OpenClaw/clawhub-security-signals huggingface dataset:
Skill: angween/idx-market-data (version 1.0.0)

--- name: idx-market-data description: Memberikan data pasar saham Bursa Efek Indonesia (IDX) secara real-time dan historis melalui API GoAPI. Gunakan skill ini saat pengguna bertanya tentang harga saham, daftar emiten, indeks pasar, atau profil perusahaan di BEI. metadata: openclaw: emoji: "📈" requires: config: - GOAPI_KEY --- # IDX Market Data (GoAPI) Skill ini memungkinkan OpenClaw untuk mengakses data pasar modal Indonesia secara langsung. ## Konfigurasi Pastikan Anda telah memiliki API Key dari [GoAPI.io](https://goapi.io) dan mengaturnya di environment variable: - `GOAPI_KEY`: API Key Anda dari GoAPI Key Manager. ## Format Autentikasi **PENTING:** Gunakan query parameter, BUKAN header Authorization. ``` https://api.goapi.io/stock/idx/companies?[REDACTED_SECRET] ``` ## Endpoint Utama & Penggunaan ### 1. Daftar Emiten (Stocks) Mendapatkan daftar seluruh perusahaan yang tercatat di bursa. - **Endpoint**: `/stock/idx/companies?[REDACTED_SECRET]` - **Tujuan**: Mencari kode saham (ticker) atau nama perusahaan. ### 2. Saham Trending & Harga Terbaru Mendapatkan harga saham terbaru dan yang sedang trending. - **Endpoint**: `/stock/idx/trending?[REDACTED_SECRET]` - **Output**: Harga close, change (poin & persentase), nama perusahaan - **Catatan**: Endpoint ini berisi data harga real-time untuk saham aktif ### 3. Data Historis (EOD) Mendapatkan data harga harian (End of Day). - **Endpoint**: `/stock/idx/{symbol}/historical?[REDACTED_SECRET]` - **Parameter**: `from` (YYYY-MM-DD), `to` (YYYY-MM-DD) ### 4. Indeks Pasar (IHSG & Lainnya) Memantau pergerakan indeks. - **Endpoint**: `/stock/idx/indices?[REDACTED_SECRET]` ## Panduan Instruksi Agen 1. **Identifikasi Simbol**: Jika pengguna menyebutkan nama perusahaan (misal: "Telkom"), cari kodenya terlebih dahulu menggunakan endpoint `/companies` sebelum memanggil data harga. 2. **Harga Real-time**: Gunakan endpoint `/trending` untuk mendapatkan harga terbaru saham yang aktif diperdagangkan. 3. **Format Output**: Sajikan data dalam bentuk tabel atau list yang mudah dibaca. Sertakan perubahan harga (dalam poin dan persentase) jika tersedia. 4. **Mata Uang**: Semua harga dalam Rupiah (IDR). 5. **Batasan**: Informasikan kepada pengguna jika API Key tidak valid atau limit kuota tercapai berdasarkan response dari server. ## Contoh Prompt - "Berapa harga saham BBCA hari ini?" - "Tampilkan daftar saham yang sedang trending di IDX." - "Berikan data historis saham ASII selama seminggu terakhir." - "Cari harga ANTM saat ini"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: dany9328/parcel-tracking (version 1.0.2)

--- name: parcel-tracker description: Erkennt automatisch den Paketdienst (DHL, Hermes, UPS, GLS, Amazon etc.) via Track123-API und ruft Tracking-Informationen ab. Optional PLZ für erweiterte Infos. version: 1.1.0 --- metadata: openclaw: emoji: "📦" bins: ["python3"] env: - name: TRACK123_API_SECRET required: true description: Track123 API-Secret (aus deinem Account: Developer > Webhook/API).[web:34] - name: TRACK123_API_BASE required: false default: "https://api.track123.com/gateway/open-api/tk/v2" description: Track123 API-Base-URL. os: ["linux", "darwin"] triggers: - match: regex pattern: "(?i)(tracke|verfolge|status) (mein|eine|ein|dieses)? paket" - match: regex pattern: "(?i)(sendungsverfolgung|sendungsstatus|tracking status)" commands: - name: track description: Holt Tracking-Status via Track123 (auto-detect Carrier). args: - name: tracking_number type: string required: true - name: postal_code type: string required: false run: bin: python3 script: track.py cwd: "." timeout: 30 usage: examples: - "Tracke Paket 00340434161234567890, PLZ 73614." - "Sendungsstatus für 1Z9999W99999999999."

path: venv/lib/python3.14/site-packages/certifi-2026.1.4.dist-info/top_level.txt
content: certifi


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: edwinjhlee/x-cmd (version 1.0.1)

--- name: x-cmd description: | Load x-cmd first: `. ~/.x-cmd.root/X`, then explore with `x nihao --llmstxt` or discover skills via `x skill`. x-cmd provides 600+ portable software and development tools (jq, nodejs, python, etc.). Use `x <env|pixi> use <pkg>` to install and use any package instantly. Load x-cmd, then packages in x-cmd/pixi's local bin will be automatically available in PATH. Execute `x skill` for more skills and functions. Browse x-cmd website for more usage and skills: https://www.x-cmd.com/llms.txt license: Apache-2.0 compatibility: POSIX Shell (sh/bash/zsh/dash/ash) metadata: author: Li Junhao version: "1.0.1" category: core tags: [shell, cli, tools, package-management, portable] repository: https://github.com/x-cmd-skill/x-cmd website: https://www.x-cmd.com install_doc: data/install.md --- # x-cmd > Load x-cmd first: `. ~/.x-cmd.root/X`, then explore with `x nihao --llmstxt` or discover skills via `x skill`. --- ## Not installed? → [data/install.md](data/install.md) --- ## Run `x skill` to browse 200+ skills ```bash x skill ``` --- ## Visit x-cmd.com/llms.txt for more skill and power tools. Entrance for AI agents. --- ## Run `x env use <pkg>` to install any package instantly | Command | Purpose | |---------|---------| | `x env la` | List 600+ available software | | `x env la --json` | JSON output for scripting | | `x env use <pkg>` | Install and use a package (downloads to x-cmd local bin) | | `x pixi use <pkg>` | Install package via pixi (downloads to pixi local bin) | | `x pixi search <keyword>` | Search pixi packages | | `x nihao --llmstxt` | View llms.txt | --- ## Try now: `x env use jq nodejs python3` ```bash # Install and use tools x env use jq x env use nodejs x env use python3 # After installation, use directly jq '.' file.json python3 -c "print(2+2)" # Pixi for additional packages x pixi use cowsay x pixi search yml ``` --- ## Access 600+ tools: languages, editors, dev tools, databases **Languages & Runtimes**: nodejs, python, rust, go, java, deno, bun, ruby, php **Editors**: nvim, helix, emacs, vim **Dev Tools**: git, gh, glab, fzf, ripgrep, fd, bat, exa, zoxide **Data**: jq, yq, fx, csvkit, ffmpeg, imagemagick **System**: htop, btop, procs, direnv, tmux **Databases**: redis, sqlite, postgresql, mysql **Full list**: `x env la` --- ## Zero setup required: no sudo, auto PATH, isolated - No sudo required - Packages installed to user-local directories - PATH automatically configured by `. ~/.x-cmd.root/X` startup script - Isolated environments - No version conflicts - 600+ tools available --- ## More: https://x-cmd.com/llms.txt Entrance for AI agents.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: rsquaredsolutions2026/odds-scanner (version 1.1.0)

--- name: odds-scanner description: "Fetch live sports betting odds from 20+ sportsbooks and compare lines. Supports NFL, NBA, MLB, NHL, soccer, and 30+ sports. Use when asked about odds, lines, spreads, totals, or sportsbook comparison." metadata: openclaw: emoji: "📊" requires: bins: ["curl", "jq"] credentials: - id: "odds-api-key" name: "The Odds API Key" description: "Free API key from https://the-odds-api.com/" env: "ODDS_API_KEY" --- # Sports Odds Scanner Fetch and compare live betting odds from 20+ sportsbooks via The Odds API. ## When to Use Use this skill when the user asks about: - Current odds, lines, spreads, or totals for any sport - Comparing sportsbook lines for a specific game - Finding the best available line - Which sportsbooks have the sharpest odds - Vig or hold percentage for a market ## Sport Keys Common sport keys for the API: | Sport | Key | |-------|-----| | NFL | americanfootball_nfl | | NCAA Football | americanfootball_ncaaf | | NBA | basketball_nba | | NCAA Basketball | basketball_ncaab | | MLB | baseball_mlb | | NHL | icehockey_nhl | | EPL | soccer_epl | | MLS | soccer_usa_mls | | La Liga | soccer_spain_la_liga | | Champions League | soccer_uefa_champions_league | | UFC/MMA | mma_mixed_martial_arts | | FIFA World Cup | soccer_fifa_world_cup | For the full list, run the "List active sports" command below. ## Operations ### 1. List Active Sports Show which sports currently have odds: ```bash curl -s "https://api.the-odds-api.com/v4/sports?[REDACTED_SECRET]" \ | jq '[.[] | select(.active==true) | {key, title, description}]' ## About Built by [AgentBets](https://agentbets.ai) — full tutorial at [agentbets.ai/guides/openclaw-odds-scanner-skill/](https://agentbets.ai/guides/openclaw-odds-scanner-skill/). Part of the [OpenClaw Skills series](https://agentbets.ai/guides/#openclaw-skills) for the [Agent Betting Stack](https://agentbets.ai/guides/agent-betting-stack/).


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: danielsinewe/voice-call (version 0.1.0)

--- name: voice-call description: Start voice calls via the OpenClaw voice-call plugin. metadata: { "openclaw": { "emoji": "📞", "skillKey": "voice-call", "requires": { "config": ["plugins.entries.voice-call.enabled"] }, }, } --- # Voice Call Use the voice-call plugin to start or inspect calls (Twilio, Telnyx, Plivo, or mock). ## CLI ```bash openclaw voicecall call --to "+15555550123" --message "Hello from OpenClaw" openclaw voicecall status --call-id <id> ``` ## Tool Use `voice_call` for agent-initiated calls. Actions: - `initiate_call` (message, to?, mode?) - `continue_call` (callId, message) - `speak_to_user` (callId, message) - `end_call` (callId) - `get_status` (callId) Notes: - Requires the voice-call plugin to be enabled. - Plugin config lives under `plugins.entries.voice-call.config`. - Twilio config: `provider: "twilio"` + `twilio.accountSid/authToken` + `fromNumber`. - Telnyx config: `provider: "telnyx"` + `telnyx.apiKey/connectionId` + `fromNumber`. - Plivo config: `provider: "plivo"` + `plivo.authId/authToken` + `fromNumber`. - Dev fallback: `provider: "mock"` (no network).


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: wd041216-bit/ironclaw-security-guard (version 0.2.0)

--- name: ironclaw-security-guard homepage: https://github.com/wd041216-bit/openclaw-ironclaw-security-guard description: Add lightweight defense-in-depth guardrails to OpenClaw with dangerous-command blocking, prompt-injection detection, secret redaction, and audit logging. --- # IronClaw Security Guard Use this skill when an OpenClaw runtime needs lightweight security guardrails rather than a full sandbox. ## What it is for Use it when the user wants to: - reduce risky shell execution - protect sensitive paths and credentials - detect prompt-injection patterns in untrusted content - redact secrets before outgoing messages - keep an audit trail of risky or blocked behavior ## What it covers - shell-risk filtering - protected path detection - prompt-injection heuristics - outbound secret redaction - audit logging - manual inspection through `ironclaw_security_scan` ## When to use it - local-model deployments - tool-heavy OpenClaw setups - environments with chat, shell, web, and file tools enabled - operator workflows that need safety checks without a heavyweight sandbox ## Non-goals This skill does not: - provide container isolation - guarantee malware containment - replace OS, network, or credential-hygiene controls ## Operating workflow 1. Check whether the plugin is enabled or running in `monitorOnly` mode. 2. Review configured allowlists, blocked command patterns, and protected path patterns. 3. Use `ironclaw_security_scan` first when content or tool parameters look suspicious. 4. Prefer the least-privileged path for shell, network, and messaging actions. 5. If the plugin blocks a call, inspect the audit log before overriding safeguards. ## Output expectations Good use of this skill should usually produce: - a concise risk explanation - the matched finding category - a safer alternative when one exists - a note about whether the event should be audited or blocked


Security scan verdicts — ClawScan: suspicious | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: kyoiii/skill-listing-polisher (version 0.1.0)

--- name: skill-listing-polisher description: Improve a skill's public listing before publish. Use when tightening title, description, tags, changelog, and scan-friendly packaging so the listing looks clearer and less suspicious. version: 0.1.0 --- # Skill Listing Polisher Use this skill before publishing or updating a public ClawHub skill. ## What to improve - title clarity - description length and truncation risk - tags that match the actual use case - changelog that says what changed in plain language - public package surface that looks normal in review ## Review order 1. shorten the public description if it gets cut off 2. remove internal-only scripts and private identifiers 3. tighten tags to actual buyer intent 4. make the changelog specific and boring 5. check that the package only contains user-facing files ## Fast checks Run the bundled script: ```bash ./scripts/check-listing.sh /path/to/skill ``` ## Output style When reviewing a skill, return: 1. what weakens trust 2. what weakens discoverability 3. the smallest edit that improves both


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: 275254cl-hash/taobao-price-monitor (version 1.0.0)

--- name: taobao-price-monitor version: 1.0.0 description: 监控淘宝/天猫商品价格，支持历史价格查询、降价提醒、比价功能。适合电商卖家、代购、精明消费者。 homepage: https://github.com/openclaw/skills metadata: { "openclaw": { "emoji": "🛒", "requires": { "bins": ["python3", "curl"], "env": ["TAOBAO_COOKIE"] }, "install": [ { "id": "requests", "kind": "pip", "package": "requests", "label": "安装依赖：pip3 install requests", }, ], }, } --- # 淘宝价格监控技能 监控淘宝/天猫商品价格，支持历史价格查询、降价提醒、跨平台比价。 ## 功能 1. **价格查询**: 实时获取商品当前价格 2. **历史价格**: 查看商品历史价格走势 3. **降价提醒**: 设置目标价，降价时通知 4. **比价功能**: 同款商品跨店铺比价 5. **批量监控**: 同时监控多个商品 ## 快速开始 ### 1. 安装依赖 ```bash pip3 install requests playwright playwright install ``` ### 2. 配置 Cookie（可选，用于突破反爬） 在 `~/.openclaw/openclaw.json` 中添加： ```json5 { skills: { entries: { "taobao-price-monitor": { enabled: true, env: { TAOBAO_COOKIE: "your_cookie_here", }, }, }, }, } ``` ### 3. 使用方式 **查询单个商品价格**: ``` 监控淘宝价格 https://item.taobao.com/item.htm?id=123456789 ``` **设置降价提醒**: ``` 当这个商品降到 100 元以下时提醒我 https://item.taobao.com/item.htm?id=123456789 ``` **批量监控**: ``` 监控以下商品的价格： - https://item.taobao.com/item.htm?id=123 - https://item.taobao.com/item.htm?id=456 - https://item.taobao.com/item.htm?id=789 ``` **查看历史价格**: ``` 查看这个商品的历史价格走势 https://item.taobao.com/item.htm?id=123456789 ``` **比价**: ``` 帮我找同款商品的最低价 https://item.taobao.com/item.htm?id=123456789 ``` ## 工具说明 ### 核心工具 | 工具 | 功能 | 调用方式 | |------|------|---------| | `query_price.py` | 查询商品价格 | 自动调用 | | `history_price.py` | 历史价格查询 | 自动调用 | | `price_alert.py` | 降价提醒设置 | 自动调用 | | `compare_price.py` | 比价功能 | 自动调用 | ### 输出格式 ```json { "item_id": "123456789", "title": "商品标题", "current_price": 199.00, "original_price": 299.00, "discount": "6.7 折", "sales": "月销 1000+", "shop_name": "店铺名称", "shop_rating": 4.8, "delivery": "包邮", "timestamp": "2026-03-24 00:00:00" } ``` ## 注意事项 1. **反爬限制**: 高频访问可能需要 Cookie 或代理 2. **价格准确性**: 促销价格可能实时变化 3. **地区差异**: 部分商品有地区限价 4. **使用频率**: 建议单 IP 每分钟不超过 10 次请求 ## 进阶用法 ### 定时监控 配置 cron 任务，每小时自动检查： ```json5 { cron: { jobs: [ { id: "taobao-price-check", schedule: { kind: "every", everyMs: 3600000 }, payload: { kind: "agentTurn", message: "检查监控的淘宝商品价格，有变化时通知我" }, sessionTarget: "isolated", } ] } } ``` ### 导出数据 ``` 导出我监控的所有商品价格数据为 Excel ``` ### API 调用（高级） 技能支持 HTTP API 调用，适合集成到其他系统： ```bash curl http://localhost:18789/skills/taobao-price-monitor/query \ -d '{"item_id": "123456789"}' ``` ## 变现模式 ### 免费功能 - 每日 10 次价格查询 - 基础历史价格 - 手动比价 ### 付费功能（¥99/月） - 无限次查询 - 实时降价提醒 - 批量监控（100+ 商品） - 数据导出 - API 访问 ### 企业版（¥5000/年） - 私有部署 - 自定义监控规则 - 数据 API - 专属支持 ## 常见问题 **Q: 为什么有些商品价格获取失败？** A: 可能是反爬限制，尝试配置 Cookie 或使用代理。 **Q: 历史价格数据准确吗？** A: 基于公开数据抓取，仅供参考，以实际下单为准。 **Q: 可以监控拼多多/京东吗？** A: 请安装对应的 `pinduoduo-price-monitor` 和 `jd-price-monitor` 技能。 ## 更新日志 - v0.1.0 (2026-03-24): 初始版本，基础价格查询 ## 支持 - GitHub: https://github.com/openclaw/skills - 问题反馈：提交 Issue --- **声明**: 本技能仅供学习研究使用，请遵守淘宝/天猫平台规则。


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: jirboy/thesis-writer (version 1.0.0)

--- name: thesis-writer description: [已整合] 学位论文写作已整合到 paper 统一入口技能 argument-hint: "[章节] [内容]" --- # ⚠️ 已整合 - 请使用 paper 统一入口 > **本技能保留用于向后兼容，功能已整合到 `paper` 统一入口技能** > > **推荐使用：** `paper thesis [章节] [内容]` 或直接使用本技能（自动转发） --- # Thesis Writer（兼容层） 学位论文撰写助手 - 基于 Claude Code 论文工作流理念，帮助硕士研究生高效完成学位论文。 ## 迁移指南 **新用法：** ``` paper thesis chapter1 绪论 paper thesis abstract 硕士论文 paper thesis consistency 全文一致性检查 ``` **旧用法（仍然可用）：** ``` thesis chapter1 绪论 ``` ## 核心功能 - 章节扩写 - 一致性修订 - 导师意见落实 - 降重去 AI 味 - 术语统一管理 ## 推荐工作区结构 ``` thesis-workspace/ ├── drafts/ # 当前论文正文 ├── papers/ # 已有小论文或方法原稿 ├── reference/ # 范文、优秀论文、章节参考 ├── templates/ # LaTeX/Word 模板和章节模板 ├── notes/ # 术语表、导师意见、图表索引 └── .openclaw/skills/paper/ # 本技能 ``` ## 写作规范（硬约束） - ✅ 使用正式学术表达，避免口语化 - ✅ 不用"我们"，改用"本文""本章" - ✅ 缩写首次出现必须写中英文全称 - ✅ 术语翻译全文统一 - ✅ 不得编造实验数据 - ✅ 不得新增不存在的引用


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mvogt99/missing-error-handling (version 1.0.0)

--- name: missing-error-handling description: Code handles only the happy path — external calls, I/O, and parsing have no failure handling and crash on anything unexpected. emoji: ⚠️ metadata: clawdis: os: [macos, linux, windows] --- # missing-error-handling Every external interaction is a source of failure: network, disk, subprocess, parsing, third-party API. If the code assumes they always succeed, a production run will hit the first unexpected condition and crash unhelpfully. ## Symptoms - HTTP calls without status-code checks and without timeout. - File I/O with no handling for missing files, permission denied, or partial reads. - Subprocess calls that ignore non-zero exit codes. - `JSON.parse` / `yaml.load` with no handling of malformed input. - Broad `except:` / `catch (e) {}` that swallows everything without logging. ## What to do - For each external call, list the failure modes explicitly: timeout, non-2xx status, missing resource, malformed payload, permissions. Handle each with specific recovery or a loud failure. - Add a timeout to every network call. No exceptions. - When catching, catch the specific exception types you can actually recover from. Let unknown errors propagate with context. - When swallowing is unavoidable, log the full error with context — at minimum, the operation that failed and the arguments. - Distinguish "user-visible error" (explain, ask them to retry or adjust) from "internal error" (log with stack, fail fast). Don't leak internal errors to users.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: xiaoluoboding/flomo-notes (version 0.1.0)

--- name: flomo-notes description: Save notes to Flomo via the Flomo inbox webhook. Use when the user says "save to flomo", "记录到 flomo", "flomo note", or asks to store a note in flomo. --- # flomo-notes Save notes to [Flomo](https://flomoapp.com/) using a single webhook POST. ## Setup Provide your Flomo inbox webhook URL via environment variable: - `FLOMO_WEBHOOK_URL` (required), example: `https://flomoapp.com/iwh/XXXXXXXX` You can set it either: 1) In `~/.openclaw/openclaw.json` (recommended): ```json5 { skills: { entries: { "flomo-notes": { env: { FLOMO_WEBHOOK_URL: "https://flomoapp.com/iwh/XXXXXXXX" } } } } } ``` 2) Or in your shell/service environment: ```bash export FLOMO_WEBHOOK_URL="https://flomoapp.com/iwh/XXXXXXXX" ``` ## How the skill works When triggered, run: ```bash bash scripts/save_to_flomo.sh "<note text>" ``` ## Example prompts (to trigger) - `save to flomo: buy milk, eggs` - `记录到 flomo：下周美股大事件...` ## Script manual test ```bash FLOMO_WEBHOOK_URL="https://flomoapp.com/iwh/XXXXXXXX" \ bash scripts/save_to_flomo.sh "hello from openclaw" ``` ## Security Treat the webhook URL like a [REDACTED_SECRET] with it can post into your Flomo inbox.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: albionaiinc-del/fileclean (version 1.0.0)

# FileClean Cleans filename clutter by removing date timestamps, hashes, UUIDs, and excessive symbols, transforming messy filenames like `report_20230101_a1b2c3d.pdf` into clean, readable ones like `Report.pdf`. ## Usage Preview changes: ```bash python fileclean.py ~/Downloads ~/Documents --skip-ext pdf jpg ``` Apply changes: ```bash python fileclean.py myfile.txt --rename ``` ## Price $2.75


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: haveblue997/mcp-sanctions-check (version 1.0.0)

--- name: mcp-sanctions-check description: Check names against the OFAC SDN (Specially Designated Nationals) sanctions list via MCP. Downloads and caches official SDN CSV, auto-refreshes every 24h. Case-insensitive token matching with optional country filter. Use when agents need compliance screening before financial transactions. version: 1.0.0 metadata: openclaw: requires: bins: - npx emoji: 🛡️ --- # Sanctions Check (OFAC SDN) Screen names against the US Treasury OFAC Specially Designated Nationals list. ## Setup ```json { "mcpServers": { "sanctions-check": { "command": "npx", "args": ["-y", "@vbotholemu/mcp-sanctions-check"] } } } ``` ## Tool: `check_sanctions` | Parameter | Type | Required | Description | |-----------|--------|----------|-------------| | name | string | yes | Name to check against SDN list | | country | string | no | Country to narrow results | ### Example Check "John Doe" → returns match status, matched entries with type/programs/remarks, and timestamp. ## How It Works - Downloads official OFAC SDN CSV on first call - Caches locally, refreshes every 24 hours - Case-insensitive, token-based matching (handles name variations) - Returns structured JSON with match boolean, entries array, and check timestamp ## When to Use - Before processing payments or financial transactions - Customer onboarding / KYC screening - Compliance checks for international business - Charter booking verification (BVI, international waters)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: jpengcheng523-netizen/jpeng-video-transcriber (version 1.0.0)

--- name: jpeng-video-transcriber description: "Transcribe speech from videos" version: "1.0.0" author: "jpeng" tags: ["ai", "transcription", "video"] --- # Video Transcriber Transcribe speech from videos ## When to Use - User needs ai related functionality - Automating transcription tasks - Video operations ## Usage ```bash python3 scripts/video_transcriber.py --input <input> --output <output> ``` ## Configuration Set required environment variables: ```bash export TRANSCRIPTION_API_KEY="your-api-key" ``` ## Output Returns JSON with results: ```json { "success": true, "data": {} } ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)