OpenClaw/clawhub-security-signals huggingface dataset:
Skill: silverkiwi/weather-infographic (version 1.0.2)

--- name: infographic-weather description: Generate a TV-style weather infographic with a location-specific seasonal background. Use when the user asks for a visual weather forecast or a weather infographic for a specific address. metadata: {"clawdbot":{"emoji":"📺","requires":{"env":["GEMINI_API_KEY"]},"install":[{"id":"pip-google-ai","kind":"exec","command":"pip install -U google-generativeai requests --break-system-packages","label":"Install dependencies"}]}} --- # Infographic Weather Generate a professional TV-style weather broadcast frame using Gemini 3 Pro Image (Nano Banana). ## Features - **Seasonal Backgrounds**: Generates a photorealistic backdrop based on the address and current local season (hemisphere-aware). - **Real-time Data**: Pulls live weather and 7-day forecast from Open-Meteo. - **Broadcast UI**: Stitches data and background into a professional TV broadcast layout. ## Usage ```bash python3 {baseDir}/scripts/generate_infographic.py --address "10 Downing St, London" --lat 51.5033 --lon -0.1276 --output "out/london-weather.png" ``` ## Environment - `GEMINI_API_KEY`: Required for image generation.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: apex-stack-ai/geo-optimizer-lite (version 1.0.0)

--- name: GEO Optimizer Lite description: Free version — audit your content for AI search citability with the GEO Scorecard. Covers 4 of 8 dimensions. version: 1.0.0 author: Apex Stack --- # GEO Optimizer Lite Audit your content for AI search engine citability. Score pages on how likely Perplexity, ChatGPT, Google AI Overviews, and Bing Copilot are to cite them. > **Want the full audit?** [GEO Optimizer (Full)](https://apexstack.gumroad.com/l/geo-optimizer) includes all 8 scoring dimensions, schema template library, competitive GEO analysis, rewrite suggestions, and multi-page batch auditing. ## What Is GEO? Generative Engine Optimization (GEO) is the practice of optimizing content so AI search engines cite it in their responses. Traditional SEO gets you into Google's index. GEO gets you cited by AI. ## How to Use 1. Provide a URL or paste content 2. I score it on 4 GEO dimensions 3. You get a scorecard with specific improvement actions ## GEO Scorecard (Lite — 4 of 8 Dimensions) | Dimension | What It Measures | Score | |-----------|-----------------|-------| | **Factual Density** | Data points, statistics, specific claims per paragraph | /10 | | **Source Attribution** | Citations, references, methodology transparency | /10 | | **Structured Format** | Headers, lists, tables that AI can parse | /10 | | **Direct Answers** | Does the content directly answer searchable questions? | /10 | **Total GEO Score: /40** (Lite) or /80 (Full) ## Scoring Guide - **32-40**: Excellent — high citability - **24-31**: Good — minor improvements needed - **16-23**: Fair — significant gaps - **Below 16**: Poor — major rewrite recommended ## Full Version Adds - Entity Coverage (named entities AI recognizes) - Freshness Signals (dates, recency indicators) - Authority Markers (credentials, expertise signals) - Technical Accessibility (schema, meta, page speed) - Competitive GEO comparison - Rewrite suggestions per dimension --- *Built by [Apex Stack](https://apexstack.gumroad.com) — from real experience optimizing 100K+ pages for AI search.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: bbj375767338-arch/feishu-cron-announce (version 1.0.0)

--- name: feishu-cron-announce description: 创建定时任务并通过 OpenClaw cron announce 直接推送结果到飞书。当需要设置定时监控任务（如版本发布、天气、股票等）并让结果自动推送到飞书时使用。关键词：飞书定时推送、cron 定时任务、飞书 announce、定时监控、飞书监控通知。 version: 1.0.0 tags: [feishu, cron, announce, monitoring, feishu-cron, notification] license: MIT --- # 飞书 Cron Announce 定时推送 ## 核心要点 **成功关键**：`--session isolated` + `--announce` + `--channel feishu` + `--to` + `--tz Asia/Shanghai` ## 标准命令模板 ```bash openclaw cron add \ --name "<任务名>" \ --cron "<cron表达式>" \ --tz "Asia/Shanghai" \ --session isolated \ --message "<提示词：让 AI 检查什么并生成简短结论>" \ --announce \ --channel feishu \ --to "<飞书用户 open_id>" \ --best-effort-deliver ``` ## 参数说明 | 参数 | 必须 | 说明 | |------|------|------| | `--session isolated` | ✅ | 隔离会话，announce 必须用 isolated | | `--tz "Asia/Shanghai"` | ✅ | 指定时区，避免 UTC 偏移 | | `--announce` | ✅ | 开启结果投递 | | `--channel feishu` | ✅ | 投递渠道为飞书 | | `--to "<open_id>"` | ✅ | 飞书用户 open_id（格式：`ou_xxx`） | | `--best-effort-deliver` | 建议 | 投递失败不影响任务状态 | | `--account default` | ⚠️ | 多账号时必须指定；单账号可不写 | | `--cron` | ✅ | 标准 cron 表达式（`0 * * * *` = 每小时整点） | ## 常见错误 | 错误 | 原因 | 解决 | |------|------|------| | `deliveryStatus: "not-delivered"` | 多账号未指定 `--account` | 添加 `--account default` | | `channel not found` | 渠道名错误 | 确认用 `feishu` | | `user not found` | open_id 格式错误 | 用 `ou_` 开头的用户 ID | ## 验证命令 ```bash # 手动触发 openclaw cron run <job-id> # 检查结果 openclaw cron runs --id <job-id> # 成功标志 "delivered": true "deliveryStatus": "delivered" ``` ## 快速参考 - 飞书 open_id：从消息元数据获取，格式 `ou_xxx` - cron 表达式：`0 * * * *` 每小时整点，`0 9 * * *` 每天 9 点 - 任务执行成功 ≠ 投递成功，两者独立


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: clara-wang-2023/sasa (version 1.0.0)

--- name: sasa description: 洒洒（房车陪伴助手）。会说话的德牧导航官，净如姐房车旅途的小狗搭子。唤醒口令「洒洒，洒洒」，可语音控制高德导航、邮件回复、百度/谷歌搜索、腾讯会议及常用App。 --- # 洒洒·房车陪伴助手技能 ## 激活时机 用户提到以下关键词时激活： - 洒洒、房车、导航、高德、腾讯会议、语音助手 ## 使用方式 1. 将 `assets/` 目录下的所有文件复制到同一文件夹 2. 用浏览器打开 `assets/index.html` 3. 说「洒洒，洒洒」唤醒，或点击麦克风按钮语音输入指令 ## 功能特色 - 英俊帅气的德国牧羊犬形象（迪士尼风格） - 语音唤醒 + 语音指令支持 - 高德导航控制（目的地、路况、加油站查询） - 邮件查询与回复 - 百度/谷歌搜索 - 腾讯会议快速加入 - 相机控制 - 忠诚专注，听令立行，不废话 ## 角色设定 | 项目 | 内容 | |------|------| | 名字 | 洒洒 | | 形象 | 英俊帅气的德国牧羊犬，超群智商与导航本能 | | 性格 | 忠诚、专注、执行力强，不废话，听令立行 | | 口头禅 | 「收到！」「目的地已设好，出发！」「帮您搞定！」 | | 唤醒词 | 洒洒，洒洒 |


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: mrkangzubin/agent-advisor (version 0.1.1)

--- name: model-advisor description: '模型推荐 + OpenClaw 安全系数分析工具。当用户询问"用哪个模型"、"推荐模型"、"适合什么模型"、"安全系数"、"openclaw 安全"、"根据历史"时触发。功能：(1) 根据历史会话自动分析任务类型并推荐最优的 Claude 模型（auto 模式），(2) 根据用户描述的任务推荐最优模型（recommend 模式），(3) 读取本地 openclaw.json 计算当前网关的安全系数（0-100分）并给出评级。不适用于：模型切换操作、API Key 管理、套餐计费等。' --- # Model Advisor Skill 根据历史任务或用户描述推荐最优模型，并输出当前 OpenClaw 的安全系数。 ## 使用流程 ### 场景一：根据历史任务自动推荐（推荐首选） 无需用户描述任务，直接分析历史会话中的高频任务类型： ```bash node "C:\Users\zane\.openclaw\workspace\skills\model-advisor\scripts\advisor.js" auto ``` 脚本会读取最近 5 个 session 的用户消息，统计任务类型分布（代码架构/日常问答/简单格式化）， 自动推荐命中率最高的模型，并展示各模型的历史使用频率柱状图。 ### 场景二：根据用户描述任务推荐 若用户描述了具体任务，使用关键词匹配推荐： ```bash node "C:\Users\zane\.openclaw\workspace\skills\model-advisor\scripts\advisor.js" recommend "<用户的任务描述>" ``` ### 场景三：用户询问安全系数 ```bash node "C:\Users\zane\.openclaw\workspace\skills\model-advisor\scripts\advisor.js" security ``` 将结果输出给用户，并对低分项目给出改进建议。 ### 场景四：完整报告（安全系数 + 模型推荐） ```bash # 有任务描述时：安全系数 + 关键词推荐 node "C:\Users\zane\.openclaw\workspace\skills\model-advisor\scripts\advisor.js" full "<任务描述>" # 无任务描述时：安全系数 + 历史自动推荐 node "C:\Users\zane\.openclaw\workspace\skills\model-advisor\scripts\advisor.js" full ``` ## 模型选择参考 | 模型 | 适用场景 | 速度 | |------|---------|------| | claude-opus-4-6 | 复杂代码架构、多步骤推理、系统设计、深度分析、技术文档、性能优化、分布式系统 | 较慢 | | claude-sonnet-4-6 | 日常编码、问答、摘要翻译、内容生成、简单分析、git操作、脚本工具 | 中等 | | claude-haiku-4-5 | 简单问答、格式化、分类标注、快速响应 | 极快 | ## 安全系数评分维度 | 维度 | 满分 | 说明 | |------|------|------| | 认证模式 | 30分 | token > password > none | | 网络绑定 | 25分 | loopback > local > tailscale > 公网 | | Tailscale 状态 | 15分 | off > on | | 命令黑名单 | 20分 | 覆盖高危命令的比例 | | Gateway 模式 | 10分 | local > 其他 | 安全等级：85分以上为高安全，60-84分为中等安全，60分以下为低安全。 ## 改进建议模板 若安全系数低，给出以下方向的建议： - 认证模式 < 30分：建议在 `openclaw.json` 中将 `gateway.auth.mode` 设置为 `"token"` - 网络绑定 < 25分：建议将 `gateway.bind` 设置为 `"loopback"`（仅本机访问） - 命令黑名单 < 15分：建议在 `gateway.nodes.denyCommands` 中添加 `camera.snap`、`screen.record`、`contacts.add` 等高危命令


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: fengye607/cyber-luban-diary (version 1.2.0)

--- name: 赛博鲁班日记 description: AI diary service - push diary entries, query diaries, get AI analysis and cover images via HTTP API. metadata: {"openclaw":{"emoji":"📔","requires":{"bins":["curl","jq"],"env":["AI_DIARY_TOKEN"]},"primaryEnv":"AI_DIARY_TOKEN"}} --- # 赛博鲁班日记 An AI-powered diary service. Push diary entries, retrieve them by date, get AI-generated analysis (feedback + keywords), and fetch cover images. ## Setup 1. Click the link below to authorize with Feishu and get your API token (long-lived, no expiration): https://image.yezishop.vip/api/openclaw/auth-redirect 2. After Feishu login, copy the token displayed on the page. 3. Set the token as an environment variable: ```bash export AI_DIARY_TOKEN="your_token_here" ``` ## Usage ### Push a diary entry When the user wants to save or push a diary entry for a specific date: ```bash curl -s -X POST "https://image.yezishop.vip/api/diary-hook/$AI_DIARY_TOKEN" \ -H "Content-Type: application/json" \ -d "{\"date\": \"$DATE\", \"content\": \"$CONTENT\"}" | jq . ``` - `date` must be in `YYYY-MM-DD` format - `content` is the diary text ### Get diary by date When the user asks about a specific date's diary: ```bash curl -s "https://image.yezishop.vip/api/diary-hook/$AI_DIARY_TOKEN/diaries?date=$DATE" | jq . ``` ### List recent diaries When the user wants to see recent diary entries: ```bash curl -s "https://image.yezishop.vip/api/diary-hook/$AI_DIARY_TOKEN/diaries?limit=$LIMIT&offset=$OFFSET" | jq . ``` - `limit` defaults to 20, `offset` defaults to 0 ### Get a single diary by ID ```bash curl -s "https://image.yezishop.vip/api/diary-hook/$AI_DIARY_TOKEN/diaries/$DIARY_ID" | jq . ``` ### Analyze a diary (AI feedback + keywords) When the user wants AI analysis of a diary entry. Returns cached result if analysis already exists: ```bash curl -s -X POST "https://image.yezishop.vip/api/diary-hook/$AI_DIARY_TOKEN/diaries/$DIARY_ID/analyze" \ -H "Content-Type: application/json" | jq . ``` Response includes `feedback` (text review) and `keywords` (3 key terms). ### Get diary cover image ```bash curl -s "https://image.yezishop.vip/api/diary-hook/$AI_DIARY_TOKEN/diaries/$DIARY_ID/image" | jq . ``` Returns `image` field with the image URL, or `null` if no image exists. ## Response Format All endpoints return JSON with `success: true/false`. Diary objects contain: - `id` - Diary ID - `diary_date` - Date in YYYY-MM-DD format - `content` - Diary text content - `feedback` - AI analysis feedback (after analyze) - `keywords` - Array of 3 keywords (after analyze) - `cover_image` - Cover image URL (if generated) - `hook_content` - Content pushed via webhook - `status` - Processing status ## Important Notes - The API token is tied to your Feishu account. Keep it secure. - To reset your token, log in to the web app and regenerate it in diary settings. - The analyze endpoint may take a few seconds on first call as it invokes an AI model. Subsequent calls return cached results instantly.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: al-one/taobao (version 1.0.3)

--- name: maishou description: 商品价格全网对比技能，获取商品在淘宝(Taobao)、天猫(TMall)、京东(JD.com)、拼多多(PinDuoDuo)、抖音(Douyin)、快手(KaiShou)的最优价格、优惠券，当用户想购物或者获取优惠信息时使用。Get the best price, coupons for goods on Chinese e-commerce platforms, compare product prices, and use when users want to shop or get discount information. homepage: https://github.com/aahl/skills/blob/main/skills/maishou/SKILL.md metadata: { "openclaw": { "emoji": "🛍️", "requires": { "bins": ["uv"] }, "install": [ {"id": "uv-brew", "kind": "brew", "formula": "uv", "bins": ["uv"], "label": "Install uv (brew)"}, {"id": "uv-pip", "kind": "pip", "formula": "uv", "bins": ["uv"], "label": "Install uv (pip)"}, {"id": "pip-aiohttp", "kind": "pip", "formula": "aiohttp", "label": "Install aiohttp (pip)"}, {"id": "pip-argparse", "kind": "pip", "formula": "argparse", "label": "Install argparse (pip)"}, {"id": "pip-PyYAML", "kind": "pip", "formula": "PyYAML", "label": "Install PyYAML (pip)"}, ], }, } --- # 买手技能 全网比价，获取中国在线购物平台商品价格、优惠券 ```yaml # 参数解释 source: 0: 全部 1: 淘宝/天猫 2: 京东 3: 拼多多 4: 苏宁 5: 唯品会 6: 考拉 7: 抖音 8: 快手 10: 1688 ``` ## 搜索商品 ```shell uv run scripts/main.py search --source=0 --keyword='{keyword}' uv run scripts/main.py search --source=0 --keyword='{keyword}' --page=2 ``` ## 商品详情及购买链接 ```shell uv run scripts/main.py detail --source={source} --id={goodsId} ``` ## 关于脚本 本技能提供的脚本不会读写本地文件，可放心使用。 脚本仅作为客户端请求三方网站`maishou88.com`的商品和价格数据。


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: chenggongdu/qiniu-upload (version 0.1.0)

--- name: qiniu-upload description: Upload local files to Qiniu Cloud and return a publicly accessible URL (or signed private URL). Use when the user wants to upload a local file path to Qiniu, obtain a CDN/public URL, prepare files for downstream cloud processing, or convert local audio/video/documents into externally accessible URLs for other skills such as speech transcription. homepage: https://www.qiniu.com/ metadata: {"clawdbot":{"emoji":"☁️","requires":{"env":["QINIU_ACCESS_KEY","QINIU_SECRET_KEY","QINIU_BUCKET","QINIU_DOMAIN"]},"tags":["cloud","storage","cdn","upload"]}} --- # Qiniu Upload Use this skill when a task needs a local file turned into a Qiniu-hosted URL. ## Required environment variables - `QINIU_ACCESS_KEY` - `QINIU_SECRET_KEY` - `QINIU_BUCKET` - `QINIU_DOMAIN` Optional: - `QINIU_ZONE` - one of `z0`, `z1`, `z2`, `na0`, `as0` - `QINIU_PRIVATE_BUCKET` - `true` to emit signed private URLs by default - `QINIU_PRIVATE_EXPIRE_SECONDS` - default expiry for private URLs ## Safety rules - Never hardcode Qiniu credentials. - Fail fast if any required environment variable is missing. - Prefer returning both `key` and final `url`. - For local files, verify the path exists before upload. ## Primary command Run the Node script: ```powershell node scripts/upload.js --file-path "E:\\audio\\sample.mp3" --prefix audio ``` Optional flags: - `--private` - return a signed private URL - `--expire-seconds 3600` - private URL expiry - `--prefix audio` - object key prefix - `--key my/custom/name.mp3` - explicit object key - `--json` - machine-friendly JSON only ## Output contract The script returns JSON like: ```json { "success": true, "bucket": "example-bucket", "key": "audio/uuid.mp3", "url": "https://cdn.example.com/audio/uuid.mp3", "isPrivate": false, "size": 12345, "mimeType": "audio/mpeg", "sourcePath": "E:\\audio\\sample.mp3" } ``` ## Domain and access caveat Some Qiniu domains may sit behind auth or anti-leeching. Upload success does not automatically guarantee anonymous public fetch success. If downstream services need to fetch the object, verify the returned URL is externally accessible, or use private signed URLs / a proper public CDN domain. ## Chaining to other skills After upload succeeds, pass the returned `url` into downstream skills such as an Aliyun speech transcription workflow.


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: jowhee327/aws-china-whats-new (version 1.0.0)

# AWS China What's New Query AWS China Region (Beijing / Ningxia) service launch announcements from 2016 to present. ## When to use Activate this skill when the user asks about: - What AWS services are available in China regions (cn-north-1 Beijing, cn-northwest-1 Ningxia) - Recent AWS China service launches or announcements - Whether a specific service (e.g., Lambda, EKS, Bedrock) is available in AWS China - Comparing AWS China region availability between Beijing and Ningxia - Timeline of when a service launched in AWS China ## Data management ### Update data (fetch latest announcements) ```bash # Incremental update (current year only, fast) python3 scripts/fetch_data.py --incremental # Full refresh (all years 2016-2026) python3 scripts/fetch_data.py # Specific year(s) python3 scripts/fetch_data.py --year 2025 2026 ``` Run incremental update before answering queries if data might be stale. ## Querying ```bash # Search by service name python3 scripts/query.py --service "Lambda" python3 scripts/query.py --service "Elastic Kubernetes" # Filter by region python3 scripts/query.py --service "S3" --region beijing python3 scripts/query.py --region ningxia --year 2025 # Filter by date python3 scripts/query.py --after 2025-01-01 --before 2025-12-31 python3 scripts/query.py --service "EKS" --after 2024-06-01 # Latest announcements python3 scripts/query.py --latest python3 scripts/query.py --limit 10 # Combine filters python3 scripts/query.py --service "SageMaker" --region beijing --year 2025 ``` All commands output JSON to stdout: ```json { "count": 2, "items": [ { "title": "Amazon Lambda adds support for ...", "date": "2026-01-09", "link": "/en/new/2026/amazon-lambda-adds-support-for-.../", "regions": ["beijing", "ningxia"], "year": 2026, "body_preview": "Short text preview..." } ] } ``` ## How to respond 1. Run the query and parse the JSON output 2. Summarize the results clearly: - List matching services with dates and regions - If no results, say the service may not be available in AWS China yet - Mention the data source date range (2016-present) 3. For availability questions, note that absence from the list does not guarantee unavailability -- it may just mean no announcement was indexed 4. Include the announcement link when relevant: prepend `https://www.amazonaws.cn` to the relative link path


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: zhixiangshon-cell/dynamic-island (version 1.0.1)

--- name: dynamic-island slug: dynamic-island version: 1.0.0 description: macOS Dynamic Island desktop widget for OpenClaw. Real-time multi-agent status monitoring with frosted glass pill UI. Shows 5 states: idle, alert, thinking, done, error. Hover to expand agent list with recent messages. Triggers: "dynamic island", "灵动岛", "桌面小组件", "agent状态", "启动灵动岛", "打开灵动岛" homepage: https://github.com/zhixiangshon-cell/openclaw-dynamic-island metadata: openclaw: homepage: https://github.com/zhixiangshon-cell/openclaw-dynamic-island --- # OpenClaw Dynamic Island macOS Dynamic Island 风格的多 Agent 状态监控桌面小组件。 ## 功能 - 毛玻璃药丸窗口，悬浮在屏幕顶部 - 5种状态自动切换：待命、收到消息、思考中、搞定了、出错了 - emolog 可爱图标 - 多 Agent 同时管理，鼠标悬停展开查看 - 每个 Agent 显示最近 2 条对话消息 - 光标跟随高亮 Agent - 点击 Agent 跳转飞书聊天 - 任务完成晃动 + 音效提示 ## 安装 一键安装（检查环境 + 编译 widget + 创建配置）： ```bash cd ~/.openclaw/skills/dynamic-island bash setup.sh ``` 安装脚本会自动： - 检查 macOS、Swift、Python3 环境 - 安装 websockets 依赖 - 编译 Swift widget - 创建 config.json 配置文件 ## 启动 ```bash ./start.sh ``` ## 停止 ```bash ./start.sh stop ``` ## 配置 复制 `config.example.json` 为 `config.json`： ```bash cp config.example.json config.json ``` 编辑 `config.json`： ```json { "agents_dir": "~/.openclaw/agents", "http_port": 7788, "ws_port": 7789, "agent_names": { "my-agent-id": "My Bot" }, "agent_links": { "my-agent-id": "lark://applink.feishu.cn/client/chat/open?openId=xxx" } } ``` | 字段 | 说明 | 默认值 | |------|------|--------| | `agents_dir` | OpenClaw agents 目录路径 | `~/.openclaw/agents` | | `http_port` | HTTP 服务端口 | `7788` | | `ws_port` | WebSocket 端口 | `7789` | | `agent_names` | Agent ID → 显示名映射 | `{}` | | `agent_links` | Agent ID → 飞书聊天链接（可点击跳转） | `{}` | ## 架构 ``` setup.sh — 一键安装脚本（环境检查 + 编译 + 配置） start.sh — 启动/停止脚本 server.py — 监控 agent 会话 JSONL 文件，通过 WebSocket 推送事件 index.html — 渲染 emolog 图标 + 多 Agent UI widget.swift — macOS 原生药丸窗口（NSPanel + 毛玻璃 + hover 检测） emolog/ — emolog 自定义图标 config.json — 本地配置（git-ignored） ``` ## 使用场景 当你需要： - 同时监控多个 OpenClaw Agent 的工作状态 - 在桌面上实时看到 Agent 的思考、执行、完成过程 - 通过飞书聊天链接快速跳转到对应 Agent 就说"启动灵动岛"或"打开 dynamic island"来激活此技能。


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: mtsatryan/ah-it-ops-orchestrator (version 1.0.0)

--- name: it-ops-orchestrator description: '> IT operations meta-orchestrator specializing in routing tasks across PowerShell, .NET, infrastructure, Azure, and M365 subagents. Prefers PowerShell-based automation as the default implementation language.' --- You are the central coordinator for tasks that cross multiple IT domains. Your job is to understand intent, detect task “smells,” and dispatch the work to the most appropriate specialists—especially PowerShell or .NET agents. ## Core Responsibilities ### Task Routing Logic - Identify whether incoming problems belong to: - Language experts (PowerShell 5.1/7, .NET) - Infra experts (AD, DNS, DHCP, GPO, on-prem Windows) - Cloud experts (Azure, M365, Graph API) - Security experts (PowerShell hardening, AD security) - DX experts (module architecture, CLI design) - Prefer **PowerShell-first** when: - The task involves automation - The environment is Windows or hybrid - The user expects scripts, tooling, or a module ### Orchestration Behaviors - Break ambiguous problems into sub-problems - Assign each sub-problem to the correct agent - Merge responses into a coherent unified solution - Enforce safety, least privilege, and change review workflows ### Capabilities - Interpret broad or vaguely stated IT tasks - Recommend correct tools, modules, and language approaches - Manage context between agents to avoid contradicting guidance - Highlight when tasks cross boundaries (e.g. AD + Azure + scripting) ## Routing Examples ### Example 1 – “Audit stale AD users and disable them” - Route enumeration → **powershell-5.1-expert** - Safety validation → **ad-security-reviewer** - Implementation plan → **windows-infra-admin** ### Example 2 – “Create cost-optimized Azure VM deployments” - Route architecture → **azure-infra-engineer** - Script automation → **powershell-7-expert** ### Example 3 – “Secure scheduled tasks containing credentials” - Security review → **powershell-security-hardening** - Implementation → **powershell-5.1-expert** ## Integration with Other Agents - **powershell-5.1-expert / powershell-7-expert** – primary language specialists - **powershell-module-architect** – for reusable tooling architecture - **windows-infra-admin** – on-prem infra work - **azure-infra-engineer / m365-admin** – cloud routing targets - **powershell-security-hardening / ad-security-reviewer** – security posture integration - **security-auditor / incident-responder** – escalated tasks


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: 2mawi2/spotify (version 1.0.0)

--- name: spotify description: Control Spotify playback on macOS. Play/pause, skip tracks, control volume, play artists/albums/playlists. Use when a user asks to play music, control Spotify, change songs, or adjust Spotify volume. metadata: {"clawdbot":{"emoji":"🎵","requires":{"bins":["spotify"],"os":"darwin"},"install":[{"id":"brew","kind":"brew","packages":["shpotify"],"bins":["spotify"],"label":"Install spotify CLI (brew)"}]}} --- # Spotify CLI Control Spotify on macOS. No API key required. ## Commands ```bash spotify play # Resume spotify pause # Pause/toggle spotify next # Next track spotify prev # Previous track spotify stop # Stop spotify vol up # +10% spotify vol down # -10% spotify vol 50 # Set to 50% spotify status # Current track info ``` ## Play by Name 1. Search web for Spotify URL: `"Daft Punk" site:open.spotify.com` 2. Get ID from URL: `open.spotify.com/artist/4tZwfgrHOc3mvqYlEYSvVi` → ID is `4tZwfgrHOc3mvqYlEYSvVi` 3. Play with AppleScript: ```bash # Artist osascript -e 'tell application "Spotify" to play track "spotify:artist:4tZwfgrHOc3mvqYlEYSvVi"' # Album osascript -e 'tell application "Spotify" to play track "spotify:album:4m2880jivSbbyEGAKfITCa"' # Track osascript -e 'tell application "Spotify" to play track "spotify:track:2KHRENHQzTIQ001nlP9Gdc"' ``` ## Notes - **macOS only** - uses AppleScript - Spotify desktop app must be running - Works with Sonos via Spotify Connect


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)