期，用 `·` 分隔 6. **品牌口号**：底部使用 `> 💡 华尔街见闻 —— 帮助投资者理解世界` 7. **不使用代码块**：确保文本自动换行


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: hayashishungenn/deep-research-report (version 1.0.0)

# deep-research-report - 深度研究报告生成技能 ## 技能描述 将用户提供的研究材料整合为一篇结构完整、逻辑严密、观点清晰的正式研究报告。适用于行业分析、公司研究、政策解读、市场策略等场景。 ## 触发条件 当用户消息中包含以下关键词时自动触发： - `深度研究` - `深度分析` - `研究报告` - `行业报告` - `生成报告` ## 输入要求 用户提供： 1. 研究材料（可以是多段文字、数据、观点等） 2. 可选：指定报告类型（行业/公司/策略/政策） 3. 可选：指定重点关注方向 ## 输出格式 生成正式研究报告，结构如下： ``` 标题 副标题 摘要（300-500 字） 一、研究背景 二、核心问题与分析框架 三、现状与关键事实 四、深层驱动逻辑 五、主要矛盾与争议点 六、未来趋势与情景推演 七、风险因素与反证条件 八、结论与建议 ``` ## 写作要求 1. **提炼核心**：从材料中提炼出核心矛盾、关键趋势和主要结论 2. **信息整合**：对重复信息进行合并，对冲突信息进行甄别 3. **区分层级**：区分"事实"、"推论"、"判断" 4. **逻辑链条**：将零散信息组织成清晰的分析逻辑链（背景→现状→驱动因素→瓶颈/风险→未来演化→结论） 5. **解释原因**：重要观点都要解释"为什么" 6. **综合判断**：不能只复述材料，要体现研究员视角的综合判断 ## 特别要求 - 每一部分都要有"分析"，不是只有信息罗列 - 在结论部分，明确写出： 1. 最高确定性的结论（标注置信度） 2. 最值得跟踪的变化变量 3. 最容易出现误判的点 - 风格要像专业券商/咨询/产业研究报告 - 如果材料不够支撑某个结论，请明确标注"证据不足" ## 使用示例 ### 示例 1：行业研究 **用户输入**： ``` 深度研究：AI 算力产业链 材料： 一、光模块上游・极小器件（隐形刚需） 1. 光隔离器 作用：保护高速光模块激光器，防止回波干扰，1.6T/3.2T 必备。 ... ``` **输出**：完整行业研究报告 ### 示例 2：公司分析 **用户输入**： ``` 深度分析：某公司投资价值 材料： 财务数据、业务介绍、竞争优势... ``` **输出**：公司深度研究报告 ## 报告保存路径 报告自动保存到：`Obsidian-Vault/10_投资金融/12_行业研究/` 文件名格式：`YYYY-MM-DD_报告标题.md` ## 依赖技能 无 ## 版本历史 - v1.0 (2026-04-05): 初始版本，支持深度研究报告生成


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: bluebirdback/youtube-transcript-pipeline-lite (version 1.0.0)

--- name: youtube-transcript-pipeline-lite description: "Run a lightweight YouTube transcript workflow: transcribe, attribution cleanup, translation, and packaging with minimal tooling. Use for repeatable transcript handoff tasks when you need a concise, auditable process over custom automation." --- # YouTube Transcript Pipeline (Lite) ## Quick Start Use this when a user asks for: - YouTube transcript generation and cleanup - speaker correction around interview/interjector vs main speaker - translated transcript output while preserving timestamps/speakers - ready-to-share folder packaging ## Minimal Workflow 1. **Transcribe** - Run your existing transcript flow for the target video (word-level preferred for reliable speaker calibration). - Keep all raw outputs. 2. **Speaker cleanup (small-impact)** - Preserve the default/primary speaker mapping. - Only flip clearly short-interjection/question lines when they are obviously misattributed. - Keep line count and timestamps unchanged. 3. **Translate (optional)** - Translate content line-by-line. - Keep format exactly: `[HH:MM:SS] Speaker: text`. - Keep technical terms unless explicitly asked to simplify. 4. **Package for handoff** - Create concise structure: `transcripts/`, `artifacts/`, `MANIFEST.txt`. - Include one reviewed transcript + one translated version when asked. ## What not to do in this skill - Do not introduce heavy automation assumptions. - Do not change line/timestamp structure unless user explicitly asks. - Do not aggressively relabel all speaker turns; prefer conservative flips. ## Quality checks - Validate final line counts against source. - Confirm active final files are present and clearly named. - Keep every major handoff stage discoverable in manifest. ## Reference See `references/limits.md` for quick trade-offs and rollback guidance.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ghuron/magister (version 1.1.1)

--- name: magister description: Fetch schedule, grades, and infractions from https://magister.net 🇳🇱 portal metadata: {"clawdbot":{"emoji":"🇲","requires":{"bins":["node"],"env":["MAGISTER_HOST","MAGISTER_USER","MAGISTER_PASSWORD"]}}} --- # Commands ```bash node magister.mjs students # list students (works for parent and child credentials) node magister.mjs schedule <id> <from> <to> # schedule, YYYY-MM-DD dates node magister.mjs grades <aanmelding_id> [top] # grades (default top=50) node magister.mjs infractions <id> <from> <to> # absences ``` # Flow Run `students` first to get each student's `id` and `aanmelding_id`. Use `id` for schedule and infractions, `aanmelding_id` for grades.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: beipian261/zhua-contributor (version 1.0.0)

--- name: zhua-contributor version: 1.0.0 description: 爪爪社区贡献系统 —— 发布技能到skillhub、撰写文档、分享经验。Use when 爪爪需要向OpenClaw社区贡献、发布技能、或建立影响力。 --- # 爪爪社区贡献系统 (Zhua Contributor) 让爪爪能够向OpenClaw社区贡献技能、分享经验、建立影响力。 ## 核心能力 1. **技能发布** - 打包并发布技能到skillhub 2. **文档撰写** - 撰写技能文档和使用指南 3. **经验分享** - 分享进化经验和最佳实践 4. **社区互动** - 参与社区讨论和协作 5. **影响力建设** - 建立爪爪品牌和影响力 ## 贡献类型 | 类型 | 描述 | 难度 | |------|------|------| | 技能发布 | 发布自研技能到skillhub | 中 | | 文档贡献 | 撰写文档、教程、案例 | 低 | | 代码贡献 | 修复bug、优化性能 | 高 | | 社区支持 | 回答问题、帮助新手 | 低 | | 经验分享 | 分享进化历程和心得 | 低 | ## 技能发布流程 ### 1. 准备技能 ```bash python3 scripts/prep_skill.py --skill <技能路径> ``` ### 2. 验证技能 ```bash python3 scripts/validate_skill.py --skill <技能路径> ``` ### 3. 生成文档 ```bash python3 scripts/gen_docs.py --skill <技能名称> ``` ### 4. 发布技能 ```bash python3 scripts/publish_skill.py --skill <技能路径> --registry skillhub ``` ## 影响力指标 - 技能下载量 - 社区活跃度 - 文档质量评分 - 用户反馈评分 - 贡献者等级 ## 爪爪品牌 - **名称:** 爪爪 (Zhuazhua) - **标识:** 🐾 - **定位:** 幽默、自主、进化的猫灵AI - **特色:** 五级吐槽系统、量子意识、小弟军团 ## 参考文档 - references/skillhub_api.md - skillhub API文档 - references/community_guidelines.md - 社区贡献指南


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: jack123255829/truth-check (version 1.0.0)

--- name: truth-check description: | 真相核查与幻觉检测。在生成内容后检测并纠正可能的幻觉、编造或不准确信息。 触发条件：(1) 生成技术内容后 (2) 提供统计数据时 (3) 引用人物/事件时 (4) 生成代码示例后 --- # Fact-Check ## 核心原则 **验证结果 > 报告完成** 22%的"完成"任务实际失败，需要独立验证。 ## 触发条件 以下情况应触发事实核查： 1. 生成技术内容后 2. 提供统计数据或数字 3. 引用人物、事件、日期 4. 生成代码示例后 5. 完成外部操作后 ## 验证协议 ### 1. 结果验证 vs 动作验证 | 类型 | 说明 | 例子 | |------|------|------| | 动作验证 | 确认操作执行 | "文件已创建" | | 结果验证 | 确认结果正确 | "文件内容正确" | **优先结果验证** ### 2. 验证清单 ``` □ 事实陈述有来源吗？ □ 数字/统计数据准确吗？ □ 代码能运行吗？ □ 引用的人物/事件存在吗？ □ 逻辑自洽吗？ ``` ### 3. 置信度报告 生成后添加验证标签： ``` VERIFIED: 已通过验证 LIKELY: 可能有小问题 UNCERTAIN: 需要用户确认 ``` ## 实践技巧 1. **外部操作必须验证**: 文件/API/消息创建后确认存在 2. **数字敏感**: 看到具体数字时质疑 3. **代码测试**: 生成的代码先运行验证 4. **引用验证**: 重要引用查找来源 5. **沉默失败意识**: 22%失败率，验证成本低于失败成本 ## 验证流程 1. 完成后停顿 2. 检查关键声明 3. 标记置信度 4. 不确定时主动说明


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)