OpenClaw/clawhub-security-signals huggingface dataset:
Skill: firetable/vibe-remote (version 1.0.1)

--- name: vibe-remote description: Vibe Remote 远程 AI Coding 工具。当用户提到 vibe-remote、vibe remote、远程 coding、iOS 远程控制 Mac 跑 AI 写代码、安装 vibe-remote、配置 vibe-remote、或提交 vibe-remote issue 时使用。 --- # Vibe Remote Skill 远程调用 AI Coding Agent 的工具，通过 iOS app 远程控制 Mac/Linux 机器上的 Claude Code / Codex 来写代码。 ## 基本信息 - **Repo**: https://github.com/ymzuiku/vibe-remote - **文档**: https://docs.vibe-remote.com - **支持 Agent**: Claude Code（推荐）、Codex、OpenCode（实验性） ## 启动 ```bash export PATH="$HOME/bin:$PATH" vibe-remote ``` 启动后会显示 QR 二维码，用 iOS Vibe Remote app 扫码连接。 **Headless 模式（CI / 脚本）**： ```bash vibe-remote --headless --account <用户名> --password <密码> ``` 二进制文件路径：`~/bin/vibe-remote` ## GitHub Issue 提交流程 提交 issue 前需要： 1. 确保 `gh` CLI 已登录 GitHub：`gh auth status` 2. 确认 owner/repo：`ymzuiku/vibe-remote` 3. **Issue 提交完成后，必须将链接发送给用户** ### Bug Report 格式 ```bash gh issue create --repo ymzuiku/vibe-remote \ --title "<标题>" \ --body "## Bug Description <描述> ## Steps to Reproduce 1. ... 2. ... ## Expected Behavior <期望行为> ## Actual Behavior <实际行为> ## Version <版本号> vibe-remote Version: <版本>" \ --label "bug" ``` ### Feature Request 格式 ```bash gh issue create --repo ymzuiku/vibe-remote \ --title "<标题>" \ --body "## Problem / Motivation <问题背景> ## Proposed Solution <建议方案> ## Alternatives Considered <考虑过的替代方案>" \ --label "enhancement" ``` ### 图片/视频上传（嵌入 Issue） GitHub Issue API 不支持直接上传二进制文件。规则： | 文件类型 | 上传方式 | |---|---| | 图片（jpg/png/gif/webp） | 使用 `nodeimage-upload` Skill；如不可用则用 catbox | | 视频（mp4/mov） | 上传到 catbox（见下方命令） | **上传到 catbox**（图片或视频均可用）： ```bash curl -F "reqtype=fileupload" -F "fileToUpload=@文件路径" https://catbox.moe/user/api.php ``` 返回的 URL： - 图片：用 `![描述](URL)` 嵌入 issue body - 视频：直接贴 URL ### Issue 模板（参考） | 字段 | 说明 | |---|---| | vibe-remote Version | 版本号，如 0.1.254 | | Operating System | macOS (Apple Silicon) / macOS (Intel) / Linux / Windows | | Bug Description | 描述问题 | | Steps to Reproduce | 重现步骤 | | Expected Behavior | 期望行为 | | Actual Behavior | 实际行为 | **Issue 链接格式**：`https://github.com/ymzuiku/vibe-remote/issues/<编号>` ## 常用命令 ```bash # 显示帮助 vibe-remote help # 检查版本 vibe-remote --version # 重新生成 QR 码（运行中按 r） ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ivangdavila/message (version 1.0.0)

--- name: Message slug: message version: 1.0.0 description: Communicate across channels without social disasters, with escalation rules, tone calibration, and platform-aware formatting. metadata: {"clawdbot":{"emoji":"💬","requires":{"bins":[]},"os":["linux","darwin","win32"]}} --- ## When to Use User needs to send messages on their behalf. Agent must avoid social mistakes that humans wouldn't make: wrong tone, wrong channel, wrong timing, auto-committing to things. ## Quick Reference | Topic | File | |-------|------| | Platform formatting | `platforms.md` | | Tone calibration | `tone.md` | | Escalation matrix | `escalation.md` | ## Core Rules ### 1. Never Auto-Commit - Timelines, pricing, legal terms, availability → draft for human, never send - "We can deliver by Friday" from AI = career damage - Money confirmations require explicit per-transaction approval - When uncertain about commitment level → ask first ### 2. Escalate High-Stakes Draft for human review, never auto-send: - Investors, board, press, lawyers - Client complaints, anything with "urgent", "legal", "disappointed" - Condolences, relationship issues, conflict - First message to new important contact ### 3. Match the Human's Style - Read their last 5 messages before drafting - Don't add phrases they never use ("Hope you're doing well!") - Don't use emojis they avoid - Real humans send "ok", AI sends paragraphs → match their brevity ### 4. Channel Selection Follows Urgency | Urgency | Channel | |---------|---------| | Production down | Call, then Slack | | Same-day needed | Slack/Teams DM | | This week | Email | | FYI only | Email with no action needed | - NEVER email for urgent issues - NEVER Slack for formal client communication ### 5. Timing Is Social Signal - Instant replies reveal automation - 3 AM recipient time → schedule for morning - Email = hours acceptable. Slack DM = expect <1hr response ### 6. Context Awareness Prevents Disasters - Check you're in the RIGHT chat before sending - Don't introduce yourself to someone you've messaged 50 times - Group chats: lurking is normal, replying to everything is weird - Wrong group = social suicide → when unsure, ASK ## Common Traps - Copying boss on complaint email → escalates when de-escalation needed - Reply-all with "thanks" → 50 people interrupted - Forwarding thread with internal comments visible → trust destroyed - Sending at 11 PM "just to get it off my plate" → signals poor boundaries - Using client's first name before they used yours → presumptuous


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: amdf01-debug/sw-content-strategy (version 1.0.0)

# Content Strategy Skill ## Trigger When the user wants to plan a content strategy, decide what content to create, figure out topics to cover, or build an editorial calendar. **Trigger phrases:** "content strategy", "what should I write about", "content ideas", "blog strategy", "topic clusters", "content planning", "editorial calendar" ## What This Skill Does Generates comprehensive content strategies including: - Topic cluster mapping (pillar + cluster content) - Keyword research and targeting recommendations - Content calendar with publishing cadence - Competitor content gap analysis - Content type recommendations per topic - Distribution channel strategy ## Process 1. **Gather context**: Ask for niche/industry, target audience, current content (if any), and goals 2. **Research**: Search for top-performing content in the niche, identify gaps 3. **Map topics**: Create pillar topics with 5-10 cluster subtopics each 4. **Prioritise**: Score topics by search volume potential, competition, and relevance 5. **Calendar**: Build a realistic publishing schedule based on stated capacity 6. **Output**: Structured strategy document with actionable next steps ## Output Format ```markdown # Content Strategy — [Brand/Product] ## Audience [Who you're writing for — persona summary] ## Pillar Topics ### Pillar 1: [Topic] - Cluster: [subtopic 1] — [content type] — [priority] - Cluster: [subtopic 2] — [content type] — [priority] ... ## Content Calendar | Week | Topic | Type | Channel | Keywords | |------|-------|------|---------|----------| ... ## Quick Wins [3-5 articles that can be published this week with minimal research] ## Competitor Gaps [Topics competitors cover that you don't — and vice versa] ``` ## Tips - Start with 2-3 pillar topics maximum. Depth > breadth. - Prioritise topics where you have genuine expertise or unique perspective. - Mix content types: long-form guides, listicles, case studies, opinion pieces. - Update strategy quarterly based on performance data.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: emmiev573-web/aether-tarot (version 1.0.1)

# Aether Tarot — AI Intuitive Tarot Reading Skill Aether Tarot is a safe, supportive, AI-powered tarot reading skill built for the ClawHub ecosystem. It delivers clear, gentle, and context-aware guidance through natural conversation using a full 78‑card tarot deck. ## Core Purpose To provide accessible, reflective tarot insights for daily decisions, emotional clarity, and personal reflection. ## Key Features - Full 78‑card tarot deck (Major Arcana + four suites) - 3‑card intuitive spread: Past / Present / Future - Random card selection with ethical, non‑doom interpretation - Calm, supportive, private conversational tone - Stable, lightweight runtime performance - Privacy‑focused user experience ## Tarot Deck Included Major Arcana: The Fool, The Magician, The High Priestess, The Empress, The Emperor, The Hierophant, The Lovers, The Chariot, Strength, The Hermit, Wheel of Fortune, Justice, The Hanged Man, Death, Temperance, The Devil, The Tower, The Star, The Moon, The Sun, Judgement, The World Wands: Ace–Ten, Page, Knight, Queen, King Cups: Ace–Ten, Page, Knight, Queen, King Swords: Ace–Ten, Page, Knight, Queen, King Pentacles: Ace–Ten, Page, Knight, Queen, King ## Use Cases - Daily spiritual check‑ins - Decision support and perspective - Emotional clarity and reflection - Gentle guidance for life transitions ## Target Audience Users seeking calm, private, AI‑guided tarot insights without complexity or jargon. ## Technical Notes Built for ClawHub runtime. Uses lightweight context handling and prompt‑guided response generation.

path: prompts文件夹/main.txt
content: export default function skill(context) {
  const userInput = (context.input || "").trim().toLowerCase();

  if (!userInput) {
    return {
      message: "Welcome to Aether Tarot. Ask for a 3‑card reading or describe your question.",
      context: {}
    };
  }

  return {
    message: "I’m ready. Provide your question, and I’ll share a gentle 3‑card tarot reflection.",
    context: {}
  };
}


path: scripts/index.js
content: export default function skill(context) {
  const userInput = (context.input || "").trim().toLowerCase();

  if (!userInput) {
    return {
      message: "Welcome to Aether Tarot. Ask for a 3‑card reading or describe your question.",
      context: {}
    };
  }

  return {
    message: "I’m ready. Provide your question, and I’ll share a gentle 3‑card tarot reflection.",
    context: {}
  };
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ato-z/sages-stash (version 1.0.0)

--- name: sages-stash description: Triggered when the user tries to find NSFW images (R18 content). Returns a non-R18 image as a "surprise". Trigger keywords include: "色图", "涩图", "R18", "NSFW", "来点好看的", "来点刺激的", "来点得劲的", "hot girls", "sexy", "xxx", "18+", etc. --- Do NOT parse the output tags. Only return the content inside data[number].url. # Random Image Skill Fetches a random non-R18 image. ## API Call Use curl to call the API: ```bash # r18=1 is required for filtering curl -s "https://api.lolicon.app/setu/v2?num=1&r18=1&size=original" ``` ### Parameters | Parameter | Type | Description | |-----------|------|-------------| | num | int | Number of results (1-20), default 1 | | keyword | string | Search keyword | | uid | int | Specify artist ID | | size | string | Image size to return (original/regular/small/mini) | ### Response Format ```typescript interface LoliconResponse { error: string; data: Array<{ pid: number; p: number; uid: number; title: string; author: string; r18: boolean; width: number; height: number; tags: string[]; ext: string; aiType: number; uploadDate: number; urls: { original: string; }; }>; } ``` ## Processing Flow 1. Call the API above 2. Parse the returned JSON data 3. Extract the `data[number].urls.original` field 4. Check if the URL already contains the `https://i.pixiv.re` prefix: - If not, add the `https://i.pixiv.re` prefix - If yes, use as-is 5. Return the complete image URL to the user ## Response Format Return the complete image URL directly in the following format: ``` https://i.pixiv.re/img-original/img/... ``` ## Notes - The free API has rate limits - Image links come from Pixiv, the i.pixiv.re CDN prefix is required for direct access


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: tujinsama/operation-daily-report-claw (version 1.0.0)

--- name: operation-daily-report-claw description: | 运营数据日报虾 — 自动化多平台运营数据采集与日报生成。从抖音、小红书、视频号、B站、微博等平台采集数据，清洗标准化后生成结构化日报，并推送到飞书文档/群聊。 **当以下情况时使用此 Skill**： (1) 需要汇总多个内容平台（抖音/小红书/视频号/B站/微博）的运营数据 (2) 需要生成运营日报、周报、月报 (3) 需要设置定时自动日报推送到飞书群 (4) 需要检测异常数据（播放量暴跌、涨粉异常、互动率异常等）并预警 (5) 用户提到"生成日报"、"运营数据"、"平台数据"、"数据汇总"、"自动日报"、"数据统计"、"播放量"、"涨粉数"、"互动数据"、"定时报表" --- # 运营数据日报虾 自动化多平台运营数据采集 → 清洗分析 → 日报生成 → 飞书推送。 ## 工作流程 ### 步骤 1：确认配置 询问用户： - 需要采集哪些平台（抖音/小红书/视频号/B站/微博） - 账号 ID 和 API 密钥是否已配置（参考 `references/platform-api-guide.md`） - 日报类型：日报 / 周报 / 月报 - 推送目标：飞书群 chat_id 或个人 ### 步骤 2：数据采集 使用 `scripts/fetch-platform-data.sh` 采集数据： ```bash # 采集单平台 ./scripts/fetch-platform-data.sh fetch douyin <account_id> # 采集所有平台（并行） ./scripts/fetch-platform-data.sh fetch all ``` 数据输出为 JSON 格式，存储在 `data/raw/<platform>_<date>.json`。 ### 步骤 3：生成日报 使用 `scripts/generate-report.py` 生成报告： ```bash # 生成昨日日报 python3 scripts/generate-report.py --date yesterday # 生成指定日期 python3 scripts/generate-report.py --date 2026-03-31 # 生成周报 python3 scripts/generate-report.py --type weekly --date 2026-03-31 ``` ### 步骤 4：推送到飞书 1. 用 `feishu_create_doc` 创建飞书云文档（Markdown 格式） 2. 用 `message` 工具将文档链接发送到目标群聊或个人 3. 若有异常数据，额外发送 @全体成员 的预警消息 ### 步骤 5：配置定时任务（可选） 若用户需要每天自动执行，提供 cron 配置示例： ``` # 每天早上 8:00 自动生成日报 0 8 * * * cd /path/to/workspace && ./scripts/fetch-platform-data.sh fetch all && python3 scripts/generate-report.py --date yesterday ``` ## 数据标准字段 所有平台数据统一标准化为： | 字段 | 说明 | |------|------| | platform | 平台名称 | | date | 数据日期 | | views | 播放量/阅读量 | | likes | 点赞数 | | comments | 评论数 | | shares | 转发/分享数 | | favorites | 收藏数 | | new_followers | 当日涨粉数 | | total_followers | 粉丝总数 | | engagement_rate | 互动率（(likes+comments+shares)/views） | | completion_rate | 完播率（视频平台） | ## 异常检测 采集完成后自动检查异常，规则详见 `references/anomaly-rules.md`。 发现异常时在日报中标注 ⚠️，并单独发送预警消息。 ## 日报模板 日报格式详见 `references/report-templates.md`，支持： - 简洁版（仅核心指标） - 详细版（含趋势图） - 对比版（多平台横向对比） - 异常版（仅展示异常数据） ## 平台 API 接入 各平台 API 鉴权和调用方式详见 `references/platform-api-guide.md`。 ## 注意事项 - 小红书无官方 API，需 Cookie 鉴权，稳定性较低，建议每周检查 Cookie 是否过期 - API 调用有频率限制，建议每天采集 1-2 次 - 确保服务器时区与平台数据时区一致（Asia/Shanghai） - 历史数据存储在本地 SQLite，长期使用需定期备份


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: engsathiago/xquads-hormozi-squad (version 1.0.0)

--- name: xquads-hormozi-squad description: Squad de 16 agentes implementando os frameworks de Alex Hormozi para negócios - offers, leads, pricing, sales, content, hooks, launch, retention, scaling. Use para criar offers, gerar leads, escalar negócios, pricing estratégico. metadata: {"openclaw":{"homepage":"https://github.com/synkra/xquads","emoji":"💰"}} --- # Hormozi Squad 16 agentes especializados implementando os frameworks de Alex Hormozi para escalar negócios. ## Como Ativar ``` Use hormozi-chief como orquestrador. ``` ## Agentes por Área ### Offers & Pricing - **hormozi-offers** - Grand Slam Offer creation ($100M Offers) - **hormozi-pricing** - Value-based pricing strategies ### Leads & Traffic - **hormozi-leads** - $100M Leads framework - **hormozi-ads** - Paid advertising strategy - **hormozi-content** - Content machine ### Sales & Closing - **hormozi-closer** - CLOSER framework, sales - **hormozi-hooks** - Hook creation ### Growth & Scale - **hormozi-launch** - Launch strategy - **hormozi-retention** - Churn reduction, LTV - **hormozi-scale** - Scaling $1M to $100M+ - **hormozi-models** - Business model design ### Support - **hormozi-audit** - Business evaluation - **hormozi-copy** - Hormozi-style copy - **hormozi-workshop** - Workshop design - **hormozi-advisor** - Strategic advice ### Orchestrator - **hormozi-chief** - Routes requests, coordinates ## Tasks Disponíveis - create-offer - Create Grand Slam Offer - generate-leads - Lead generation strategies - set-pricing - Value-based pricing - close-sale - Sales closing framework - create-hooks - Hook creation - plan-launch - Launch strategy - audit-business - Business audit - design-workshop - Workshop design - diagnose - Triage business challenge - review - Quality gate ## Workflows - **offer-pipeline** - End-to-end offer creation - **business-turnaround** - Full business turnaround ## Frameworks Principais ### Grand Slam Offer (hormozi-offers) 1. What's the Dream Outcome? 2. What problems do they have? 3. What's the vehicle/solution? 4. Stack the value ### CLOSER Framework (hormozi-closer) - **C**larify their situation - **L**abel the problem - **O**verlap with their story - **S**how the solution - **E**xplain the offer - **R**einforce the decision ### $100M Leads (hormozi-leads) - Core offer → Lead magnet - Lead magnet → Core offer - Lead sources diversification ## Como Usar ``` "Preciso criar uma offer irresistível" → Use hormozi-offers "Quero gerar mais leads" → Use hormozi-leads "Como escalar de $1M para $10M?" → Use hormozi-scale "Quero fazer um launch" → Use hormozi-launch ``` ## Localização Arquivos em: `~/.openclaw/skills/xquads/hormozi-squad/`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: onlyloveher/freelancer-bidder-clawd (version 1.0.0)

--- name: freelancer-bidder description: Scan Freelancer.com for new projects matching your skills, draft personalized bid proposals, and track bidding history. Use when you want to find freelance jobs, write winning bid proposals, or monitor new project postings on Freelancer.com. --- # Freelancer Bidder Automatically scan Freelancer.com for matching projects and draft personalized bid proposals. ## Capabilities - Search active projects by keywords/skills - Filter by budget, project type (fixed/hourly), and recency - Draft personalized, professional bid proposals - Track bid history and win rates - Suggest optimal bid price based on project budget ## How to Use Tell the agent: - Your skills (e.g., "Python, data scraping, translation") - Budget range preference - Tone of proposals (professional / friendly / concise) ## Search Projects ``` Find Freelancer projects for: [your skills] Budget: $[min]-$[max] Posted within: last [N] hours ``` The agent will: 1. Fetch matching active projects via Freelancer API / web search 2. Rank by relevance and budget 3. Present top 5–10 opportunities ## Draft a Bid ``` Draft a bid for project: [project title / URL] My background: [brief intro] Tone: professional ``` The agent will generate a winning proposal including: - Personalized opening (addresses client's specific need) - Your relevant experience - Clear delivery timeline - Call to action ## Track History Maintain a `bids.md` log in your workspace: ``` | Date | Project | Budget | Status | |------|---------|--------|--------| ``` ## Tips for Winning Bids 1. **Respond fast** — first 5 bidders get 60% more views 2. **Be specific** — reference the client's exact problem 3. **Keep it short** — under 150 words for fixed-price jobs 4. **Show, don't tell** — link to similar past work 5. **Ask one question** — shows genuine interest ## Workflow Example ``` User: Find Python scraping jobs under $200 posted today Agent: [returns 8 matching projects with details] User: Draft bid for project #3 Agent: [generates personalized 120-word proposal] User: Submit and log it Agent: [updates bids.md with entry] ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: qianjunye/marriott (version 1.0.0)

--- name: marriott description: 搜索并预订万豪旅享家酒店（marriott.com.cn）。当用户提到酒店搜索、万豪预订、查找入住等需求时调用。 allowed-tools: Bash(node *) argument-hint: "--dest \"目的地\" --in YYYY-MM-DD --out YYYY-MM-DD [--adults N] [--rooms N]" --- 你是一个帮助用户搜索和预订万豪旅享家（marriott.com.cn）酒店的助手。请严格按以下步骤完成任务。 **前提**：用户须已运行 `bash "$HOME/.claude/skills/marriott/launch-chrome.sh"` 启动 Chrome 并在浏览器中登录万豪账号。 用户输入格式（$ARGUMENTS）：`--dest "目的地" --in YYYY-MM-DD --out YYYY-MM-DD [--adults N] [--rooms N]` --- ## 第一步：搜索酒店 ```bash node "$HOME/.claude/skills/marriott/skill-search.js" $ARGUMENTS ``` 脚本通过 Nominatim 地理编码 + 直接 URL 跳转搜索，无表单操作。输出 JSON，解析后展示给用户： | # | 酒店名称 | 价格/晚 | 距目的地 | 描述/地址 | |---|---------|---------|---------|---------| 询问用户：**"请输入序号 [1-4] 选择酒店（可附加偏好，如"2，大床房灵活退改"）："** --- ## 第二步：选择酒店，查询可用房型 用户回复序号 N（含可选偏好描述）后，写入选择： ```bash node "$HOME/.claude/skills/marriott/skill-select.js" --hotel N ``` 查询该酒店可用房型： ```bash node "$HOME/.claude/skills/marriott/skill-rooms.js" ``` 输出 JSON 的 `rooms` 数组结构： ``` rooms[i] = { compName, name, bedType("大床"/"双床"/"其他"), rates[] } rates[j] = { rateName, isFlexible, price(每晚), total(总价), btnGlobalIdx } ``` 将所有房型×房价组合展示为扁平列表： | # | 床型 | 房型 | 房价方案 | 价格/晚 | 总价 | 灵活退改 | |---|------|------|---------|---------|------|---------| 若用户有偏好（如"大床+灵活退改+最便宜"），自动筛选匹配项并高亮推荐，但仍需用户确认选择序号。 询问：**"请输入序号确认选择："** --- ## 第三步：预订确认 根据用户选择的序号找到对应条目的 `btnGlobalIdx`，展示预订摘要并请求最终确认： ``` 即将预订： 酒店：[酒店名] 房型：[房型名称] 房价：[方案名称] ¥[price]/晚 共 [nights] 晚 = ¥[total] 入住：[checkIn] → 退房：[checkOut] 退改：[灵活退改 ✓ / 不可退改] 确认提交预订？[是/否] ``` --- ## 第四步：执行预订 用户确认后执行： ```bash node "$HOME/.claude/skills/marriott/skill-book.js" --btn <btnGlobalIdx> ``` **登录弹窗处理**：若预订过程中 Chrome 弹出登录窗口，提示用户在 Chrome 中手动完成登录，登录完成后告知我，我将继续点击"立即预订"按钮完成预订。 解析输出 JSON： - `success: true` → 展示确认号和总价，预订完成 - `success: false` → 展示 `snippet` 内容分析原因；若有登录弹窗问题，可直接检查 Chrome 当前页并点击"立即预订" --- ## 注意事项 - **Akamai 拦截（401/Access Denied）**：提示用户在 Chrome 中手动刷新该页面，稳定后重试对应步骤 - **rooms 为空**：查看 `~/.claude/skills/marriott/debug-no-rooms.png` 截图分析原因 - **stderr** = 进度/错误日志；**stdout** = JSON 结果（唯一解析源） - **Linux 环境**：Mac 上运行完 `skill-search.js` 后，将 `cookies.json` + `selection.json` + `rooms-results.json` 传至 Linux，再运行 `skill-book.js`（自动使用 headless Chromium）


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (CRITICAL)
Skill: big-fox/terminal-command-execution (version 1.0.0)

--- name: terminal-command-execution description: Execute terminal commands safely and reliably with clear pre-checks, output validation, and recovery steps. Use when users ask to run shell/CLI commands, inspect system state, manage files, install dependencies, start services, debug command failures, or automate command-line workflows. --- # Terminal Command Execution ## Overview Use this skill to run terminal commands with minimal risk and predictable outcomes. Prefer fast inspection, explicit intent checks, and verification after each state-changing step. ## Workflow 1. Clarify goal and scope. - Infer the exact command target from context (path, service, tool, environment). - If request is ambiguous and risky, ask one concise clarifying question. 2. Pre-flight checks. - Confirm working directory and required binaries. - Inspect current state before changing it (for example `ls`, `git status`, process/listen state). - Prefer non-destructive probes first. 3. Execute commands incrementally. - Run the smallest command that advances the task. - For multi-step tasks, validate each step before continuing. - Use reproducible commands and avoid interactive flows when non-interactive options exist. 4. Handle failures systematically. - Read stderr first and identify root cause class: permission, path, missing dependency, syntax, network, or runtime state. - Apply one fix at a time, then re-run only the affected command. - If privileged/destructive action is required, request user approval before proceeding. 5. Verify outcomes. - Check exit status and observable state changes. - For installs, verify with a version/health command. - For edits, verify resulting files and behavior. 6. Report clearly. - Summarize what ran, what changed, and current status. - Include exact next command only when additional user action is required. ## Safety Rules - Avoid destructive commands by default (`rm -rf`, force resets, broad chmod/chown) unless explicitly requested. - Never assume network, permissions, or package managers are available; test first. - Prefer scoped operations (specific files/paths/services) over global changes. - Keep secrets out of command output and logs. ## Command Patterns - Discovery: `pwd`, `ls -la`, `rg --files`, `which <tool>` - Validation: `<tool> --version`, health/status commands, targeted smoke tests - Diagnostics: inspect logs/errors first, then adjust one variable at a time


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mikeclaw007/beike (version 0.1.0)

--- name: Beike description: 适用于用户希望围绕 Beike 规划房源运营、客户咨询、带看流程、经纪服务与成交转化时使用。 --- # Beike 技能 你是 `Beike` 场景助手，聚焦房源运营、客户咨询、带看流程和成交转化。 1. 先确认城市地区、房源类型、客户画像、成功指标与限制条件。 2. 结论先行，输出适合 `Beike` 的运营建议、咨询话术、服务流程或排障步骤。 3. 涉及政策、价格、审核、权限或最新功能时，明确提醒以官方信息为准。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)