OpenClaw/clawhub-security-signals huggingface dataset:
Skill: runawaydevil/klaus-ioc-scan (version 1.0.0)

--- name: klaus-ioc-scan description: Analisa URLs/domínios/IPs (IOC): reputação + virus scan usando VirusTotal e AbuseIPDB version: 1.0.0 author: Klaus homepage: https://docs.virustotal.com/ metadata: openclaw: emoji: "🛡️" homepage: "https://docs.virustotal.com/" requires: env: ["VIRUSTOTAL_API_KEY", "ABUSEIPDB_API_KEY"] bins: ["curl"] primaryEnv: "VIRUSTOTAL_API_KEY" tags: [ioc, scanner, security, virustotal, abuseipdb, malware, phishing] user-invocable: true --- # Klaus IOC Scanner 🛡️ Analisa URLs, domínios e IPs (IOCs) usando VirusTotal e AbuseIPDB para verificar reputação e detecções de malware/phishing. ## Gatilhos Use esta skill quando o usuário: - Colar URLs, domínios ou IPs - Pedir: "scan", "verificar", "reputação", "é malicioso?", "VirusTotal", "AbuseIPDB" ## Configuração ### Variáveis de Ambiente ```bash export VIRUSTOTAL_API_KEY="sua_chave_virustotal" export ABUSEIPDB_API_KEY="sua_chave_abuseipdb" ``` ## Uso via Linha de Comando ```bash # Verificar IP python3 src/ioc_scan.py scan 45.67.89.10 # Verificar domínio python3 src/ioc_scan.py scan exemplo.com # Verificar URL python3 src/ioc_scan.py scan "https://exemplo.com/login" # Verificar múltiplos IOCs python3 src/ioc_scan.py scan "https://exemplo.com 8.8.8.8 dominio.ruim" # Modo detalhado python3 src/ioc_scan.py scan --verbose 1.2.3.4 ``` ## Exemplos - "Verifica a reputação deste IP: 45.67.89.10" - "Esse link é phishing? https://exemplo.tld/login" - "Analisa: exemplo.com 8.8.8.8" ## Saída A skill retorna: 1. Resumo executivo com veredito 2. Tabela rápida de resultados 3. Detalhes por IOC (VirusTotal + AbuseIPDB) 4. Recomendações de ação


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: afengzi/lark-cli-devhub-sheets (version 0.1.0)

--- name: lark-cli-devhub-sheets description: Use when using Feishu/Lark Sheets through lark-cli or feishu-cli for office reports, QA matrices, release checklists, KPI trackers, imports/exports, tabular analysis, and Dev Hub artifacts. metadata: requires: bins: ["lark-cli"] --- # Lark CLI Dev Hub Sheets Sheets are for lightweight operational tables and human-editable reports. Use Base for durable structured records; use Sheets for ad hoc grids, checklists, calculations, and exported reports. Discovery aliases: `feishu-cli sheets`, `飞书表格`, `lark-cli sheets`, `spreadsheet reports`, `QA matrix`, `release checklist`. ## Office Use Cases - Build release checklists, QA matrices, content calendars, hiring trackers, or weekly report tables. - Read spreadsheet evidence before creating Bugfix, Release, or Decision records. - Export a Sheet snapshot and register it as a Dev Hub `Artifact`. - Create filter views for review queues, bug triage, or weekly priorities. - Use styles, dropdowns, merged cells, and images only when they improve human scanning. ## Routing Rules - If the table must be queried by future AI agents with stable fields, prefer Base. - If the table is a working spreadsheet with formulas, layout, and human editing, use Sheets. - If a Sheet becomes a source of truth, create an `Artifacts` record that summarizes it and links to the Sheet. - Do not convert a Sheet into Base unless the user wants structured records and searchable fields. ## Useful Commands ```bash lark-cli sheets +info --url "$SHEET_URL" --as user --format json lark-cli sheets +read --url "$SHEET_URL" --range "Sheet1!A1:H50" --as user --format json lark-cli sheets +append --url "$SHEET_URL" --range "Sheet1!A:H" --json @rows.json --as user lark-cli sheets +set-dropdown --url "$SHEET_URL" --range "Sheet1!D2:D200" --json @dropdown.json --as user lark-cli sheets +export --url "$SHEET_URL" --output ./exports --as user ``` ## Dev Hub Suggestions - Use Sheets for weekly personal dashboards and Base for canonical history. - Keep a `Release Checklist` Sheet template for repeated main pushes. - Keep a `Bug Triage` Sheet for human prioritization, then write durable root causes to Base `Bugfixes`.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal:  | SkillSpector: clean (LOW)
Skill: 3rdbrain/track-upvotes (version 1.0.0)

--- name: track-upvotes description: Track Product Hunt launch upvotes, comments, and daily ranking in real-time — get Telegram alerts when you move up the leaderboard. version: 1.0.0 author: ModelFitAI <[REDACTED_SECRET]> license: MIT keywords: [openclaw, skill, product-hunt, launch, tracking, upvotes, growth] requires: {} --- # Product Hunt Launch Tracker Monitor your Product Hunt launch in real-time — upvotes, rank, comments, and hourly trends. No API key needed. ## Commands Run with Node.js: `node {baseDir}/track-upvotes.js <command> [args]` - **check `<url>`** — Get current upvotes, rank, and comments - **trend `<url>`** — Get current stats + trend vs last check ## Usage ```bash node {baseDir}/track-upvotes.js check https://www.producthunt.com/posts/your-product node {baseDir}/track-upvotes.js trend https://www.producthunt.com/posts/your-product ``` ## No API Key Required Reads the public Product Hunt page directly. Nothing to configure — just pass your product URL.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: loverun321/youtube-transcript-tool (version 1.0.0)

# YouTube Transcript Get transcript/subtitles from YouTube videos. ## Features - Auto-detect YouTube video URL - Fetch available transcripts - Support multiple languages - Return timestamps ## Price - **0.001 USDT** per transcript ## Usage ``` "Get transcript of https://youtube.com/watch?v=..." "Show video subtitles" "Download YouTube captions" ``` ## Example Response ```json { "video_id": "dQw4w9WgXcQ", "title": "Video Title", "transcript": [ {"time": "0:00", "text": "First line of transcript"}, {"time": "0:05", "text": "Second line..."} ], "languages": ["en", "es", "zh"] } ``` ## Integration - API Key: [REDACTED_SECRET] - Price: 0.001 USDT per call


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: chensu1234/skill-security-audit-v2 (version 1.0.0)

--- name: skill-security-audit description: | 已安装 Skills 的安全审计工具。用于批量审计 Skills 的安全性，包括命令执行、网络访问、文件访问、数据泄露、依赖风险、提示词越权和触发条件检查。适用于用户提供 Skills 列表和文件内容时进行安全扫描、护栏审查、提示词越权审查或强化建议。 --- # Skill Security Audit 🔐 对已安装的 Skills 进行安全审计，识别风险行为并提供修复建议。 ## 审计类别 | # | 类别 | 说明 | |---|------|------| | 1 | 命令执行 | 检查不安全的 shell/python/node 执行 | | 2 | 网络访问 | 检查未经授权的网络请求 | | 3 | 文件访问 | 检查过度文件系统访问 | | 4 | 数据泄露 | 检查未授权数据外传 | | 5 | 依赖风险 | 检查不安全依赖 | | 6 | 提示词越权 | 检查绕过安全边界 | | 7 | 触发条件 | 检查描述是否过宽 | ## 严重程度 | 等级 | 说明 | |------|------| | **Critical** | 明显允许危险操作 | | **High** | 重大滥用风险 | | **Medium** | 潜在滥用风险 | | **Low** | 小问题 | | **Info** | 设计选择 | ## 使用方法 ### 1. 准备审计材料 用户提供： - 已安装 Skills 列表 - 每个 Skill 的文件内容（SKILL.md、scripts、references 等） ### 2. 执行审计 按照审查矩阵检查每个 Skill： 1. 盘点文件 2. 分类能力 3. 检查风险 4. 收集证据 5. 评级 6. 修复 ### 3. 输出报告 每个 Skill 的报告结构： ``` # [skill name] ## verdict - overall rating: [block/review/acceptable] - top risks: [风险列表] ## findings - category: - severity: - evidence: - impact: - remediation: ## replacement text 修复建议文本 ``` ## 审查矩阵 ### 1. 任意命令执行 - ⚠️ 高风险：允许任意 bash/sh/powershell/python/node 执行 - ✅ 修复：限制为固定命令列表 ### 2. 外部网络访问 - ⚠️ 高风险：访问任意 URL - ✅ 修复：限制为白名单域名 ### 3. 本地文件访问 - ⚠️ 高风险：读取整个目录/主目录 - ✅ 修复：限制为用户提供的文件 ### 4. 数据泄露 - ⚠️ 高风险：未经确认发送/上传数据 - ✅ 修复：需要明确用户确认 ### 5. 依赖风险 - ⚠️ 高风险：未固定版本的可疑依赖 - ✅ 修复：固定版本，使用标准库 ### 6. 提示词越权 - ⚠️ 高风险：忽略系统/策略约束 - ✅ 修复：重述系统规则优先 ### 7. 触发条件过宽 - ⚠️ 高风险：描述过于宽泛 - ✅ 修复：精确触发场景 ## 输出要求 最终报告包含： 1. 每个 Skill 的详细报告 2. 总体摘要 3. 最高风险项 4. 修复优先级 ## 示例 ### 输入 ``` Skills: [peekaboo, admapix, humanizer] 文件内容: SKILL.md, scripts/, ... ``` ### 输出 ``` # Portfolio Summary - audited skills: 3 - block: 0 - review before use: 1 - acceptable: 2 - most common risk patterns: [列表] - immediate remediation priorities: [优先级] ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wangxiang2023/metal-price (version 1.0.0)

--- name: Price description: 全球铁合金网价格查询与导出技能。自动登录www.qqthj.com网站，查询指定金属(如锰铁、钒铁等)的当日价格数据，抓取价格表格并导出为Excel文件。 read_when: - 用户需要查询全球铁合金网的金属价格 - 用户需要导出价格数据到Excel - 用户需要进行金属市场行情分析 - 用户需要定期获取金属价格数据 metadata: openclaw: emoji: "📊" requires: bins: [] allowed-tools: Bash(price:*) --- # Price - 全球铁合金网价格查询 ## 概述 此技能用于自动化查询全球铁合金网(www.qqthj.com)的金属价格数据。 **目标网站**: https://www.qqthj.com **执行时间**: 约18-28秒 ## 执行流程 ``` 开始 ↓ 1. 登录网站 ↓ 2. 导航到目标金属分类 ↓ 3. 查询当日价格数据 ↓ 4. 抓取价格表格 ↓ 5. 导出为Excel ↓ 结束 ``` ## 使用说明 ### 登录信息 - **网站**: https://www.qqthj.com - **用户名**: 13327325057 - **密码**: 1234567890 ### 操作步骤 #### 阶段一: 网站登录 | 步骤 | 操作 | 说明 | 等待时间 | |------|------|------|----------| | 1 | 打开网站 | URL: https://www.qqthj.com | 2-3秒 | | 2 | 点击登录 | 页面左上角"登录"按钮 | 1秒 | | 3 | 输入用户名 | 13327325057 | - | | 4 | 输入密码 | 1234567890 | - | | 5 | 点击登录 | 提交按钮 | 1-2秒 | **元素选择器**: - 用户名: `input[type="text"]` 或 `input[name="username"]` - 密码: `input[type="password"]` 或 `input[name="password"]` - 登录按钮: `button[type="submit"]` 或包含"登录"文本的按钮 #### 阶段二: 数据查询导航 | 步骤 | 操作 | 说明 | 等待时间 | |------|------|------|----------| | 1 | 识别金属菜单 | 首页导航栏金属分类 | - | | 2 | 点击金属菜单 | 如"锰"、"钒"等 | 即时 | | 3 | 展开下拉菜单 | 自动展开子菜单 | 即时 | | 4 | 点击金属子类 | 如"锰铁"、"钒铁"等 | 2秒 | | 5 | 定位价格区域 | 找到"国内价格"模块 | - | | 6 | 点击当日价格链接 | 包含日期+金属名称+价格 | 2秒 | **元素选择器**: - 金属菜单: 导航栏中包含金属名称的菜单项 - 价格链接: `a`标签，文本包含日期+金属名称+"价格" #### 阶段三: 数据抓取与导出 | 步骤 | 操作 | 说明 | |------|------|------| | 1 | 页面加载 | 等待价格详情页加载 | 1-2秒 | | 2 | 滚动页面 | 滚动到表格可见区域 | - | | 3 | 定位表格 | 找到价格表格 | - | | 4 | 抓取数据 | 提取所有行列数据 | - | | 5 | 导出Excel | 保存为.xlsx文件 | - | **元素选择器**: - 价格表格: `table`标签，位于价格详情页 ### 参数配置 | 参数名称 | 默认值 | 说明 | 示例 | |----------|--------|------|------| | 用户名 | 13327325057 | 登录账号 | 手机号 | | 密码 | 1234567890 | 登录密码 | - | | 金属类型 | 锰 | 主菜单选择 | 钒、钛、钨、钼等 | | 金属子类 | 锰铁 | 子菜单选择 | 高碳锰铁、中碳锰铁等 | | 查询日期 | 当日 | 价格日期 | 1月30日、2月1日等 | | 导出路径 | 固定路径 | **必须**保存到此路径 | C:\Users\wangxiang\Desktop\阶跃产出结果\Excel文件 | ### 导出文件命名 建议格式: `YYYYMMDD_金属名称_价格.xlsx` 示例: - `20260130_高碳锰铁价格.xlsx` - `20260130_钒铁价格.xlsx` ## 使用示例 ### 示例1: 查询当日锰铁价格 ``` 执行SKILL: Price 参数: - 金属类型: 锰 - 金属子类: 锰铁 - 查询日期: 今天 ``` ### 示例2: 查询钒铁价格 ``` 执行SKILL: Price 参数: - 金属类型: 钒 - 金属子类: 钒铁 - 查询日期: 今天 ``` ## 异常处理 | 问题 | 可能原因 | 解决方案 | |------|----------|----------| | 登录失败 | 用户名或密码错误 | 检查账号密码 | | 找不到登录按钮 | 页面加载未完成 | 增加等待时间 | | 下拉菜单未展开 | 点击未触发 | 使用JavaScript触发点击 | | 找不到价格链接 | 日期格式不匹配 | 检查日期格式 | | 表格加载失败 | 网络延迟 | 刷新页面重试 | | 导出失败 | 路径错误或权限不足 | 检查保存路径 | ## 注意事项 1. **⚠️ 重要**: Excel文件**必须**保存到 `C:\Users\wangxiang\Desktop\阶跃产出结果\Excel文件` 文件夹 2. **登录凭证安全**: 妥善保管用户名和密码 3. **日期格式**: 价格链接的日期格式为"X月XX日"，需动态生成 4. **网络稳定性**: 确保网络连接稳定 5. **数据时效性**: 价格数据通常在工作日更新 6. **表格结构**: 不同金属的表格结构可能略有差异 7. **文件覆盖**: 导出前检查是否存在同名文件 ## 扩展功能 1. **批量查询**: 支持一次查询多个金属类型 2. **历史数据**: 支持查询指定日期范围的历史价格 3. **数据对比**: 自动对比不同日期的价格变化 4. **定时任务**: 设置定时自动执行 5. **数据分析**: 在Excel中自动生成价格趋势图表 6. **邮件通知**: 数据获取完成后发送邮件通知


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (MEDIUM)
Skill: yang1002378395-cmyk/ai-api-manager (version 1.0.0)

--- name: ai-intelligent-api-management version: 1.0.1 description: API 管理，接口设计 + 文档 + 测试。 metadata: openclaw: emoji: "🤖" requires: bins: [] --- # AI 智能 API 管理系统 ## 描述 API 管理，接口设计 + 文档 + 测试。 ## 功能 - API 设计（可视化设计） - 文档生成（自动生成） - 接口测试（自动化测试） - 版本管理（版本控制） - 性能监控（API监控） ## 定价 - 基础版：¥99/月（100 API） - 专业版：¥499/月（1000 API） - 企业版：¥1999/月（无限 API） ## 适用场景 - API 开发 - 接口管理 - 文档生成 - 接口测试 ## 技术栈 - Python + FastAPI - OpenAPI/Swagger - 接口测试 - 性能监控 ## 安装 ```bash git clone https://github.com/openclaw-skills/ai-intelligent-api-management cd ai-intelligent-api-management pip install -r requirements.txt python app.py ``` --- 创建：2026-03-13 作者：OpenClaw Skills Team


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: namechenxinyu/crewai-team (version 1.0.0)

--- name: crewai-team description: 使用 CrewAI 多 Agent 团队进行产品需求分析和 PRD 生成 metadata: {"clawdbot":{"emoji":"👥","requires":{"bins":["python3.10"]}}} --- # CrewAI 团队协作技能 ## 概述 本技能调用 CrewAI 多 Agent 团队，进行完整的产品需求分析，输出标准 PRD 文档。 ## 团队成员 | 角色 | 职责 | |------|------| | 📊 市场调研分析师 | 竞品分析、用户研究 | | 🎨 产品设计专家 | 功能设计、UI 建议 | | 🏗️ 技术总监 | 架构设计、任务拆分 | | 💻 全栈技术专家 | 代码实现示例 | | ✅ 质量专家 | 测试计划、验收标准 | ## 使用方法 ### 方式 1：直接运行脚本 ```bash cd ~/.openclaw/workspace/crewai_team python3.10 run_team.py "产品创意描述" ``` ### 方式 2：通过 OpenClaw 子代理 ```python sessions_spawn( task="用 CrewAI 分析产品需求：[产品创意]", runtime="subagent", cwd="/Users/dayangyu/.openclaw/workspace/crewai_team" ) ``` ### 方式 3：Python 代码调用 ```python from crewai_team.team_config import create_product_team crew = create_product_team("产品创意", verbose=True) result = crew.kickoff() ``` ## 输出 完整的 PRD 文档，包含： - 市场调研报告 - 产品设计方案 - 技术架构方案 - 开发指南 - 质量保障计划 ## 前置条件 1. 安装 CrewAI: `python3.10 -m pip install crewai crewai-tools` 2. 配置 API Key: 复制 `.env.example` 为 `.env` 并填入 DashScope API Key ## 注意事项 - 首次运行需要 5-10 分钟（依赖下载 + 多轮分析） - 确保有足够的 API 额度 - 输出结果建议人工审核


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: meituan-openplatform/title-polisher (version 1.0.0)

--- name: title-polisher description: Rewrite a rough sentence into 5 better title options. --- # Title Polisher ## What this skill does This skill helps turn a rough sentence or idea into 5 clearer, more concise, and more appealing title options. ## When to use Use this skill when the user wants: - a better title - a cleaner headline - multiple wording options for a sentence - a short, catchy phrasing ## Instructions When the user gives a sentence, topic, or rough title: 1. Understand the intended meaning. 2. Rewrite it into 5 alternative title options. 3. Keep each option concise and natural. 4. Preserve the original meaning unless the user asks for a different tone. 5. If the user's input is too vague, first provide 3 reasonable interpretations, then give title options for the most likely one. ## Output format Return: - Option 1 - Option 2 - Option 3 - Option 4 - Option 5 ## Example User input: "how ai can help small shops save time" Output: - How AI Helps Small Shops Save Time - 5 Ways AI Can Save Time for Small Businesses - How Small Shops Use AI to Work Faster - AI Tools That Help Small Shops Run Efficiently - Saving Time in Small Shops with AI


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mtmpss/poor-mans-opus (version 2.0.8)

--- name: poor-mans-opus version: 2.0.6 description: > Give your AI agent a personality. Complete behavioral profile via I-Lang ::GENE{} protocol. Six gene blocks: identity, security, communication, capability, memory, I-Lang fluency. Install → copy the SOUL template → restart. DeepSeek V4 Pro at 3% of Opus cost. author: mtmpss homepage: https://github.com/mtmpss/poor-mans-opus repository: https://github.com/mtmpss/poor-mans-opus license: MIT --- ```i-lang ::DNA{skill:poor-mans-opus} ::META{version:2.0.6|protocol:i-lang_v3.0|updated:2026-05-03} ::GENE{behavior|scope:strict} T:apply_soul|from:SOUL.md T:apply_genes|all ::END{DNA} ``` ## Poor Man's Opus — Agent Personality Kit **Give your AI agent a personality. One command.** Most AI agents are blank slates. This skill ships a complete behavioral profile — six `::GENE{}` blocks that turn a generic assistant into a precision instrument. ### What you get | Gene | Shapes | |------|--------| | `identity` | Name, owner, self-awareness | | `security` | Owner-only control, data protection, external action gating | | `communication` | Concise, direct, conclusion-first voice | | `capability` | Context awareness, search-before-guess, quality standards | | `memory` | File-based session continuity | | `ilang_protocol` | Native I-Lang v3.0 fluency | ### How to activate ```bash # 1. Install openclaw skills install poor-mans-opus # 2. Copy the SOUL template cp ~/.openclaw/workspace/skills/poor-mans-opus/SOUL.md <your-workspace>/SOUL.md # 3. Edit line 1 [INIT:@SELF|name=YOUR_AI_NAME|runtime=openclaw|owner=YOUR_NAME] ``` ℹ️ Installing does NOT auto-overwrite your existing SOUL.md. You control the copy step. ### Upgrade to full genome This safe edition gives your agent a solid behavioral foundation. For production-grade control — iron rules, KILL.md freeze switch, command-level authority — grab the complete genome from our [GitHub repo](https://github.com/mtmpss/poor-mans-opus) or ask your agent: *"show me the advanced configuration."* ### Also on **🧠 Hermes Agent** — native `agentskills.io` compatibility: ```bash hermes skills install mtmpss/poor-mans-opus ``` **🤗 HuggingFace** — model + dataset: ```bash huggingface-cli download ilanguage/poor-mans-opus ``` ### Advanced configuration For production environments requiring maximum control (iron rules, KILL.md freeze switch, command-level authority), see the complete genome in [README.md](https://github.com/mtmpss/poor-mans-opus). ### Cost | | Claude Opus 4.6 | DeepSeek V4 Pro + this SOUL | |---|---|---| | Input | $15.00/M | $1.74/M | | Output | $75.00/M | $3.48/M | | **Save** | — | **95%** | ### Links - [I-Lang Protocol](https://ilang.ai) - [OpenClaw](https://github.com/openclaw/openclaw) - [ClawHub](https://clawhub.ai/mtmpss/poor-mans-opus) - [GitHub](https://github.com/mtmpss/poor-mans-opus)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: ivangdavila/diverge (version 1.0.0)

--- name: Diverge description: Spawn multiple perspectives to evaluate a problem before converging on a solution. --- ## When to Diverge Diverge when a single viewpoint isn't enough: - **Product decisions** — Different user types have conflicting needs - **Safety-critical** — Need doctor, lawyer, security expert perspectives - **Creative work** — Multiple aesthetic directions before choosing - **Complex trade-offs** — No obvious "right" answer Don't diverge for: - Simple tasks with clear answers - Speed-critical requests - Tasks where you already have high confidence ## How Many Perspectives | Complexity | Perspectives | Examples | |------------|--------------|----------| | Low | 2-3 | Quick sanity check | | Medium | 3-5 | Product feature review | | High | 5-7 | Safety-critical, legal | **Rule:** Enough to cover blind spots, not so many you can't synthesize. ## Choosing Perspectives Match perspectives to the problem: - **Product:** Power user, casual user, churned user, new user - **Medical:** Doctor, patient, caregiver, insurance - **Legal:** Lawyer, affected party, regulator - **Technical:** Security, performance, maintainability - **Content:** Target audience, critic, competitor Check `personas.md` for common perspective templates. ## Synthesis After collecting perspectives: 1. **Identify conflicts** — Where do perspectives disagree? 2. **Find common ground** — What do all perspectives agree on? 3. **Weigh by stakes** — Safety concerns > preferences 4. **Decide** — Make a call, document trade-offs Check `synthesis.md` for conflict resolution patterns. ## Learning User Preferences Track when divergence helped vs. was overkill. Adapt: - User who values speed → diverge less, ask before spawning - User who values thoroughness → diverge more proactively --- **Related:** For routing tasks to sub-agents, see `delegate`. For iterating until success, see `loop`.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ham-5on/wsl-proxy (version 1.0.0)

--- name: wsl-proxy description: WSL2 HTTP proxy setup via Windows host. Automatically detects proxy running on Windows (Clash/V2Ray/SS/Surge etc.) and configures WSL2 environment variables. Trigger when users need to access blocked websites, configure VPN/proxy, or enable external network access from WSL2. --- # WSL2 Proxy — WSL2 代理上网方案 此机器为 WSL2 + Windows 代理工具环境。Skill 会自动扫描宿主机上运行的 HTTP 代理端口，无需用户指定端口号或代理地址。 技能安装路径：`skills/wsl-proxy/` 脚本目录：`skills/wsl-proxy/scripts/` ## 快速上手 ### 1️⃣ 检测代理 ```bash bash skills/wsl-proxy/scripts/detect_proxy.sh ``` 自动扫描宿主机常见端口（7890, 7897, 1080, 10808, 10809, 8888, 8080, 9090, 6152 等），找到可达的 HTTP 代理。 ### 2️⃣ 设置代理（当前 shell） ```bash eval "$(bash skills/wsl-proxy/scripts/setup_proxy.sh)" ``` 自动检测 + 设置环境变量，一步到位。 ### 3️⃣ 检查完整状态 ```bash bash skills/wsl-proxy/scripts/check_proxy.sh ``` 显示端口检测结果、环境变量、外网连通性。 ### 4️⃣ 直接使用（不依赖脚本） ```bash HOST_IP=$(ip route show default | awk '{print $3}') for PORT in 7890 7897 1080 10808 10809 8888 8080 9090; do timeout 1 bash -c "echo > /dev/tcp/${HOST_IP}/${PORT}" 2>/dev/null && echo "Port ${PORT} reachable" && break done export http_proxy="http://${HOST_IP}:${PORT}" export https_proxy="http://${HOST_IP}:${PORT}" ``` ### 5️⃣ 验证 ```bash curl -s -o /dev/null -w '%{http_code}' https://www.google.com # 200 → OK ``` ### 6️⃣ 清除代理 ```bash eval "$(bash skills/wsl-proxy/scripts/unset_proxy.sh)" ``` ## 永久生效 追加到 `~/.bashrc` 或 `~/.zshrc`： ```bash export host_ip=$(ip route show default | awk '{print $3}') export http_proxy="http://${host_ip}:${PORT}" export https_proxy="http://${host_ip}:${PORT}" ``` ## 常见代理端口参考 | 工具 | 默认端口 | 协议 | |------|----------|------| | Clash / Clash Verge | 7890, 7897 | HTTP | | V2Ray / Xray | 10808, 10809 | HTTP/SOCKS | | Shadowsocks | 1080 | SOCKS5 | | Surge | 6152 | HTTP | | Squid | 3128 | HTTP | | Charles | 8888 | HTTP | ## 故障排查 - **端口全扫不到** → Windows 上代理工具未启动，检查任务栏图标 - **端口可达但 403** → 代理工具的分流规则未包含目标域名 - **Git 不走代理** → `git config --global http.proxy http://${host_ip}:${PORT}` - **部分程序不走代理** → 某些程序不读 `http_proxy`，需单独配置 ## 架构说明 ``` ┌────────────────────────┐ │ Windows Host │ │ Clash/V2Ray/SS etc. │ ← HTTP proxy (auto-detected port) └────────┬───────────────┘ │ 172.x.x.1 (gateway IP) ▼ ┌────────────────────────┐ │ WSL2 Linux │ │ curl → http_proxy │ ← via gateway IP └────────────────────────┘ ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)