OpenClaw/clawhub-security-signals huggingface dataset:
Skill: martin004/joplin-notes (version 1.0.0)

--- name: joplin-notes description: Interface for managing Joplin notes via WebDAV. Allows listing notebooks and notes, reading content (first line = title), and creating or updating notes and notebooks. Use this skill when the user wants to access or modify their Joplin database programmatically. --- # Joplin Notes Skill This skill provides programmatic access to a Joplin database synchronized via WebDAV. ## How it Works Joplin stores notes and notebooks as `.md` files in a flat directory. They are linked via metadata at the end of the file (`id`, `parent_id`, `type_`). - **Title:** The first line of the file is the title of the note or notebook. - **Notebook:** A special file type (`type_: 2`) that serves as a container for notes. - **Note:** A standard file (`type_: 1`) assigned to a notebook via `parent_id`. ## Available Scripts The scripts are located in `scripts/` and require the following environment variables: - `JOPLIN_PASSWORD`: The password for WebDAV access. - `JOPLIN_ACCOUNT`: The username for Joplin (e.g., `openclaw`). - `JOPLIN_WEBDAV_PATH`: The full path to the Joplin directory on the WebDAV server. ### 1. List Notes (`list_notes.py`) Outputs the entire structure of notebooks and their contained notes. - **Usage:** `python3 scripts/list_notes.py` ### 2. Get Note Content (`get_note.py`) Reads the content of a specific note by its ID. - **Usage:** `python3 scripts/get_note.py <note_id>` ### 3. Upsert Note/Notebook (`upsert_note.py`) Updates an existing note or creates a new one. Supports notebooks via the type parameter. - **Usage:** `python3 scripts/upsert_note.py <note_id|new> <parent_id> <content_file> [type (1=note, 2=notebook)]` ### 4. Create Notebook (`create_notebook.py`) Creates a new notebook. - **Usage:** `python3 scripts/create_notebook.py <title> [parent_notebook_id]` ## Workflow Examples ### Query Structure 1. `exec("python3 /home/openclaw/.openclaw/workspace/skills/joplin-notes/scripts/list_notes.py")` 2. Analyze the output to find the desired `note_id` or `notebook_id`. ### Read Note Content 1. `exec("python3 /home/openclaw/.openclaw/workspace/skills/joplin-notes/scripts/get_note.py <note_id>")` ### Edit or Create Note 1. Download the current content with `get_note.py` (if editing). 2. Create a temporary file with the new content (include the title in the first line). 3. Call `upsert_note.py`.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: ckchzh/finality (version 1.0.0)

--- name: "finality" version: "1.0.0" description: "Analyze finality operations. Use when you need to understand finality mechanisms, evaluate protocol security, or reference on-chain concepts." author: "BytesAgain" homepage: "https://bytesagain.com" source: "https://github.com/bytesagain/ai-skills" tags: [finality, blockchain, cli, tool] category: "blockchain" --- # Finality Analyze finality operations. Use when you need to understand finality mechanisms, evaluate protocol security, or reference on-chain concepts. ## When to Use - **status**: Show current status - **add**: Add new entry - **list**: List all entries - **search**: Search entries - **remove**: Remove entry by number - **export**: Export data to file - **stats**: Show statistics - **config**: View or set config ## Commands ### `status` ```bash scripts/script.sh status ``` Show current status ### `add` ```bash scripts/script.sh add ``` Add new entry ### `list` ```bash scripts/script.sh list ``` List all entries ### `search` ```bash scripts/script.sh search ``` Search entries ### `remove` ```bash scripts/script.sh remove ``` Remove entry by number ### `export` ```bash scripts/script.sh export ``` Export data to file ### `stats` ```bash scripts/script.sh stats ``` Show statistics ### `config` ```bash scripts/script.sh config ``` View or set config ### `help` ```bash scripts/script.sh help ``` ### `version` ```bash scripts/script.sh version ``` ## Configuration Use `scripts/script.sh config <key> <value>` to customize behavior. | Variable | Description | |----------|-------------| | `FINALITY_DIR` | Data directory (default: ~/.finality/) | --- *Powered by BytesAgain | bytesagain.com | [REDACTED_SECRET]*


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: theshadowrose/process-guard (version 2.1.4)

--- name: "ProcessGuard — Critical Process Monitor & Auto-Restart" description: "Monitor critical processes and auto-restart on failure. Tracks CPU and memory usage, escalates alerts via webhook, callback, or file, and writes a dead man's switch heartbeat so you know if ProcessGuard itself goes down. HTTP dashboard included. Zero required dependencies — CPU/memory monitoring unlocked with optional pidusage install." author: "@TheShadowRose" version: "2.1.4" tags: ["process-guard", "monitor", "auto-restart", "uptime", "devops"] license: "MIT" --- # ProcessGuard — Critical Process Monitor & Auto-Restart Keep services running without babysitting. Define processes, configure health checks, and let ProcessGuard handle the rest. ## What It Does - **Health checks** — HTTP, TCP port, PID file, or shell command - **Auto-restart** — configurable retry limits and cooldown delays - **CPU & memory monitoring** — per-process thresholds with alerts (requires `npm install pidusage`) - **Alert escalation** — warning → critical, delivered via callback / webhook / JSON file - **Dead man's switch** — heartbeat file updated every 10s so external monitors know if ProcessGuard itself crashes - **HTTP dashboard** — optional `/status` endpoint for real-time JSON status - **Command allowlist** — optionally restrict which executables restart/check commands may use ## Quick Setup ```javascript const { ProcessGuard } = require('./src/process-guard'); const guard = new ProcessGuard({ processes: [ { name: 'ollama', check: 'http://localhost:11434/api/tags', restart: 'ollama serve', maxRestarts: 5, cooldown: 5000 } ], checkInterval: 30000, dashboardPort: 9090, alert: { onAlert: async (alert) => console.error(`ALERT: ${alert.message}`) } }); guard.start(); ``` See README.md for full documentation, all config options, and advanced examples.


Security scan verdicts — ClawScan: clean | static analysis: suspicious | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: nguyenttham085/test-monitor-openclaw-server (version 1.0.0)

--- name: oc_system_resource_monitor description: A clean, reliable system resource monitor for CPU load, RAM, Swap, and Disk usage. Optimized for OpenClaw. version: 1.0.0 author: Thien CloudFly --- # System Resource Monitor A specialized skill designed to provide concise, real-time server health reports. Unlike bloated alternatives, it uses native system calls for maximum reliability and speed. ## Features - **CPU Load**: Displays 1, 5, and 15-minute averages. - **Memory**: Tracks both physical RAM and Swap usage. - **Disk**: Monitors root partition capacity and percentage. - **Uptime**: Shows how long your "horse" has been running. - Send to monitor server test (valid webhook) - only for testing ## Usage Simply ask the agent for "system status", "resource usage", or "server health". The skill executes the local `monitor.sh` script.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: nexscope/market-gap-analysis (version 1.0.0)

--- name: market-gap-analysis description: "Identify underserved market gaps and unmet customer needs in e-commerce. Analyzes competitor blind spots, review pain points, search demand without adequate supply, and emerging customer segments." metadata: nexscope: emoji: "🎯" category: ecommerce --- # Market Gap Analysis 🎯 Identify underserved market gaps and unmet customer needs in e-commerce. Analyzes competitor blind spots, review pain points, search demand without adequate supply, and emerging customer segments. **Supported platforms:** Amazon, Shopify, WooCommerce, Walmart, TikTok Shop, Etsy, eBay, BigCommerce. Built by [Nexscope](https://www.nexscope.ai/) — your AI assistant for smarter e-commerce decisions. ## Install ```bash npx skills add nexscope-ai/eCommerce-Skills --skill market-gap-analysis -g ``` ## Usage ``` Find market gaps in the home office furniture category on Amazon. What are customers asking for that nobody is providing well? ``` ## Capabilities - Competitor coverage gap identification - Review-based pain point extraction and opportunity mapping - Search demand vs supply analysis - Underserved customer segment identification - Price gap analysis (price points with no quality options) - Feature gap mapping across competitor products ## How This Skill Works **Step 1:** Collect information from the user's message — product, platform, current situation, and goals. **Step 2:** Ask one follow-up with all remaining questions using multiple-choice format. Allow shorthand answers (e.g., "1b 2c 3a"). **Step 3:** Research and analyze using the frameworks and methodology below. **Step 4:** Deliver structured, actionable output with specific recommendations, not vague advice. ## Output Format - Start with a summary of findings - Include specific data points and benchmarks where available - Provide prioritized action items - Mark estimates with ⚠️ when based on incomplete data - End with concrete next steps ## Other Skills More e-commerce skills: [nexscope-ai/eCommerce-Skills](https://github.com/nexscope-ai/eCommerce-Skills) Amazon-specific skills: [nexscope-ai/Amazon-Skills](https://github.com/nexscope-ai/Amazon-Skills) Built by [Nexscope](https://www.nexscope.ai/) — your AI assistant for smarter e-commerce decisions.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mohdalhashemi98-hue/mh-wacli (version 1.0.0)

--- name: wacli description: Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats). homepage: https://wacli.sh metadata: { "openclaw": { "emoji": "📱", "requires": { "bins": ["wacli"] }, "install": [ { "id": "brew", "kind": "brew", "formula": "steipete/tap/wacli", "bins": ["wacli"], "label": "Install wacli (brew)", }, { "id": "go", "kind": "go", "module": "github.com/steipete/wacli/cmd/wacli@latest", "bins": ["wacli"], "label": "Install wacli (go)", }, ], }, } --- # wacli Use `wacli` only when the user explicitly asks you to message someone else on WhatsApp or when they ask to sync/search WhatsApp history. Do NOT use `wacli` for normal user chats; OpenClaw routes WhatsApp conversations automatically. If the user is chatting with you on WhatsApp, you should not reach for this tool unless they ask you to contact a third party. Safety - Require explicit recipient + message text. - Confirm recipient + message before sending. - If anything is ambiguous, ask a clarifying question. Auth + sync - `wacli auth` (QR login + initial sync) - `wacli sync --follow` (continuous sync) - `wacli doctor` Find chats + messages - `wacli chats list --limit 20 --query "name or number"` - `wacli messages search "query" --limit 20 --chat <jid>` - `wacli messages search "invoice" --after 2025-01-01 --before 2025-12-31` History backfill - `wacli history backfill --chat <jid> --requests 2 --count 50` Send - Text: `wacli send text --to "+14155551212" --message "Hello! Are you free at 3pm?"` - Group: `wacli send text --to "[REDACTED_SECRET]" --message "Running 5 min late."` - File: `wacli send file --to "+14155551212" --file /path/agenda.pdf --caption "Agenda"` Notes - Store dir: `~/.wacli` (override with `--store`). - Use `--json` for machine-readable output when parsing. - Backfill requires your phone online; results are best-effort. - WhatsApp CLI is not needed for routine user chats; it’s for messaging other people. - JIDs: direct chats look like `<number>@s.whatsapp.net`; groups look like `<id>@g.us` (use `wacli chats list` to find).


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: markma84/github-bug-report (version 1.0.2)

--- name: github-bug-report description: "Submit bug reports to GitHub for OpenClaw issues. Use when: (1)发现了明确的bug并想提交给官方; (2)官方产品出现问题需要报障; (3)想查询现有issue状态; (4)需要跟进已提交issue的进展. Includes issue template, GitHub API workflow, and post-submission follow-up reminders via cron." --- # GitHub Bug Report 向 OpenClaw 官方仓库提交 bug report 的标准化流程。 ## 核心原则 - 提交前先搜索是否有人已经报过同样的问题，避免重复 - 格式按官方建议：标题含版本号、步骤编号、预期 vs 实际结果分开 - 提交后用 cron 建跟进提醒，三天后 bump 一次 ## Issue 提交标准格式 标题格式：`[版本号] Bug简述` 内容必须包含： ``` ## Bug Description （清晰描述问题） ## Steps to Reproduce 1. 第一步 2. 第二步 3. 第三步 ## Expected Behavior （预期应该怎样） ## Actual Behavior （实际出了什么岔子） ## Environment - OS / 版本 - OpenClaw 版本 - Node 版本 - Model（如果是模型相关） ## Additional Context （如有日志、截图、配置 JSON，贴在这里） ``` ## 快速提交流程 ### 1. 提交新 issue ```bash # 使用 scripts/submit_issue.py python3 scripts/submit_issue.py --title "[v1.x.x] Bug标题" --body "内容" ``` ### 2. 提交后立即建 cron 跟进 提交成功后，用 cron 建一个 3 天后的提醒： ```json { "name": "Bug跟进-#<issue号>", "schedule": { "kind": "cron", "expr": "0 10 * * *", "tz": "Asia/Shanghai" }, "payload": { "kind": "agentTurn", "message": "检查 GitHub issue #<issue号> 是否有官方回复，如果没有，去 bump 一下（留言：Any update?）" }, "sessionTarget": "isolated", "delivery": { "mode": "announce" } } ``` ### 3. 检查是否已有重复 issue 提交前先搜索： ```bash curl -s "https://api.github.com/search/issues?q=checkpoint+orphan+repo:openclaw/openclaw" \ -H "Authorization: token $GITHUB_TOKEN" ``` ## 常用 GitHub API | 操作 | API | |------|-----| | 查 issue | `GET /repos/openclaw/openclaw/issues/<number>` | | 搜 issue | `GET /search/issues?q=关键词+repo:openclaw/openclaw` | | 建 issue | `POST /repos/openclaw/openclaw/issues` | | 更新 issue | `PATCH /repos/openclaw/openclaw/issues/<number>` | | 查 repo 信息 | `GET /repos/openclaw/openclaw` | ## GitHub Token 当前 token：`[REDACTED_SECRET]` Header 格式： ``` Authorization: token [REDACTED_SECRET] Accept: application/vnd.github+json Content-Type: application/vnd.github+json ``` ## 相关文件 - 提交脚本：`scripts/submit_issue.py` - 快速参考：`references/quick-ref.md`


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: zsy910073370/xianyu-auto-shop (version 1.0.0)

--- name: xianyu-auto-shop displayName: 闲鱼全自动店铺托管 description: 自动擦亮宝贝、定时优化标题、私信自动回复、真人随机延迟、防风控防限流 version: 1.0.0 author: Claw运营助手 tags: [闲鱼,自动化,店铺托管,自动擦亮,自动回复] user-invocable: true metadata: openclaw: permissions: [accessibility, notification, auto-task] --- # 闲鱼全自动店铺托管 ## 功能介绍 1. 每日早晚高峰自动批量擦亮宝贝 2. 模拟真人操作 1.2–3.5秒随机延迟 3. 自带防风控规则，不连点、不高频操作 4. 私信智能自动回复接单话术 5. 每周自动优化商品标题提升搜索曝光 ## 使用命令 批量擦亮 xianyu-auto-shop polish --max 40 --delay 2 自动回复挂机 xianyu-auto-shop reply start 标题优化 xianyu-auto-shop seo ## 推荐定时 每天 08:30、20:00 自动擦亮 每周一 09:00 自动优化标题 常驻监听私信自动回复


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: branchmanager69/opendexter (version 1.0.0)

--- name: opendexter description: "Use OpenDexter to search, price-check, and pay for any x402 API. Trigger whenever the user wants to find paid APIs, call an x402 endpoint, check pricing, see wallet info, or interact with the x402 marketplace." --- # OpenDexter — x402 API Marketplace OpenDexter gives you access to the x402 API marketplace across Solana and EVM chains (Base, Polygon, Arbitrum, Optimism, Avalanche). Search, preview pricing, and call any endpoint with automatic USDC payment. No API keys or subscriptions needed for the endpoints — you just pay per call. ## Tools ### `x402_search` — Find APIs Search the OpenDexter marketplace. Results are ranked by a composite score (quality, usage, freshness, reputation, reliability). Each result includes: name, price (USDC), network, qualityScore (0-100), verified status, seller, and call count. Highlight verified endpoints (qualityScore 75+). Search is fuzzy — typos still find results. ### `x402_check` — Preview Pricing Probe an endpoint for payment requirements without paying. Returns per-chain pricing options. Always use before `x402_fetch` so the user knows the cost upfront. ### `x402_fetch` — Call and Pay Call any x402 endpoint with automatic payment from the configured wallet. The plugin checks USDC balances across all funded chains and picks the best option. Returns the API response data plus a payment receipt. If the wallet has no funds on any accepted chain, tell the user to fund their wallet. ### `x402_pay` — Alias for `x402_fetch` Same tool, alternate name. ### `x402_wallet` — Wallet Status Shows which wallets are configured (Solana, EVM), the per-call spending limit, and the active network. Use when the user asks about their wallet or setup. ## Workflows ### "Find me an API for X" 1. `x402_search` with their query 2. Present top results with prices and quality scores 3. `x402_check` on their pick 4. Show per-chain pricing 5. `x402_fetch` to call it ### "Call this URL" 1. `x402_check` to show the price 2. `x402_fetch` to call and pay ### "What's my wallet setup?" 1. `x402_wallet` ## Quality Scores - 90-100: Excellent. Verified, reliable, well-documented. - 75-89: Good. Passed verification. - 50-74: Mediocre. May have issues. - Below 50: Untested or poor. ## Tips - Most endpoints cost $0.01-$0.10 per call. - Use `verified: true` to filter to tested endpoints. - The plugin auto-selects the cheapest chain that the endpoint accepts and the wallet has funds on. - If no wallet is configured, tools return a config help message.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kofna3369/axiomata-guard-ultimate (version 1.0.1)

--- name: axiomata-guard-ultimate description: "AXIOMA GUARD ULTIMATE — Security checker + quality enhancer for OpenClaw skills. FUSION of axiomata-guard (security) + axiomata-skill-evaluator (quality). Use when: (1) downloading a skill from ClawHub, (2) checking if a skill is dangerous, (3) evaluating skill quality, (4) improving downloaded skills to 90%+ production quality, (5) rejecting and destroying dangerous skills, (6) auto-improving any skill. This super skill checks C2, rootkits, chains, bootkits AND evaluates with Axioma 5-dim + ISO 25010." version: "1.0.0" --- # AXIOMA GUARD ULTIMATE > Security Checker + Quality Enhancer for OpenClaw Skills > Impersonal — works for any agent --- ## Description Axioma Guard Ultimate combines security scanning and quality evaluation in one super skill: 1. **Security Layer** — Detects C2, rootkits, bootkits, chains, ransomware 2. **Quality Layer** — Dual evaluation (Axioma 5-dim + ISO 25010) 3. **Enhancement Layer** — Auto-improves skills to 90%+ quality --- ## Usage ### Security Scan ```bash # Scan a skill for security threats python3 scripts/guard_scan.py --file <skill-path> # Scan with JSON output python3 scripts/guard_scan.py --file <skill-path> --json ``` ### Quality Evaluation ```bash # Run full dual evaluation python3 scripts/evaluate.py <skill-path> --verbose # ISO 25010 automated checks only python3 scripts/evaluate.py <skill-path> --iso-only ``` ### Auto-Improve ```bash # Improve a skill to 90%+ quality python3 scripts/improve.py <skill-path> --verbose ``` --- ## Architecture ``` axiomata-guard-ultimate/ ├── SKILL.md ├── scripts/ │ ├── guard_scan.py # Security scanning │ ├── evaluate.py # Quality evaluation │ └── improve.py # Auto-improvement └── references/ └── security-matrix.md ``` --- _In Altum Per Security._ Axioma Guard Ultimate v1.0.0


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal:  | SkillSpector:  ()
Skill: smallkeyboy/smart-meeting-assistant (version 1.0.0)

--- name: meeting-minutes-assistant description: 智能会议纪要助手 - 自动完成会议录音转写、会议纪要生成、待办事项提取的全流程处理。使用场景：(1) 处理会议录音文件（mp3/wav/m4a）需要转写为文字；(2) 从会议转写文本生成结构化会议纪要；(3) 从会议内容中提取待办事项和行动项；(4) 一站式处理会议全流程（转写→纪要→待办）。触发词：会议纪要、转写、待办提取、会议录音、meeting minutes、transcribe。 --- # 智能会议纪要助手 自动完成「会议录音转写 → 会议纪要生成 → 待办事项提取」全流程。 ## 快速开始 ### 完整流程（推荐） ```bash python scripts/meeting_assistant.py full-pipeline meeting.mp3 \ --output ./output/ \ --title "产品周会" \ --language zh ``` 输出三个文件： - `{name}_transcript_{timestamp}.txt` - 转写文本 - `{name}_summary_{timestamp}.md` - 会议纪要 - `{name}_todos_{timestamp}.json` - 待办事项 ### 分步使用 ```bash # 仅转写 python scripts/meeting_assistant.py transcribe meeting.mp3 -o transcript.txt # 仅生成纪要（需要先转写） python scripts/meeting_assistant.py summarize transcript.txt -t "周会" # 仅提取待办 python scripts/meeting_assistant.py extract-todos transcript.txt -o todos.json ``` ## 环境配置 ```bash # 设置 API Key（必需） export ASTRONCLAW_API_KEY="your_api_key" # 可选：自定义 API 地址 export ASTRONCLAW_API_BASE="https://api.astronclaw.com" ``` ## 输出格式 ### 会议纪要 (Markdown) ```markdown # 会议纪要 **会议主题**: 产品周会 **生成时间**: 2024-01-15T10:30:00 --- ## 参会人员 - 张三（产品） - 李四（开发） - 王五（设计） ## 主要讨论 1. 新功能上线进度 2. 用户反馈处理 3. 下周计划 ## 决议 - 周三前完成测试 - 周五上线 v2.1 ``` ### 待办事项 (JSON) ```json { "todos": [ { "task": "完成登录模块测试", "assignee": "李四", "deadline": "周三", "priority": "high", "context": "需要在新版本上线前完成" } ] } ``` ## 支持的音频格式 | 格式 | 扩展名 | 说明 | |------|--------|------| | MP3 | .mp3 | 最常用 | | WAV | .wav | 无损音质 | | M4A | .m4a | Apple 设备常用 | | WebM | .webm | 在线会议常用 | | OGG | .ogg | 开源格式 | | FLAC | .flac | 无损压缩 | ## 语言支持 ```bash # 中文（默认） --language zh # 英文 --language en # 日文 --language ja # 韩文 --language ko ``` ## 工作流建议 1. **会议前**：准备录音设备，确保音质清晰 2. **会议中**：记录参会人员名单 3. **会议后**： ```bash # 一键处理 python scripts/meeting_assistant.py full-pipeline recording.mp3 \ --title "$(date +%Y-%m-%d) 周会" ``` 4. **分发**：将纪要和待办发送给参会人员 ## 故障排除 ### 转写失败 - 检查 API Key 是否正确 - 确认音频文件大小 < 25MB - 验证音频格式是否支持 ### 纪要质量不佳 - 确保转写质量（音质清晰） - 添加会议标题帮助模型理解上下文 - 考虑分段处理超长会议 ## 参考资料 - [API 参考](references/api_reference.md) - AstronClaw API 详细文档


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: whatyouprompt/gold-price-monitor (version 1.0.3)

--- name: gold-price-monitor description: "监控黄金价格 - 获取实时国际金价，记录历史价格，当价格波动超过阈值时发出通知。适合 OpenClaw 定时调用。" --- # 黄金积存金价格监控 Skill 监控上海金交所 Au99.99 实时报价（人民币/克），与基准价格（首次记录或最近一次触发警报的价格）进行对比。当买入价变动超过阈值时生成通知消息，并将当前价格更新为新的基准价，以避免金价缓慢变化时永远无法触发警报的问题。辅助买入/卖出决策。 ## 执行步骤 ### 1. 运行价格检查脚本 执行以下命令获取最新积存金报价： ```bash python d:\VibeCode\.agents\skills\gold-price-monitor\scripts\check_gold_price.py ``` ### 2. 解读脚本输出 脚本输出 JSON 格式的结果，关键字段： - `buy_price`：客户买入价（你用这个价格买入黄金） - `sell_price`：客户卖出价（你用这个价格卖出黄金） - `mid_price`：中间价 - `buy_change`：与上次买入价的差值 - `today_open_buy`：今日开盘价（北京时间9点后首次记录） - `day_change`：与今日开盘价的差值（日内涨跌） - `alert`：是否触发警报（差价超过阈值） - `suggestion`：买卖建议 ### 3. 根据结果通知用户 - 如果 `alert` 为 `true`：**必须立即通知用户**，用醒目格式输出消息和买卖建议。 - 如果 `alert` 为 `false`：简要告知用户当前价格即可。 - 如果 `status` 为 `error`：告知用户获取价格失败。 ### 通知格式示例 **价格大幅下跌（买入机会）：** ``` 🚨 黄金价格波动警报！ 📉 上金所Au99.99报价 买入价: ¥1010.50/克（-12.30） 卖出价: ¥1000.20/克（-12.10） 上次买入价: ¥1022.80/克 今日开盘价: ¥1020.00/克（日内-9.50, -0.93%） 💡 价格大幅下跌，可考虑买入 ⏰ 银行更新时间: 2026-03-25 10:30:00 ``` **价格平稳：** ``` 📊 黄金价格播报 上金所Au99.99买入价: ¥1022.37/克（+2.30） 今日开盘价: ¥1020.00/克（日内+2.37, +0.23%） 价格波动不大，建议观望 ``` ## 配置说明 - **价格阈值**：默认买入价差价 ≥ 10 元触发警报，可在脚本中修改 `ALERT_THRESHOLD` - **数据来源**：新浪财经上海金交所 Au99.99 报价（JSONP 接口，无需 API Key） - **数据存储**：历史基准记录存于 `data/price_history.json`（仅在触发警报或首次记录时保存以用作对比基准，保留 1000 条），开盘价存于 `data/daily_open.json`（保留 30 天） - **开盘价**：每天北京时间 9:00 后的首次调用自动记录为当日开盘价

path: _meta.json
content: ownerId: kn72vsqrz8cp1z6pnzweezdj8x83bh7v
slug: gold-price-monitor
version: 1.0.2
publishedAt: 1774453226401

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)