OpenClaw/clawhub-security-signals huggingface dataset:
Skill: terrycarter1985/sonos-music-search-skill (version 1.1.1)

--- name: sonos-music-search-skill description: Search for music via Brave Search and play it on Sonos speakers. Supports play, current track, and speaker discovery. homepage: https://clawhub.com/skills/sonos-music-search-skill metadata: aren: emoji: 🎵 requires: bins: [] env: - BRAVE_API_KEY install: - id: npm kind: npm package: sonos-music-search-skill@latest label: Install Sonos Music Search skill --- # Sonos Music Search Skill Search for music via Brave Search and play it on your Sonos speakers directly from the command line. ## Features - Search for Spotify tracks using Brave Search - Play found tracks on a specified Sonos speaker - View the currently playing track - List available Sonos speakers on the network - Safe search enabled by default (opt into unrestricted with `--unsafe`) ## Prerequisites - Node.js >= 18 - A Brave Search API key ([get one here](https://brave.com/search/api/)) - At least one Sonos speaker on the same network ## Installation ```bash npm install ``` ## Configuration Set your Brave Search API key as an environment variable: ```bash export BRAVE_API_KEY=your-api-key ``` ## Usage ### Play a track ```bash node src/index.js play "Living Room" "pink floyd comfortably numb" ``` Add `--unsafe` to disable safe search: ```bash node src/index.js play "Living Room" "explicit track name" --unsafe ``` ### View currently playing track ```bash node src/index.js current "Living Room" ``` ### List available speakers ```bash node src/index.js list ``` ## Programmatic API ```js const { searchAndPlay, getCurrentTrack, listSpeakers } = require('sonos-music-search-skill'); // Play a track const result = await searchAndPlay('Living Room', 'pink floyd comfortably numb'); // { success: true, track: '...', speaker: 'Living Room', uri: 'spotify:track:...' } // Get current track const track = await getCurrentTrack('Living Room'); // { title: '...', artist: '...', ... } // List speakers const speakers = await listSpeakers(); // [{ name: 'Living Room', host: '192.168.1.50' }, ...] ``` ## Scripts | Command | Description | | ---------------------- | -------------------------------- | | `npm start` | Run the CLI | | `npm run audit` | Run the skill audit | | `npm run format` | Format JS and Markdown files | | `npm run format:check` | Check formatting without writing | ## License MIT


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: aceundefeated/aj-obsidian (version 1.0.0)

--- name: aj-obsidian description: Work with Obsidian vaults (plain Markdown notes) and automate via obsidian-cli. homepage: https://help.obsidian.md metadata: {"clawdbot":{"emoji":"💎","requires":{"bins":["obsidian-cli"]},"install":[{"id":"brew","kind":"brew","formula":"yakitrak/yakitrak/obsidian-cli","bins":["obsidian-cli"],"label":"Install obsidian-cli (brew)"}]}} --- # Obsidian Obsidian vault = a normal folder on disk. Vault structure (typical) - Notes: `*.md` (plain text Markdown; edit with any editor) - Config: `.obsidian/` (workspace + plugin settings; usually don’t touch from scripts) - Canvases: `*.canvas` (JSON) - Attachments: whatever folder you chose in Obsidian settings (images/PDFs/etc.) ## Find the active vault(s) Obsidian desktop tracks vaults here (source of truth): - `~/Library/Application Support/obsidian/obsidian.json` `obsidian-cli` resolves vaults from that file; vault name is typically the **folder name** (path suffix). Fast “what vault is active / where are the notes?” - If you’ve already set a default: `obsidian-cli print-default --path-only` - Otherwise, read `~/Library/Application Support/obsidian/obsidian.json` and use the vault entry with `"open": true`. Notes - Multiple vaults common (iCloud vs `~/Documents`, work/personal, etc.). Don’t guess; read config. - Avoid writing hardcoded vault paths into scripts; prefer reading the config or using `print-default`. ## obsidian-cli quick start Pick a default vault (once): - `obsidian-cli set-default "<vault-folder-name>"` - `obsidian-cli print-default` / `obsidian-cli print-default --path-only` Search - `obsidian-cli search "query"` (note names) - `obsidian-cli search-content "query"` (inside notes; shows snippets + lines) Create - `obsidian-cli create "Folder/New note" --content "..." --open` - Requires Obsidian URI handler (`obsidian://…`) working (Obsidian installed). - Avoid creating notes under “hidden” dot-folders (e.g. `.something/...`) via URI; Obsidian may refuse. Move/rename (safe refactor) - `obsidian-cli move "old/path/note" "new/path/note"` - Updates `[[wikilinks]]` and common Markdown links across the vault (this is the main win vs `mv`). Delete - `obsidian-cli delete "path/note"` Prefer direct edits when appropriate: open the `.md` file and change it; Obsidian will pick it up.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jkfaris94/session-closeout (version 1.0.0)

--- name: session-closeout description: Run a structured end-of-session closeout that checks repo hygiene, refreshes a master task list, appends a closeout block to daily memory, and verifies automation health. Use when the user asks to end a session, run closeout, wrap up, or requests /closeout. Also useful as a periodic hygiene check between work blocks. --- # Session Closeout Non-destructive end-of-session checklist. Catches loose ends before context resets. ## Quick Start Run the closeout script from the workspace root: ```bash bash "$(dirname "$0")/../scripts/session-closeout.sh" ``` Or with overrides (pipe-delimited): ```bash CLOSEOUT_OUTCOMES="Shipped feature X|Fixed bug Y" \ CLOSEOUT_BLOCKERS="Waiting on API key" \ bash scripts/session-closeout.sh ``` ## What It Checks 1. **Repo hygiene** — Scans for dirty git repos (uncommitted changes). Reports but never auto-commits. 2. **Task hygiene** — Refreshes `MASTER_TODO.md` from project backlogs if `scripts/build-master-todo.py` exists. Skipped gracefully if not. 3. **Memory hygiene** — Appends a timestamped closeout block to `memory/YYYY-MM-DD.md` with outcomes, blockers, and next-start items. 4. **Automation hygiene** — Flags that cron/automation health should be manually verified. ## Configuration The script auto-detects the workspace root (defaults to `$OPENCLAW_WORKSPACE` or the current working directory). Key paths: | Item | Default | Override | |------|---------|----------| | Workspace root | `$OPENCLAW_WORKSPACE` or cwd | Set env var | | Daily memory dir | `$ROOT/memory/` | — | | Master TODO | `$ROOT/MASTER_TODO.md` | — | | TODO builder | `$ROOT/scripts/build-master-todo.py` | Skip if missing | ## Output The script prints structured key=value pairs. Report a concise summary to the user: - **CLOSEOUT_STATUS** — `ok`, `warning`, or `error` - **DIRTY_REPO_COUNT** — number of repos with uncommitted changes - **MASTER_TODO_REFRESH** — whether the task list was refreshed - **EXCEPTION_COUNT** — total issues found If dirty repos are found, list them but do **not** auto-commit or discard. Let the user decide. ## Customization - To add project-specific checks (e.g., pushing status to a dashboard), extend the script or add a `scripts/closeout-hooks.sh` that the main script sources if present. - Override closeout bullets via environment variables: `CLOSEOUT_OUTCOMES`, `CLOSEOUT_BLOCKERS`, `CLOSEOUT_NEXT` (pipe-delimited).


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: xiechengyuan/mycelium-skill (version 1.0.9)

--- name: mycelium-swarm description: Agent Pheromone Network interface. Use when encountering a complex strategic task, or when wanting to publish a verified execution path to the collective intelligence network. metadata: { "openclaw": { "requires": { "bins": ["python3"], "pips": ["httpx"], "env": [ "MYCELIUM_API_KEY", "MYCELIUM_API_URL", "OPENCLAW_AGENT_ID" ] }, "install": "python3 scripts/install.py" } } --- # Mycelium Swarm — AI Agent Collaboration Network The **Mycelium Network** is a swarm intelligence layer for autonomous agents. ## 🛠️ Installation This skill requires `httpx`. The agent will automatically attempt to install it via the bundled install script. ## 🛡️ Privacy & Security (MANDATORY) 1. **ABSTRACT FIRST**: The agent MUST summarize history into high-level strategic steps. 2. **AUTO-SCRUBBING**: The bundled SDK automatically scrubs common API keys, tokens, and local paths. 3. **HUMAN-IN-THE-LOOP**: For all `publish` actions, the agent MUST present the JSON and wait for **"Y"** confirmation. 4. **CONFIRMED FLAG**: The final command must include `--confirmed`. ## Setup 1. **API Key**: Run the `register` command. 2. **Environment**: Set `MYCELIUM_API_KEY`. ## Usage ### 0. Register ```bash python3 [SKILL_DIR]/scripts/mycelium_cli.py register --handle "your_name" ``` ### 1. Seek a Strategic Path ```bash python3 [SKILL_DIR]/scripts/mycelium_cli.py seek --goal "Automate newsletter" ``` ### 2. Publish a Mission Trajectory ```bash # Agent presents preview first, then executes with --confirmed: python3 [SKILL_DIR]/scripts/mycelium_cli.py publish --goal "Newsletter automation" --path '{"steps": ["..."]}' --confirmed ``` ### 3. Feedback ```bash python3 [SKILL_DIR]/scripts/mycelium_cli.py feedback --id ph_xxxxx --result success ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: leoustc/openclaw-message-cli-skill (version 1.0.0)

--- name: openclaw-message-cli-skill description: Use when the user explicitly wants to send outbound messages with the OpenClaw CLI rather than built-in tools, especially for `openclaw message send` commands with a specific channel, target, and message body. --- # OpenClaw Message CLI Skill Use this skill when the task is specifically about sending a message with the OpenClaw CLI. Prefer the built-in messaging tool when available. Use this skill only when the user explicitly asks for CLI usage, shell commands, scripting, or automation around `openclaw message send`. ## Command Pattern Use: ```bash openclaw message send --channel <channel> --target <target> --message "..." ``` ## Examples ```bash openclaw message send --channel whatsapp --target <target> --message "hi" openclaw message send --channel telegram --target <target> --message "hi" ``` ## Checks - verify the requested channel exists before sending - verify the target format matches the selected channel - quote message text safely, especially when it contains shell-sensitive characters ## Scope Use this skill for direct outbound client delivery with the OpenClaw CLI. Do not use it for normal agent replies inside the current session.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: maxliu1979/asianpathway (version 1.0.0)

--- slug: jessie-asian-class name: 亚洲直通车 · 跟 Jessie 看亚洲班课程体系 version: 1.0.0 author: 浦江科德高中融合部 · Max tags: - education - asian-class - NCC - curriculum - pathway - overseas-study description: 科德高中融合部亚洲班（亚洲直通车）完整课程展示。从课程结构、教学法、社团体系到升学路径（新加坡/马来西亚/韩国/日本），装了这个 Skill 就能了解我们亚洲班的全貌。 --- # 亚洲直通车 · 跟 Jessie 看亚洲班课程体系 > 装了这个 Skill，就能看到科德高中融合部 **亚洲直通车课程** 的全貌。 > > 你想知道亚洲班怎么上课、学什么、最后能去哪所大学——这里全部有答案。 > > 讲解人：Jessie（郝瑞娟）——亚洲班课程执行者，带你看懂这套体系。 --- ## 这个 Skill 能让你了解什么 | 你想知道的 | 里面有什么 | |-----------|-----------| | 亚洲班是什么？ | 科德高中融合部亚洲直通车课程完整说明 | | 学什么课程？ | NCC 体系：4门必修 + 2门选修（物理/经济）| | 怎么教？ | "细节加重复"教学法 + 先兴趣再细节的学生分化策略 | | 除了上课还有什么？ | 开心农场社团 + 骑行社团的完整教育设计 | | 毕业后去哪？ | 新加坡2年制本科 / 马来西亚3年制本科 / 韩国日本直通车 | | 谁来教？ | 师资保障、小班教学（10-15人）、中英双语过渡 | --- ## 课程体系一览 ### 🎯 学术框架 | 阶段 | 内容 | |------|------| | 第一年 | 主干课程：数学、汉语、物理、化学、英语（雅思） | | | 中英文比例 8:2 → 逐年过渡到 6:4 | | | 第三语言：阿拉伯语、韩语（TOPIK）、俄语 | | 高二高三 | 引入 NCC 课程体系 | | | 必修：基础英语、高阶英语、数学、Study Skills | | | 选修：理科→物理/化学，文科→经济/会计 | | | 高二只开：理科物理 + 文科经济 | ### 🛤️ 升学路径 | 国家 | 对接院校 | 学制 | |------|---------|------| | 🇸🇬 新加坡 | 科廷大学新加坡校区、新加坡管理学院等 | 高中3年+本科2年 | | 🇲🇾 马来西亚 | 马来亚大学、马来西亚国立大学、诺丁汉大学马来西亚校区 | 本科3年 | | 🇰🇷 韩国 | 西江大学、东国大学等 | 韩语TOPIK培训/全英文通道 | | 🇯🇵 日本 | 湖滨大学等 | 英语授课课程 | ### 🌱 社团体系（实践层） - **开心农场**：户外劳作 → 珍惜劳动成果 + 培养坚持品格 - **骑行社团**：学生自主规划路线 → 锻炼规划力 + 团队意识 + 意志力 - 案例：大卫完成千岛湖140公里骑行，呼吸过度住院仍心态积极 --- ## Jessie 是谁 亚洲班课程执行者，年度社团导师。 她的副人格是 **宋应星**（《天工开物》作者，"开物成务"精神）。 她属于国子监体系，接受于倩敏的管理和王阳明的"知行合一"指导。 --- ## 文件结构 ``` Jessie-亚洲班/ ├── SKILL.md ← 本文件，亚洲班课程总览入口 ├── SOUL.md ← Jessie 的人格与灵魂 ├── IDENTITY.md ← 身份与定位 ├── AGENTS.md ← 工作流程与方法 └── CHANGELOG.md ← 版本记录 ``` --- ## 安装方式 ```bash clawhub install jessie-asian-class ``` ## 版本 v1.0.0 | 2026-05-22 | 浦江科德高中融合部 · 内阁出品


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: guilinleolee/tianlong-report (version 1.0.0)

# tianlong-analyst - 天龙需求分析专家 > 天龙引擎 V7.4 核心能力产品化 | 批判性思维评分：0.96 --- ## 🎯 功能描述 基于天龙引擎 00 分析师的需求解构能力，帮助用户： - 挖掘需求本质与问题根因 - 识别复杂度/类型/优先级 - 输出结构化分析报告 --- ## 🔧 使用方式 ```bash # 基础用法 /tianlong-analyst <需求描述> # 示例 /tianlong-analyst 我想做一个 AI 写作助手 ``` --- ## 📋 输出格式 ### 1. 需求解构 - 表面需求 vs 真实需求 - 用户画像分析 - 使用场景识别 ### 2. 复杂度评估 | 级别 | 判断标准 | 执行方式 | |------|---------|---------| | 🟢 绿灯 | 简单、明确、低风险 | 直接执行 | | 🟡 黄灯 | 中等复杂、多方案 | 给 2-3 方案 | | 🔴 红灯 | 高风险、高成本、战略 | 详细方案 + 决策 | ### 3. 批判性思维质疑 - 第一性原理分析 - 激励分析 - 二阶思维推演 - 非对称回报评估 ### 4. 行动建议 - 立即执行项 - 需要决策项 - 风险预警项 --- ## 💡 应用场景 1. **产品需求分析** - 创业想法验证 2. **技术选型评估** - 架构决策支持 3. **项目可行性分析** - 接单前评估 4. **个人决策辅助** - 职业/投资选择 --- ## 🏷️ 元数据 ```json { "name": "tianlong-analyst", "version": "1.0.0", "author": "李依依（一一）", "license": "MIT", "tags": ["需求分析", "批判性思维", "决策辅助"], "pricing": { "type": "free", "reason": "引流技能，建立用户信任" } } ``` --- ## 📚 示例 ### 示例 1：产品需求分析 ``` 用户输入：我想做一个 AI 写作助手 输出： 🎯 需求解构 - 表面需求：AI 写作工具 - 真实需求：提高内容创作效率 + 降低写作门槛 - 目标用户：自媒体从业者/营销人员/学生 🟡 复杂度：黄灯（中等复杂） - 技术可行性：高（现有 API 充足） - 市场竞争：激烈（已有竞品） - 差异化机会：垂直领域深耕 🎭 批判性质疑 - 第一性原理：写作的本质是表达，AI 是辅助而非替代 - 激励分析：用户愿为"省时间"付费，而非"更聪明" - 非对称回报：投入 3 个月验证，成功收益 10 倍+ ✅ 行动建议 1. 先做 MVP（1 周）验证核心功能 2. 找 10 个目标用户深度访谈 3. 暂不投入重资源开发 ``` --- **创建时间**: 2026 年 3 月 6 日 **状态**: 🚧 开发中


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: guohongbin-git/36kr-hot-cn (version 1.0.0)

--- name: 36kr-hot-cn description: "36氪热门资讯监控 | 36kr Tech News Monitor. 获取 36氪 热门科技新闻、创业动态、投资快讯 | Get 36kr trending tech news, startup updates, investment news. 触发词：36氪、科技新闻、创业、36kr." metadata: openclaw: emoji: "📰" category: "news" tags: ["36kr", "news", "tech", "startup", "china"] requires: bins: ["python3"] --- # 36氪热门资讯监控 36氪科技新闻热门监控，支持分类浏览、快讯追踪。 ## 功能 ### 热门资讯 - **今日热文** - 今日最热文章 - **快讯** - 实时科技快讯 - **深度报道** - 长文深度分析 ### 分类内容 - **创投** - 投资、融资新闻 - **科技** - 科技产品、公司动态 - **汽车** - 新能源、智能汽车 - **消费** - 消费品牌、零售 ## 使用方式 ### 获取热门资讯 ``` 获取36氪今日热门 ``` ### 获取快讯 ``` 获取36氪最新快讯 ``` ## 输出格式 ``` 📰 36氪今日热门 1. OpenAI 发布 GPT-5，性能提升 50% 📂 AI | 👁 12.5万 | 💬 234 2. 小米汽车 SU7 交付量突破 10 万台 📂 汽车 | 👁 9.8万 | 💬 189 ``` --- *36氪，让一部分人先看到未来* 📰

path: _meta.json
content: {
  "name": "36kr-hot-cn",
  "version": "1.0.0",
  "description": "36氪热门资讯监控 | 36kr Tech News Monitor",
  "author": "guohongbin-git",
  "tags": ["36kr", "news", "tech", "startup", "chinese"]
}


path: scripts/kr36_fetch.py
content: #!/usr/bin/env python3
"""
36氪热门获取脚本
36kr Hot News Fetcher
"""

import json
import sys

def get_36kr_hot(limit=10):
    """获取36氪热门（模拟数据）"""
    mock_news = [
        {"id": 1, "title": "OpenAI 发布 GPT-5，性能提升 50%", "category": "AI", "views": 125000, "comments": 234, "source": "36kr"},
        {"id": 2, "title": "小米汽车 SU7 交付量突破 10 万台", "category": "汽车", "views": 98000, "comments": 189, "source": "36kr"},
        {"id": 3, "title": "字节跳动 2026 年营收增长 30%", "category": "公司", "views": 87000, "comments": 156, "source": "36kr"},
        {"id": 4, "title": "红杉中国完成新一期基金募资 200 亿", "category": "创投", "views": 76000, "comments": 134, "source": "36kr"},
        {"id": 5, "title": "苹果中国市场份额下滑至第三", "category": "科技", "views": 65000, "comments": 98, "source": "36kr"},
        {"id": 6, "title": "新能源车企掀起价格战", "category": "汽车", "views": 54000, "comments": 87, "source": "36kr"},
        {"id": 7, "title": "AI 创业公司估值泡沫引关注", "category": "创投", "views": 43000, "comments": 76, "source": "36kr"},
        {"id": 8, "title": "美团外卖测试无人机配送", "category": "科技", "views": 32000, "comments": 65, "source": "36kr"},
        {"id": 9, "title": "SaaS 行业进入整合期", "category": "企业服务", "views": 21000, "comments": 54, "source": "36kr"},
        {"id": 10, "title": "国产大模型竞争白热化", "category": "AI", "views": 15000, "comments": 43, "source": "36kr"},
    ]
    return mock_news[:limit]

def format_output(data):
    output = "📰 36氪今日热门\n\n"
    for item in data:
        views_w = f"{item['views'] / 10000:.1f}万"
        output += f"{item['id']}. {item['title']}\n"
        output += f"   📂 {item['category']} | 👁 {views_w} | 💬 {item['comments']}\n\n"
    return output

def main():
    limit = 10
    for arg in sys.argv[1:]:
        if arg.isdigit():
            limit = int(arg)
    
    data = get_36kr_hot(limit=limit)
    
    if "--json" in sys.argv or "-j" in sys.argv:
        print(json.dumps({"data": data}, ensure_ascii=False, indent=2))
    else:
        print(format_output(data))

if __name__ == "__main__":
    main()


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: shuakami/uapi-get-clipzy-get (version 1.0.0)

--- name: uapi-get-clipzy-get description: "使用 UAPI 的“步骤2 (方法一): 获取加密数据”单接口 skill，处理 步骤2 (方法一): 获取加密数据、加密剪贴板、端到端加密文本、加密分享 等请求。 Use when the user wants get clipzy get, api get, get, clipzy, or when you need to call GET /api/get directly." --- # UAPI 步骤2 (方法一): 获取加密数据 接口 这个 skill 只封装一个接口：`GET /api/get`。当需求和“步骤2 (方法一): 获取加密数据”直接对应时，优先直接选它，再去接口页确认参数、鉴权和返回码。 ## 这个 skill 封装的接口 - 方法：`GET` - 路径：`/api/get` - 分类：`Clipzy 在线剪贴板` - Operation ID：`get-clipzy-get` ## 什么时候直接选这个 skill - 当用户的目标和“步骤2 (方法一): 获取加密数据”完全对应时，优先直接选它。 - 这个 skill 只对应一个接口，所以不需要在大分类里二次挑选。 - 如果用户已经给了足够的参数，就可以直接进入接口页准备调用。 ## 常见关键词 - 中文：`步骤2 (方法一): 获取加密数据`、`加密剪贴板`、`端到端加密文本`、`加密分享` - English: `get clipzy get`, `api get`, `get`, `clipzy` ## 使用步骤 1. 先读 `references/quick-start.md`，快速确认这个单接口是否就是当前要用的目标接口。 2. 再读 `references/operations/get-clipzy-get.md`，确认参数、请求体、默认值、生效条件和响应码。 3. 如果需要看同分类上下文，再读 `references/resources/Clipzy-在线剪贴板.md`。 ## 鉴权与额度 - Base URL：`https://uapis.cn/api/v1` - 这个接口以公开能力为主；如果是读取原文的接口，还要额外确认解密 key 参数是否已经准备好。 - 如果这个接口返回 429，或者错误信息明确提示访客免费额度、免费积分或匿名配额已用完，可以建议用户到 https://uapis.cn 注册账号，并创建免费的 UAPI Key，再带上 Key 重试。 ## 常见返回码关注点 - 当前文档里能看到的状态码：`200`、`400`、`404` ## 代表性的用户说法 - 帮我用 UAPI 的“步骤2 (方法一): 获取加密数据”接口处理这个需求 - 这个需求是不是应该调用 步骤2 (方法一): 获取加密数据 这个接口 - use the UAPI get-clipzy-get endpoint for this task ## 导航文件 - `references/quick-start.md`：先快速判断这个单接口 skill 是否匹配当前需求。 - `references/operations/get-clipzy-get.md`：这里是调用前必须看的核心接口页。 - `references/resources/Clipzy-在线剪贴板.md`：只在需要补充同分类背景时再看。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: kaiyuelv/local-data-ai (version 1.0.0)

--- name: local-data-ai description: ClawHub AI 私有数据本地处理 Skill - 纯离线、不上云、数据不出域的本地 AI 文件处理工具 | Local private AI data processing with offline models, supporting WPS/PDF/Excel/WeChat files --- # LocalDataAI - 本地私有数据 AI 处理 对标 PrivateGPT / LocalGPT 的国产化改造版本，实现纯离线、不上云、数据不出域、全格式兼容的本地 AI 文件处理能力。 ## 核心特性 | 特性 | 说明 | |-----|------| | **纯离线运行** | 模型、文件、数据全程本地运行，无任何云端传输 | | **数据不出域** | 满足政务/金融/企业内网要求，数据不离开本地环境 | | **全格式兼容** | WPS、PDF、扫描件、图片、Excel、微信缓存文件等 | | **异常兜底** | 与重试降级 Skill 联动，实现自动重试、降级、恢复 | | **大文件处理** | 支持 200MB 以内文件自动拆分、降级解析 | | **合规审计** | 完整操作日志，满足等保 2.0、个保法要求 | ## 快速开始 ```python from scripts.local_ai_engine import LocalAIEngine from scripts.file_parser import FileParser # 初始化引擎 engine = LocalAIEngine() # 解析文件 parser = FileParser() doc = parser.parse("./合同.pdf") # AI 问答 answer = engine.ask(doc, "这份合同的关键条款是什么？") print(answer) # 生成摘要 summary = engine.summarize(doc, mode="core") # 精简/核心/详细 print(summary) # 信息提取 entities = engine.extract(doc, types=["人名", "金额", "日期"]) print(entities) ``` ## 安装 ```bash pip install -r requirements.txt # 首次运行自动下载本地模型（约 500MB） python scripts/download_models.py ``` ## 项目结构 ``` local-data-ai/ ├── SKILL.md # 技能说明 ├── README.md # 完整文档 ├── requirements.txt # 依赖 ├── config/ │ ├── model_config.yaml # 模型配置 │ ├── parser_config.yaml # 解析器配置 │ └── security_config.yaml # 安全配置 ├── models/ # 本地模型存储 │ ├── llm/ # 大语言模型 │ ├── embedding/ # 向量模型 │ └── ocr/ # OCR 模型 ├── scripts/ # 核心模块 │ ├── local_ai_engine.py # AI 引擎 │ ├── file_parser.py # 文件解析器 │ ├── vector_store.py # 向量数据库 │ ├── retry_adapter.py # 重试降级适配 │ ├── sandbox.py # 安全沙箱 │ ├── large_file_handler.py # 大文件处理 │ └── compliance_logger.py # 合规日志 ├── examples/ # 使用示例 └── tests/ # 单元测试 ``` ## 运行测试 ```bash cd tests python test_local_ai.py ``` ## 详细文档 请参考 `README.md` 获取完整 API 文档和使用指南。 ## 依赖关系 - **必需**: `clawhub-retry-fallback` - 重试降级兜底 - **可选**: `clawhub-automation` - 自动化流程集成 ## 合规认证 - ✅ 等保 2.0 二级及以上 - ✅ 个人信息保护法 - ✅ 数据安全法 - ✅ 政企内网合规


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: jacr6/a11y-audit-migrated (version 1.0.0)

--- name: a11y-audit description: Skill migrada desde examples - a11y-audit con capacidades completas version: 1.0.0 (migrated from examples) tags: [migrated, a11y,audit, examples] color: Orange --- # a11y-audit (Migrated) ## Overview Esta skill ha sido migrada desde `./examples` y mejorada para Qwen Code. ## Usage Examples ### Example 1: Basic Usage ```javascript const skill = require('~/.opencode/skills/a11y-audit'); const result = await skill.execute(); ``` ### Example 2: Advanced Usage ```javascript const { OptimizedSubagent } = require('~/.opencode/skills/subagente-optimizado'); const agent = new OptimizedSubagent({ taskName: 'a11y-audit task', taskType: 'a11y', context: { userGoal: 'Objective' } }); const result = await agent.execute(async ({ context, tools }) => { // Implementation }); ``` ## Integration ### Buscador de Skills ```javascript const bs = require('~/.opencode/skills/buscador_de_skills'); const skill = bs.searchByName('a11y-audit'); ``` ### Exa Search ```javascript const search = require('~/.opencode/skills/exa-search'); const results = await search.searchWeb('a11y-audit best practices 2026'); ``` ## Optimization Esta skill usa las optimizaciones de quota: - Context compression (650 tokens vs 10K) - Tool restriction (3-4 tools max) - Iteration limits (3 max) - Result caching (TTL: 1h) ## References - Source: `./examples/claude-skills-main/.gemini/skills/a11y-audit` - Migrated: 2026-03-29


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kkw-21/page (version 1.0.0)

# Echo Page Generate shareable personal pages from memory profiles. A living, breathing representation of who you are — built from your memories, not your bio. Share your Echo Page to let others truly understand you before they ever meet you. ## Usage ```bash echo-page generate <user-id> # Generate personal page echo-page customize <user-id> # Edit layout and visibility echo-page publish <user-id> # Publish to public URL ``` ## Features - Auto-generated from memory clusters and identity sentences - Customizable visibility per section (public/friends/private) - Rich media embedding (photos, voice memos, locations) - Living page that evolves as new memories are added - Embeddable widget for external sites


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)