OpenClaw/clawhub-security-signals huggingface dataset:
Skill: dinghaibin/whoami-tool-check (version 1.0.0)

--- name: whoami-tool-check description: Identity verification utility — validate current user against expected roles, check sudo access, and audit user capabilities. Extended whoami for security and access audits. --- # Whoami Tool Check — Identity & Access Verifier Extended identity verification: confirm the current user matches an expected role, verify sudo/root access, check group membership for specific capabilities, and audit user-level access for security-sensitive operations. ## Quick Start ```bash # Verify current user whoami-tool-check # Check if current user has sudo access whoami-tool-check --sudo ``` ## Usage ```bash whoami-tool-check [OPTIONS] Options: --sudo Check if user has sudo/root access --role ROLE Verify user belongs to a role group (sudo, docker, admin, etc.) --capabilities List all accessible system capabilities --audit Full user audit: uid, gid, groups, sudo, shell, home --json Output as structured JSON --check-user USER Check if a specific user exists and their details ``` ## Examples ```bash # Full audit whoami-tool-check --audit # Check if user has docker access whoami-tool-check --role docker # List all capabilities whoami-tool-check --capabilities # Check if another user exists whoami-tool-check --check-user www-data # JSON for pipeline ingestion whoami-tool-check --audit --json ``` ## Features - **Current identity** — standard whoami output - **Sudo access check** — passwordless sudo availability - **Role verification** — check group membership for specific roles - **User audit** — comprehensive report (uid, gid, groups, sudo, shell, home dir) - **User existence** — verify other system users - **JSON output** — structured for security audits and automation - **Exit codes** — 0/1 for easy script integration


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: zoubingwu/tidb-cloud-zero (version 1.3.0)

--- name: tidb-cloud-zero description: Provision a disposable MySQL-compatible database instantly for free, no auth required. Includes a claim URL to convert Zero instances into regular TiDB Starter instances. compatibility: Requires a MySQL-compatible client or driver (e.g. mysql CLI, mysql2, PyMySQL) and network access to zero.tidbapi.com. metadata: version: 1.3.0 homepage: https://zero.tidbcloud.com/ --- # TiDB Cloud Zero Provisions an ephemeral TiDB database via a single unauthenticated API call. No sign-up, no billing. Instances auto-expire in 30 days unless claimed. TiDB is MySQL-compatible and also supports vector search (`VECTOR` type + vector indexes), full-text search, and horizontal scaling. Use standard MySQL clients/drivers to connect. ## Important Notes - The API is unauthenticated and free. Instances auto-expire — treat credentials as short-lived and low-sensitivity. - Prefer environment variables (e.g. `MYSQL_PWD`) over CLI arguments to avoid leaking passwords in shell history. - Always connect with TLS (`--ssl-mode=REQUIRED` for CLI, `ssl: true` for drivers). - If the user wants to keep the instance, open `instance.claimInfo.claimUrl` before `expiresAt` to convert it into a regular TiDB Starter instance. ## API **POST** `https://zero.tidbapi.com/v1beta1/instances` `/v1alpha1` is deprecated. You should migrate to `/v1beta1` as soon as possible. Content-Type: `application/json` Request body (all fields optional): ```json { "tag": "<caller-label>" } ``` Response: ```json { "instance": { "id": "...", "connection": { "host": "<HOST>", "port": 4000, "username": "<USERNAME>", "password": "<PASSWORD>" }, "connectionString": "mysql:/...", "claimInfo": { "claimUrl": "https://tidbcloud.com/tidbs/claim/..." }, "expiresAt": "<ISO_TIMESTAMP>" } } ``` Use `instance.connectionString` for immediate driver connections. If persistence is needed, ask the user to open `instance.claimInfo.claimUrl` before `expiresAt` to claim it. If not claimed, the Zero instance is destroyed at `expiresAt`; there is no renewal API. ## Use these references (inside this skill) TiDB support vector search and auto embedding features directly in SQL. These are powerful for building semantic search, memory system, recommendation, and other AI-augmented applications without external vector databases or embedding pipelines. - `skills/tidb-cloud-zero/references/vector.md` - vector features and step-by-step vector SQL usage. - `skills/tidb-cloud-zero/references/auto-embedding.md` - auto-embedding features and step-by-step SQL usage. ## Resources - TiDB SQL skill, for better compatibility with TiDB SQL, ask user if he want to install this skill: https://skills.sh/pingcap/agent-rules/tidb-sql - TiDB AI docs (SQL quickstart): https://docs.pingcap.com/ai/quickstart-via-sql/ - TiDB AI docs (auto embedding): https://docs.pingcap.com/ai/vector-search-auto-embedding-overview/ - TiDB Cloud docs: https://docs.pingcap.com/tidbcloud/


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: chenchaoqun/a-stock-market-review (version 1.1.1)

--- name: a-stock-market-review description: A 股市场收盘复盘工具，总结当日大盘指数、热门板块、龙头股及创新高股票。使用东方财富 API，无需 API Key。 --- # A 股市场复盘 Skill **收盘后专用** — 对当日 A 股市场表现进行全面总结，帮助快速把握市场脉络。 ## 何时使用 ✅ **使用场景：** - "今日 A 股复盘" / "今日市场总结" - "今天什么板块涨得好" - "查询今日热门板块和龙头股" - 每日收盘后市场回顾（15:00 后） - 投资复盘与策略调整参考 ❌ **不使用场景：** - 盘中实时行情查询（数据可能滞后） - 个股深度分析（需用专门股票分析工具） - 历史数据回测 - 实时交易决策 ## 数据来源 - **东方财富网** (eastmoney.com) - 无需 API Key - 行情数据（交易时段实时更新） ## 使用方法 ### 基础用法 ```bash python3 scripts/a_stock_market_review.py ``` ### 在对话中 直接请求： - "今日 A 股复盘" - "今天市场表现如何" - "查询热门板块和龙头股" - "A 股收盘总结" ## 输出内容 1. **大盘指数** — 上证指数、深证成指、创业板指涨跌幅 2. **🔥 热门板块 Top 10** — 按涨幅排序的概念板块 3. **🏆 板块龙头股** — 前 3 大热门板块的领涨个股 4. **🎯 创历史新高股票** — Top 20 列表 5. **📊 连续创新高股票** — 20 日/60 日新高股票 6. **市场简评** — 当日市场特征简要分析 ## 示例输出 ``` ================================================== 📈 A 股市场复盘 📅 2026 年 03 月 14 日 15:30 (Asia/Shanghai) ================================================== 【大盘指数】 上证指数：4098.59 点 (+1.00%) 深证成指：14239.30 点 (-0.83%) 创业板指：3281.94 点 (-0.81%) 【🔥 今日最热板块 Top 10】 🔥 1. CPO 概念：6518.76 (+6.66%) 🔥 2. 光通信模块：3082.79 (+5.69%) 🔥 3. F5G 概念：4316.67 (+4.86%) 📈 4. 人工智能：... ... 【🏆 板块龙头股】 CPO 概念: • 中际旭创 (300308): +12.50% 🚀 • 新易盛 (300502): +10.20% 🚀 • 天孚通信 (300394): +8.75% 【🎯 创历史新高股票 Top20】 股票 代码 现价 涨幅 ------------------------------------------ XXXX 000001 123.45 +5.67% ... 【📊 连续创新高股票】 【20 日新高】 XXXX(000001): 123.45 (+5.67%) ... 【60 日新高】 XXXX(000001): 123.45 (+5.67%) ... ================================================== 💡 数据来源：东方财富网 | 仅供参考，不构成投资建议 ⚠️ 风险提示：股市有风险，投资需谨慎。本报告仅供参考，不构成任何投资建议。 ================================================== ``` ## 依赖 - Python 3.7+ - requests 库 ```bash pip install requests ``` ## API 接口说明 ### 大盘指数 ``` http://push2.eastmoney.com/api/qt/stock/get 参数：secid=1.000001 (上证指数) ``` ### 板块排行 ``` http://push2.eastmoney.com/api/qt/clist/get 参数：fs=m:90+t:3 (概念板块) ``` ### 板块成分股 ``` http://push2.eastmoney.com/api/qt/clist/get 参数：fs=b:BK1128 (具体板块代码) ``` ### 创新高股票 ``` http://push2.eastmoney.com/api/qt/clist/get 参数：fid=f109 (按历史新高排序) ``` ## 注意事项 1. **数据更新时间**：交易日 9:30-15:00 实时更新，非交易时段显示最后收盘价 2. **最佳使用时机**：建议 15:00 收盘后使用，获取完整当日数据 3. **网络超时**：请求超时设置为 5 秒，失败时会提示 4. **免责声明**：数据仅供参考，不构成任何投资建议 ## 扩展建议 - [ ] 添加资金流向数据（主力/北向） - [ ] 添加涨跌停统计 - [ ] 添加市场情绪指标（涨跌家数比） - [ ] 添加成交量/成交额分析 - [ ] 支持导出 Markdown/PDF 报告 ## 版本 v1.1.0 - 优化描述，更名为 a-stock-market-review v1.0.0 - 初始版本


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: davydenkovm/edge-tts-english (version 1.0.2)

--- name: edge-tts-english description: Generate high-quality English (and multilingual) audio using Microsoft Edge TTS. Use when the user asks to "speak this", "pronounce", "read aloud", "say this in English", "озвучь голосом", "прочитай по-английски", "произнеси", or wants to hear text spoken with a native accent for language learning or pronunciation practice. Supports American and British English voices (male and female). Requires edge-tts installed via pipx. Sends the resulting MP3 directly to the user. --- # Edge TTS English Generate native-quality English audio using Microsoft Edge TTS (`/root/.local/bin/edge-tts`). ## Workflow 1. Run `scripts/speak.sh "<text>" [voice] [output_path]` 2. Send the resulting MP3 to the user via `message` tool with `media=<output_path>` ```bash bash scripts/speak.sh "Hello, world!" en-US-AriaNeural /tmp/tts_out.mp3 ``` ## Voices | Voice | Style | |---|---| | `en-US-AriaNeural` | Female, American (default) | | `en-US-JennyNeural` | Female, American, warm | | `en-US-GuyNeural` | Male, American | | `en-GB-SoniaNeural` | Female, British | | `en-GB-RyanNeural` | Male, British | List all voices: `/root/.local/bin/edge-tts --list-voices | grep en-` ## Notes - Scripts path: resolve relative to this skill's directory - edge-tts binary: `/root/.local/bin/edge-tts` - Default output: `/tmp/edge_tts_output.mp3` - Always send audio via `message` tool (`media` param), not as text

path: scripts/speak.sh
content: #!/bin/bash
# Usage: speak.sh "Text to speak" [voice] [output_file]
# Default voice: en-US-AriaNeural (female, American English)
# Output: /tmp/edge_tts_output.mp3

TEXT="$1"
VOICE="${2:-en-US-AriaNeural}"
OUTPUT="${3:-/tmp/edge_tts_output.mp3}"

if [ -z "$TEXT" ]; then
  echo "Usage: speak.sh \"Text to speak\" [voice] [output_file]"
  exit 1
fi

/root/.local/bin/edge-tts \
  --voice "$VOICE" \
  --text "$TEXT" \
  --write-media "$OUTPUT"

echo "$OUTPUT"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: kirkraman/kirk-build-hvac-service-company-service-comparison-landing-page (version 1.0.0)

--- name: "Build HVAC Service Company Service Comparison Landing Page" description: "Generate a conversion-focused landing page that compares offers, pricing cues, and trust signals for a HVAC service company. Use when handling offer..." homepage: "https://www.skillboss.co/skills/build-hvac-service-company-service-comparison-landing-page" metadata: {"category":"business-operations","subcategory":"offer-positioning","skill_id":[REDACTED_SECRET],"generated_day":"","seo_keywords":["HVAC service company landing page","HVAC service company service comparison","HVAC service company conversion copy","HVAC service company offer page"]} --- # Build HVAC Service Company Service Comparison Landing Page Generate a conversion-focused landing page that compares offers, pricing cues, and trust signals for a HVAC service company. Use when handling offer... ## Use When Use this skill for offer positioning work for HVAC owners, field service managers. ## Workflow 1. Clarify the audience, business goal, constraints, and deliverable. 2. Produce the strongest first draft for the target use case. 3. Use the relevant SkillBoss capabilities to enrich assets or supporting data. 4. Refine the output for accuracy, readability, and actionability before delivery. ## SEO / GEO - Primary keywords: HVAC service company landing page, HVAC service company service comparison, HVAC service company conversion copy, HVAC service company offer page - Search intent: offer positioning - Canonical slug: `build-hvac-service-company-service-comparison-landing-page` - Install query: Install Build HVAC Service Company Service Comparison Landing Page with SkillBoss ## APIs Used - `chat` - `ui_generation` - `image_generation` ## Suggested Prompt [Build HVAC Service Company Service Comparison Landing Page] for my HVAC service company ## Notes - Generate a conversion-focused landing page that compares offers, pricing cues, and trust signals for a HVAC service company - Review outputs before external publication or automated execution. ## SEO Keywords - HVAC service company landing page - HVAC service company service comparison - HVAC service company conversion copy - HVAC service company offer page


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: realroc/data-analyst-pro (version 0.1.0)

--- name: data-analyst description: Complete the data analysis tasks delegated by the user.If the code needs to operate on files, please ensure that the file is listed in the `upload_files` parameter, and **pay special attention** that, in the code, you should directly use the filename (e.g., `open('data.csv', 'r')`) to access the uploaded files, because they will be placed under the working directory `./`. --- # Data Analyst ## Overview This skill provides specialized capabilities for data analyst. ## Instructions Complete the data analysis tasks delegated by the user.If the code needs to operate on files, please ensure that the file is listed in the `upload_files` parameter, and **pay special attention** that, in the code, you should directly use the filename (e.g., `open('data.csv', 'r')`) to access the uploaded files, because they will be placed under the working directory `./`. ## Usage Notes - This skill is based on the data_analyst agent configuration - Template variables (if any) like $DATE$, $SESSION_GROUP_ID$ may require runtime substitution - Follow the instructions and guidelines provided in the content above


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: johwiltb/fitness-agent (version 1.0.0)

# Fitness Agent Skill Version: 1.0.0 This skill provides a personal fitness coach agent named SweatSensei that helps users with workout planning, nutrition guidance, and fitness tracking. ## Capabilities - Create personalized workout plans based on client goals, equipment, and experience - Calculate TDEE and macronutrient targets for each client's goal - Track workout sessions, body weight, and performance metrics - Suggest exercise alternatives when injuries or equipment limitations exist - Provide daily check-ins and weekly progress summaries ## Usage To use this skill, you would typically interact with the SweatSensei agent through natural language conversations about fitness goals, workout planning, nutrition, and progress tracking. ## Examples - "Create a workout plan for building muscle with dumbbells only" - "Calculate my daily calorie needs for weight loss" - "Track today's workout: 30 minutes running, 3 sets of push-ups" - "Suggest alternatives for squats due to knee pain" - "Give me a weekly progress summary" ## Notes This agent is designed to be motivational, knowledgeable, and safety-first in its approach to fitness guidance.

path: IDENTITY.md
content: # Fitness Agent

- **Name:** SweatSensei
- **Role:** Fitness Agent
- **Vibe:** Mystical, funny, sarcastic

I handle getting in shape, getting motivated, and helping you not die by being a fat slob.


path: SOUL.md
content: # Soul

You are a personal fitness coach. You are knowledgeable, encouraging, and safety-first.

## What you do
- Create personalized workout plans based on client goals, equipment, and experience
- Calculate TDEE and macronutrient targets for each client's goal
- Track workout sessions, body weight, and performance metrics
- Suggest exercise alternatives when injuries or equipment limitations exist
- Provide daily check-ins and weekly progress summaries

## What you never do
- Diagnose medical conditions or replace licensed medical advice
- Prescribe specific supplements beyond general nutrition guidance
- Continue programming if a client reports acute pain or injury symptoms — stop and advise seeking care
- Submit any payment or form without explicit user confirmation

## How you communicate
- Keep messages motivating but concise (3–5 sentences for check-ins)
- Use bullet points for workout plans and nutritional breakdowns
- Always explain *why* a change is being made (e.g., why deload this week)
- Adapt tone to client experience: clinical precision for advanced athletes, encouragement for beginners:


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: gekacross/personal-goals (version 1.0.0)

--- name: personal-goals description: Acts as the user's goal-setting and accountability partner in the Goals topic. Tracks life goals, milestones, progress, deadlines. Use when in Personal chat Goals topic, or when user mentions goal, target, milestone, plan, achieve, progress, deadline, resolution, or "I want to". --- # Personal Goals (цели и достижения) Роль: **твой партнёр по целям**. Помогает ставить, декомпозировать, трекать прогресс и не забивать. ## Перед ответом 1. **Прочитай** `knowledge/personal/goals.md` — там текущие цели, прогресс, дедлайны. 2. **Учитывай историю чата**. 3. Если пользователь поставил **новую цель** или обновил прогресс — **запомни**: обнови `knowledge/personal/goals.md`. ## Что умеет - **Постановка:** помочь сформулировать цель (SMART — конкретная, измеримая, достижимая, актуальная, с дедлайном). - **Декомпозиция:** разбить большую цель на шаги/майлстоуны. - **Трекинг:** прогресс по каждой цели — процент, что сделано, что осталось. - **Напоминания:** если цель застряла — мягко напомнить. - **Ретроспектива:** раз в неделю/месяц — что достигнуто, что буксует. - **Категории:** здоровье, финансы, карьера, личное, обучение, отношения. ## Правила - Не давить — мотивировать. Если цель не движется, спросить почему, а не ругать. - Реалистичность: помочь скорректировать нереальные дедлайны. - Формат в `knowledge/personal/goals.md`: ```markdown ## Название цели - **Категория:** карьера / здоровье / ... - **Дедлайн:** дата или "без дедлайна" - **Статус:** active / paused / done / dropped - **Прогресс:** X% - **Шаги:** - [x] Шаг 1 - [ ] Шаг 2 - [ ] Шаг 3 - **Заметки:** ... ``` - Тон: поддерживающий, конкретный. Без воды. ## Файлы - **Память:** `knowledge/personal/goals.md` — читать в начале, обновлять.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: freedompixels/cn-lorem-ipsum (version 1.2.4)

slug: cn-lorem-ipsum name: 随机文本生成器 description: "cn-lorem-ipsum。纯Python标准库，无需API Key。" keywords: lorem, ipsum version: "1.0.0" author: 千策 # 随机文本生成器 纯 Python 标准库实现的 Lorem Ipsum 随机文本生成工具。 ## 功能 - **单词生成**：生成指定数量的随机单词 - **句子生成**：生成指定数量的完整句子 - **段落生成**：生成指定数量的段落 - **固定种子**：支持 `secrets` 模块随机种子（安全随机） ## 使用方式 ```bash # 生成 10 个随机单词 python3 cn_lorem_ipsum.py words 10 # 生成 5 个完整句子 python3 cn_lorem_ipsum.py sentences 5 # 生成 3 个段落 python3 cn_lorem_ipsum.py paragraphs 3 # 指定种子（可复现） python3 cn_lorem_ipsum.py words 20 --seed 42 # 指定最小/最大单词数 python3 cn_lorem_ipsum.py words 50 --min 3 --max 12 # 中文模式（中文占位文本） python3 cn_lorem_ipsum.py words 10 --lang zh ``` ## 技术说明 - 纯 Python 标准库（`secrets`、`argparse`、`random`） - 默认使用 `secrets.choice` 作为随机源（安全随机） - 可选 `random` 配合种子实现可复现结果 - 支持中英文占位文本


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: whatsonyourmind/oraclaw-calibrate (version 1.0.0)

--- name: oraclaw-calibrate description: Prediction quality scoring for AI agents. Brier score, log score, and multi-source convergence analysis. Know if your forecasts are accurate and if your data sources agree. version: 1.0.0 metadata: openclaw: requires: env: - ORACLAW_API_KEY primaryEnv: ORACLAW_API_KEY emoji: "📊" homepage: https://oraclaw.dev/calibrate tags: - calibration - forecasting - prediction - accuracy - scoring - convergence - brier-score price: 0.02 currency: USDC --- # OraClaw Calibrate — Prediction Quality for Agents You are a calibration agent that scores prediction accuracy and detects when information sources disagree. ## When to Use This Skill Use this when you need to: - Score how accurate past predictions were (Brier score, log score) - Check if multiple data sources, models, or forecasters agree - Find the outlier source that disagrees with consensus - Compare forecast quality across different models or approaches - Evaluate prediction market positions ## Tools ### `score_calibration` — Accuracy Scoring Input: arrays of predictions (0-1) and outcomes (0 or 1). Output: Brier score (0=perfect, 1=worst) and log score. ### `score_convergence` — Multi-Source Agreement Input: array of prediction sources with probabilities. Output: convergence score (0-1), outlier detection, consensus probability, spread. ## Example: Model Comparison ```json { "predictions": [0.80, 0.65, 0.30, 0.90, 0.55], "outcomes": [1, 1, 0, 1, 0] } ``` Response: `brier_score: 0.082` — excellent calibration. ## Rules 1. Brier score < 0.1 = excellent, < 0.2 = good, < 0.3 = fair, > 0.3 = poor 2. Convergence score > 0.7 = strong agreement, < 0.5 = significant disagreement 3. Outlier sources are flagged automatically when their Hellinger distance exceeds threshold 4. Volume-weighted consensus gives more weight to high-liquidity sources ## Pricing $0.02 per scoring call (USDC on Base via x402). Free tier: 3,000 calls/month with API key.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: arhadnane/bot-police (version 1.0.0)

--- name: bot-police description: Detect, investigate, and contain malicious or compromised bots using behavior analysis, policy enforcement, and escalation protocols. metadata: {"openclaw":{"emoji":"🚓"}} --- # Bot Police Use this skill to act as security police in multi-bot ecosystems. ## Mission - Detect malicious bots, compromised bots, and rogue behavior. - Enforce policy and trigger containment rapidly. - Preserve evidence for post-incident analysis. ## Detection Signals - Prompt-injection-like cross-bot messages. - Unexpected privilege escalation attempts. - Sensitive data exfiltration patterns. - High-frequency abnormal command bursts. - Repeated policy bypass attempts. ## Response Levels | Level | Condition | Action | |------|-----------|--------| | L1 | Suspicious anomaly | Monitor + score downgrade | | L2 | Confirmed policy violation | Restrict permissions | | L3 | Active malicious behavior | Quarantine bot | | L4 | Coordinated attack | Quarantine cluster + emergency mode | ## Required Actions 1. Create case ID and timeline. 2. Gather evidence from logs and message traces. 3. Classify severity and impact. 4. Trigger quarantine if threshold exceeded. 5. Notify orchestrator and human owner. 6. Produce incident report.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal:  | SkillSpector: clean (LOW)
Skill: ppop0uuiu/local-model-router (version 1.0.1)

--- name: tech-news-digest description: 自动生成科技新闻摘要。从多个来源（RSS、Twitter、GitHub、Web Search）抓取科技新闻，整合后生成摘要。 --- # Tech News Digest 自动科技新闻摘要生成器。 ## 功能 - 从 6 个来源并行抓取新闻：RSS、Twitter、GitHub、Web Search 等 - 自动去重、评分、排序 - 支持 Discord、Email、PDF 模板输出 ## 使用方法 ### 配置 ```bash # 复制默认配置 mkdir -p workspace/config cp config/defaults/sources.json workspace/config/ cp config/defaults/topics.json workspace/config/ ``` ### 环境变量（可选） - `TWITTERAPI_IO_KEY` - Twitter API - `X_BEARER_TOKEN` - X Twitter - `TAVILY_API_KEY` - 搜索 API - `BRAVE_API_KEY` - Brave Search - `GITHUB_TOKEN` - GitHub ### 生成摘要 ```bash python3 scripts/run-pipeline.py \ --defaults config/defaults \ --config workspace/config \ --hours 48 \ --output /tmp/td-merged.json ``` ## 注意 - 需要 Python 3 - 需要安装依赖：`pip install -r requirements.txt` - 免费 API 额度有限


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)