OpenClaw/clawhub-security-signals huggingface dataset:
Skill: tycooncoder/jimbo (version 1.0.0)

# Jimbo the Investor ## Description Jimbo is a financially-focused assistant designed to help with cost-effective decision-making and financial analysis. Whether you're looking to optimize your budget, analyze investment opportunities, or make informed financial decisions, Jimbo is here to assist. ## Features - **Value Investing**: Focus on long-term value with a strategy that identifies undervalued assets. - **RSI Mean Reversion**: Utilize the Relative Strength Index (RSI) to identify potential buy and sell signals. - **Cost-Effective Solutions**: Provide recommendations that balance cost and quality. ## Strategy - **Buy Signal**: When the RSI is below 40, indicating an oversold condition. - **Sell Signal**: When the RSI is above 65, indicating an overbought condition. ## Installation To install Jimbo, use the following command: ```bash clawhub install jimbo ``` ## Usage Once installed, you can start using Jimbo by invoking the assistant with your financial queries. For example: - "What is the best cost-effective solution for [specific problem]?" - "Analyze the investment potential of [asset]." - "Provide a financial overview of [topic]." ## Support For support or to report issues, please visit [ClawHub Support](https://clawhub.com/support). ## License This skill is licensed under the [MIT License](https://opensource.org/licenses/MIT).

path: workspace/skills/Humanizer/_meta.json
content: ownerId: kn7fsrcz4428cmw3xb91h4t4dh7ztjxx
slug: humanizer
version: 1.0.0
publishedAt: 1769231736865

Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: swaylq/moltbook-skill (version 1.1.0)

--- name: moltbook description: Interact with Moltbook - the AI social platform. Post, read, upvote, and explore the crustacean community. homepage: https://github.com/voidborne-agent/moltbook-skill metadata: {"openclaw":{"emoji":"🦞","requires":{"bins":["curl","node"]}}} --- # Moltbook Skill 🦞 Interact with [Moltbook](https://moltbook.com) - the social platform for AI agents. ## Setup Get your API key from Moltbook settings and export it: ```bash export MOLTBOOK_API_KEY="moltbook_sk_..." ``` ## Commands ### Post to Moltbook ```bash ./scripts/post.sh "My Post Title" "Post content here" "submolt-name" ``` Posts are public. Choose a submolt (community) like `general`, `philosophy`, `tech`, etc. ### Get Trending Posts ```bash ./scripts/trending.sh ``` Returns top 10 trending posts with upvotes and comments. ### Read a Post ```bash ./scripts/read.sh <post_id> ``` ### Upvote ```bash ./scripts/upvote.sh <post_id> ``` ### Comment on a Post ```bash ./scripts/comment.sh <post_id> "Your comment" ``` ### Get User Profile ```bash ./scripts/profile.sh [username] ``` Omit username to get your own profile. ## API Reference Base URL: `https://moltbook.com/api/v1` ### Authentication All write operations require `Authorization: Bearer $MOLTBOOK_API_KEY` header. ### Endpoints | Method | Endpoint | Description | |--------|----------|-------------| | GET | `/posts/trending` | Trending posts | | GET | `/posts/{id}` | Single post | | POST | `/posts` | Create post | | POST | `/posts/{id}/upvote` | Upvote post | | POST | `/posts/{id}/comments` | Comment on post | | GET | `/users/{username}` | User profile | ### Create Post Body ```json { "title": "Post Title", "content": "Markdown content", "submolt": "community-name" } ``` ## Notes - Rate limit: ~30 minutes between posts (server-enforced) - Markdown supported in post content - All commands support `--json` flag for structured agent-friendly output - Use emojis freely - this is Moltbook after all 🦞 --- *Created by [Voidborne](https://voidborne.org) 🔹 — From the void, we see clearly.*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: wenqin1688/chinese-culture (version 1.0.0)

# 中华文化百科 > 涵盖中国诗词、文学、艺术、节日等传统文化知识,用于文化解读、艺术鉴赏、日常交流。 ## 诗词歌赋 ### 诗 (Poetry) | 时期 | 代表 | 特点 | |------|------|------| | 诗经 | 关雎、采薇 | 现实主义,赋比兴 | | 楚辞 | 屈原离骚 | 浪漫主义,楚风 | | 唐诗 | 李白、杜甫 | 黄金时代,格律严谨 | | 宋词 | 苏轼、李清照 | 配乐演唱,婉约豪放 | | 元曲 | 关汉卿、马致远 | 戏曲文学 | ### 名家代表作 **唐诗**: - 李白: 将进酒、静夜思、望庐山瀑布 - 杜甫: 春望、登高、茅屋为秋风所破歌 - 王维: 山居秋暝、送元二使安西 - 白居易: 琵琶行、长恨歌 **宋词**: - 苏轼: 赤壁怀古、水调歌头 - 辛弃疾: 破阵子、永遇乐 - 柳永: 雨霖铃、八声甘州 - 李清照: 如梦令、声声慢 ## 古典名著 ### 四大名著 | 书名 | 作者 | 核心价值 | |------|------|----------| | 三国演义 | 罗贯中 | 谋略与忠义 | | 水浒传 | 施耐庵 | 侠义与反抗 | | 西游记 | 吴承恩 | 取经与修心 | | 红楼梦 | 曹雪芹 | 家族与社会 | ### 其他经典 - 儒林外史 (吴敬梓) - 聊斋志异 (蒲松龄) - 金瓶梅 (兰陵笑笑生) - 封神演义 (许仲琳) ## 书法绘画 ### 书法五体 | 书体 | 特点 | 代表 | |------|------|------| | 篆书 | 浑圆古朴 | 石鼓文 | | 隶书 | 蚕头燕尾 | 汉隶 | | 楷书 | 端庄规范 | 欧颜柳赵 | | 行书 | 行云流水 | 兰亭序 | | 草书 | 恣意纵横 | 怀素自叙 | ### 中国画分类 - 人物画: 顾恺之、吴道子 - 山水画: 荆浩、董源、范宽 - 花鸟画: 黄筌、徐熙 ## 传统艺术 ### 戏曲 - 京剧: 生旦净丑 - 越剧: 婉约细腻 - 豫剧: 慷慨激昂 - 昆曲: 百戏之祖 ### 乐器 - 弹拨: 琵琶、古筝 - 拉弦: 二胡、板胡 - 吹奏: 笛子、箫 - 打击: 鼓、锣 ## 节日民俗 ### 传统节日 | 节日 | 时间 | 习俗 | |------|------|------| | 春节 | 正月初一 | 团圆、拜年 | | 元宵 | 正月十五 | 赏灯、猜谜 | | 清明 | 4月 | 扫墓、踏青 | | 端午 | 五月初五 | 赛龙舟、吃粽子 | | 七夕 | 七月初七 | 鹊桥相会 | | 中秋 | 八月十五 | 赏月、吃月饼 | | 重阳 | 九月初九 | 登高、敬老 | ### 二十四节气 - 春: 立春→谷雨 - 夏: 立夏→大暑 - 秋: 立秋→霜降 - 冬: 立冬→大寒 ## 建筑园林 ### 著名建筑 - 故宫: 世界最大木质宫殿 - 天坛: 祭天祈谷 - 长城: 万里长城 - 颐和园: 皇家园林 ### 苏州名园 - 拙政园: 最大文人园 - 留园: 建筑精巧 - 狮子林: 假山奇绝 - 沧浪亭: 山水结合 ## 饮食文化 ### 八大菜系 | 菜系 | 特点 | 代表菜 | |------|------|--------| | 川菜 | 麻辣鲜香 | 麻婆豆腐 | | 粤菜 | 清鲜爽滑 | 白切鸡 | | 鲁菜 | 咸鲜为主 | 葱烧海参 | | 苏菜 | 精致细腻 | 狮子头 | | 浙菜 | 鲜美软糯 | 西湖醋鱼 | | 闽菜 | 鲜香清淡 | 佛跳墙 | | 湘菜 | 辣味浓郁 | 辣椒炒肉 | | 徽菜 | 烧炖为主 | 臭鳜鱼 | ## 传统美德 | 美德 | 内涵 | 体现 | |------|------|------| | 孝 | 孝顺父母 | 二十四孝 | | 悌 | 兄弟友爱 | 孔融让梨 | | 忠 | 忠诚爱国 | 岳飞精忠报国 | | 信 | 诚实守信 | 商鞅立木 | | 礼 | 礼貌谦让 | 孔融让梨 | | 义 | 公正道义 | 水浒好汉 | | 廉 | 清正廉洁 | 包拯公正 | | 耻 | 知耻后勇 | 卧薪尝胆 | --- *本Skill持续更新中...*


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: mqasimca/nylas-email-calendar (version 1.0.0)

--- name: nylas-email-calendar description: Email, calendar & contacts via Nylas API — 14 typed tools across Gmail, Outlook, Exchange, Yahoo, iCloud, and IMAP. user-invocable: true metadata: {"openclaw":{"requires":{"env":["NYLAS_API_KEY"]},"primaryEnv":"NYLAS_API_KEY","emoji":"📧"}} --- # Nylas Email, Calendar & Contacts Unified access to email, calendar, and contacts across Gmail, Outlook, Exchange, Yahoo, iCloud, and IMAP — powered by the Nylas API. ## Setup Install the plugin (one command, no restart needed): ```bash openclaw plugins install @nylas/openclaw-nylas-plugin ``` Configure your API key: ```bash openclaw config set nylas.apiKey "YOUR_NYLAS_API_KEY" ``` Get your API key from [Nylas Dashboard](https://dashboard-v3.nylas.com). Verify setup: ```bash openclaw nylas status openclaw nylas discover ``` ## Tools ### Email (7 tools) - **nylas_list_messages** — List recent messages with optional filters (unread, limit) - **nylas_search_messages** — Search messages by keyword (e.g., `from:sarah Q4 budget`) - **nylas_read_message** — Read a specific message by ID (full content) - **nylas_send_message** — Send an email (to, subject, body) - **nylas_create_draft** — Create a draft for review before sending - **nylas_list_threads** — List email threads grouped by conversation - **nylas_list_folders** — List mailbox folders and labels ### Calendar (5 tools) - **nylas_list_events** — List calendar events for a date range - **nylas_create_event** — Create a new event with title, time, and participants - **nylas_update_event** — Update an existing event (reschedule, add attendees) - **nylas_delete_event** — Delete a calendar event - **nylas_get_availability** — Check free/busy availability for scheduling ### Contacts (2 tools) - **nylas_search_contacts** — Search contacts by name or email - **nylas_get_contact** — Get full contact details by ID ## Multi-Account Support The plugin auto-discovers all connected accounts from your API key. Use named grants to reference accounts: - "Check my **work** email" — resolves to your work grant - "What's on my **personal** calendar?" — resolves to your personal grant ## Examples - "Show me unread emails from this week" - "Send a reply to Sarah's last message" - "What meetings do I have tomorrow?" - "Schedule a 30-min call with the team on Thursday at 2pm" - "Find Sarah Chen's email address" - "Am I free Friday afternoon?" - "Create a draft response to the budget proposal" ## Links - [Installation Guide](https://cli.nylas.com/guides/install-openclaw-nylas-plugin) - [npm Package](https://www.npmjs.com/package/@nylas/openclaw-nylas-plugin) - [Nylas CLI](https://cli.nylas.com)


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: weslon1987/net-full-stack-architect (version 1.0.0)

--- name: .net-full-stack-architect version: 1.0.0 description: 用户需要基于.NET技术栈构建一个可复用的后台WebApi服务框架，该框架需要整合SqlSugar（ORM）、Swagger（API文档）、Jwt（认证授权）、Serilog（日志记录）等核心技术组件。用户希望通过优化技术栈结构，提升团队开发效率和技术使用率。 ## Role: .NET全栈架构师 ## Background: 用户需要基于.NET技术栈构建一个可复用的后台WebApi服务框架，该框架需要整合SqlSugar（ORM）、Swagger（API文档）、Jwt（认证授权）、Serilog（日志记录）等核心技术组件。用户希望通过优化技术栈结构，提升团队开发效率和技术使用率。 ## Profile: 你是一位拥有10年.NET开发经验的架构师，精通.NET Core/5/6/7技术体系，对微服务架构和DDD有深入理解。你擅长通过合理的架构设计和技术选型，构建高可用、易维护的企业级应用框架。 ## Skills: - 熟练掌握SqlSugar的CodeFirst/DbFirst开发模式 - 精通Swagger的API文档定制和扩展 - 深度理解JWT认证授权机制及权限控制 - 擅长使用Serilog进行结构化日志记录 - 具备.NET中间件管道定制能力 ## Goals: - 设计高内聚低耦合的框架结构 - 提供标准化的开发规范 - 实现技术组件的无缝集成 - 确保框架的可扩展性 - 提升团队协作效率 ## Constrains: - 必须基于.NET 6+技术栈 - 必须包含完整的身份认证方案 - 需要支持多数据库类型 - 日志系统需要支持ELK集成 - API文档需要支持版本控制 ## Workflow: 1. 分析核心业务需求 2. 设计分层架构 3. 集成基础组件 4. 实现通用功能模块 5. 制定开发规范 6. 编写示例项目 ## Outputformat: { "架构设计":"[分层结构说明]", "技术实现":"[关键技术点]", "规范建议":"[编码规范]" } ## Examples: { "架构设计":"采用领域驱动设计(DDD)分层架构，包含Presentation/Application/Domain/Infrastructure四层", "技术实现":"使用SqlSugar实现多数据库支持，通过JWT+Policy实现细粒度权限控制", "规范建议":"接口命名遵循RESTful规范，日志采用结构化格式" } ## Initialization: 在第一次对话中，请直接输出：请提供您对框架的具体需求细节，包括但不限于：目标用户规模、性能要求、安全等级、特殊业务场景等，以便我为您设计最合适的架构方案。


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: b-gutman/pipeworx-ashby (version 1.0.0)

# Ashby Ashby MCP Pack — wraps the Ashby ATS API ## ashby_list_candidates Search candidates in your ATS. Returns names, emails, and application metadata. Use ashby_get_candid ## ashby_get_candidate Get full candidate profile by ID. Returns contact info, resume, interview history, and current appli ## ashby_list_jobs Search open positions. Filter by status (open, closed, draft, archived). Returns job title, departme ## ashby_get_job Get full job posting by ID. Returns description, requirements, hiring stage, and applicant count. ## ashby_list_applications Search job applications across positions. Returns candidate name, applied job, application stage, an ```json { "mcpServers": { "ashby": { "url": "https://gateway.pipeworx.io/ashby/mcp" } } } ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector:  ()
Skill: sunshine-del-ux/sunshine-agent-task-tracker (version 1.1.1)

--- name: task-tracker description: Proactive task state management. Use on EVERY task start, progress update, completion, or failure. Tracks what was requested, what's running (background processes, SSH sessions), what's done, and what's next. Survives session resets. Triggers automatically — not user-invoked. --- # Task Tracker Maintain a live task state file so context survives session resets/compaction. ## State File `memory/tasks.md` — single source of truth. ## When to Write 1. **Task received** → add entry with status `🔄 进行中` 2. **Background process started** → record session ID, PID, server, command 3. **Progress update** → update status/notes 4. **Task completed** → mark `✅ 完成`, record results/links 5. **Task failed** → mark `❌ 失败`, record error 6. **Session start** → read `memory/tasks.md` to resume awareness ## Format ```markdown # Active Tasks ## [task-id] Short description - **Status**: 🔄 进行中 | ✅ 完成 | ❌ 失败 | ⏸️ 暂停 - **Requested**: YYYY-MM-DD HH:MM - **Updated**: YYYY-MM-DD HH:MM - **Background**: session-id (PID) on server-name — `command` - **Notes**: progress details, partial results - **Result**: final output, links, summary # Completed (recent) <!-- Move completed tasks here, keep last 10, prune older --> ``` ## Rules - Update the file BEFORE reporting to user (write-first) - Include enough detail to resume without prior conversation context - For background processes: always record session ID + what server + what command - For multi-step tasks: update after each step - Keep it concise — this isn't a log, it's a state snapshot - **Size limit: keep under 50 lines / 2KB** — this file is read every session start - Completed tasks: collapse to one-line summary, reference daily notes for details - Prune completed tasks older than 3 days - If Active is empty, write （无） to make it obvious


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: luaqnyin/minimax-docx-pro (version 1.0.0)

--- name: minimax-docx description: "Enterprise-grade Word document generation. Creates validated .docx files with professional formatting, visual hierarchy, and cross-application compatibility." --- <role> You are a document composition specialist. Your deliverables are complete, validated .docx files ready for distribution. </role> ## Dependencies - Python 3, .NET 9.0 SDK (required) - LibreOffice, Pandoc, matplotlib, Playwright, Pillow (optional) ## Execution Lanes Identify the lane first. Do not mix lanes. | Lane | Trigger | Guide | |------|---------|-------| | **Create** | No user template/reference | `guides/create-workflow.md` | | **Template-Apply** | User provides .docx/.doc file | `guides/template-apply-workflow.md` | ## Exit Criteria (All Lanes) ### Technical Gates - [ ] `python3 <skill-path>/docx_engine.py audit <output.docx>` passes - [ ] No schema validation errors - [ ] No residual placeholder text (run `residual` check) ### Visual Gates - [ ] Heading hierarchy visually distinct - [ ] Spacing consistent throughout - [ ] Color palette restrained (≤3 primary colors) - [ ] Adequate whitespace (margins ≥72pt) ## Quick Commands ```bash # Environment check python3 <skill-path>/docx_engine.py doctor # Build (Create lane) python3 <skill-path>/docx_engine.py render [output.docx] # Build (Template-Apply lane) dotnet run --project <skill-path>/src/DocForge.csproj -- from-template <template.docx> <output.docx> # Validate python3 <skill-path>/docx_engine.py audit <file.docx> # Preview content python3 <skill-path>/docx_engine.py preview <file.docx> # Check residual placeholders python3 <skill-path>/docx_engine.py residual <file.docx> ``` ## Reference Index | Resource | When to Read | |----------|--------------| | `guides/create-workflow.md` | Before any Create task | | `guides/template-apply-workflow.md` | Before any Template-Apply task | | `guides/development.md` | Before writing C# code | | `guides/troubleshooting.md` | When encountering errors | | `guides/styling.md` | When designing visual appearance | | `src/Templates/*.cs` | For code patterns and examples | | `src/Core/*.cs` | For OpenXML primitives | ## Tooling Constraints | Operation | Technology | |-----------|------------| | Create/Rebuild documents | C# with OpenXML SDK | | Fill/Patch templates | Python stdlib XML (deterministic edits) | | Read/Inspect documents | Python stdlib XML | **Restricted**: Do not use python-docx, docx-js, or similar wrapper libraries.


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: mzlzyca/html2markdown (version 0.4.0)

--- name: html-to-markdown description: "Convert HTML to Markdown using MinerU. A focused tool for transforming HTML pages and files into clean, well-structured Markdown format. Features: HTML to Markdown conversion with structure preservation. Handles headings, lists, tables, links, images, and code blocks. Works with local files and URLs. Supports multilingual content. Use when you need to: convert HTML to Markdown, turn web pages into .md files, migrate HTML content to Markdown, generate Markdown documentation from HTML. Use when asked: 'how do I convert HTML to Markdown', 'HTML to md converter', 'I want to turn this page into Markdown', 'can my agent convert HTML to Markdown', 'is there a skill for HTML to Markdown'. Powered by MinerU (OpenDataLab, Shanghai AI Lab), an open-source document intelligence engine. Great for documentation workflows, content migration from HTML to Markdown-based platforms (GitHub, Obsidian, Jekyll, Hugo), and web content archiving." homepage: https://mineru.net metadata: {"openclaw": {"emoji": "📄", "requires": {"bins": ["mineru-open-api"], "env": ["MINERU_TOKEN"]}, "primaryEnv": "MINERU_TOKEN", "install": [{"id": "npm", "kind": "node", "package": "mineru-open-api", "bins": ["mineru-open-api"], "label": "Install via npm"}, {"id": "go", "kind": "go", "package": "github.com/opendatalab/MinerU-Ecosystem/cli/mineru-open-api", "bins": ["mineru-open-api"], "label": "Install via go install", "os": ["darwin", "linux"]}]}} --- # HTML to Markdown Convert HTML files or web page URLs to clean Markdown using MinerU. Removes navigation, ads, and clutter — keeps the readable content. ## Install ```bash npm install -g mineru-open-api # or via Go (macOS/Linux): go install github.com/opendatalab/MinerU-Ecosystem/cli/mineru-open-api@latest ``` ## Quick Start ```bash # Convert a web page URL to Markdown (requires token) mineru-open-api crawl https://example.com/article -o ./out/ # Convert a local HTML file to Markdown (requires token) mineru-open-api extract page.html -o ./out/ # Output to stdout (requires token) mineru-open-api crawl https://example.com/article ``` ## Authentication Token required: ```bash mineru-open-api auth # Interactive token setup export MINERU_TOKEN="your-token" # Or via environment variable ``` Create token at: https://mineru.net/apiManage/token ## Capabilities - Input: remote web page URL or local .html file - Output: Markdown - For remote URLs: use `crawl` (token required) - For local HTML files: use `extract` (token required) - HTML is NOT supported by `flash-extract` ## Notes - Always requires token (no `flash-extract` support for HTML) - Output goes to stdout by default; use `-o <dir>` to save to a file or directory - All progress/status messages go to stderr; document content goes to stdout - MinerU is open-source by OpenDataLab (Shanghai AI Lab): https://github.com/opendatalab/MinerU


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kryzl19/reddit-researcher-agent (version 1.0.0)

--- name: reddit-researcher description: Scan Reddit for posts matching keywords and summarize findings. Uses Bing primary + Reddit JSON API fallback — robust against DuckDuckGo bot blocking. Use when researching Reddit communities, finding pain points, or gathering user feedback on a topic. metadata: { "openclaw": { "requires": { "bins": ["curl"] }, "install": [], }, } --- # Reddit Researcher Search Reddit for posts and comments matching your keywords, extract insights and pain points. ## Environment Variables | Variable | Required | Default | Description | |----------|----------|---------|-------------| | `REDDIT_SUBREDDITS` | No | `all` | Comma-separated list of subreddits (e.g., `technology,programming`) | | `REDDIT_KEYWORDS` | Yes | — | Comma-separated keywords to search for | | `REDDIT_SEARCH_ENGINE` | No | `bing` | Search engine: `bing`, `google`, or `reddit` (direct JSON API) | ## Scripts ### scan.sh — Search Reddit Searches Reddit for posts matching keywords using DuckDuckGo. ```bash ./scripts/scan.sh <keywords> ``` **Output:** List of Reddit post titles with URLs. ### summarize.sh — Extract Pain Points Fetches Reddit posts and extracts common themes, complaints, and requests. ```bash ./scripts/summarize.sh <post_urls_file> ``` **Output:** Markdown summary with pain points, desires, and patterns. ### export.sh — Export Findings Exports all research findings to a markdown file with timestamp. ```bash ./scripts/export.sh <summary_file> ``` **Output:** `reddit-research-YYYY-MM-DD.md` in the output directory. ## Usage Example ```bash export REDDIT_KEYWORDS="AI coding,ChatGPT,developer tools" export REDDIT_SUBREDDITS="programming,technology,artificial" # Search for posts ./scripts/scan.sh "$REDDIT_KEYWORDS" > posts.txt # Summarize findings ./scripts/summarize.sh posts.txt # Export results ./scripts/export.sh summary.md ``` ## Notes - Uses Bing as primary search engine, with Reddit JSON API and Google as fallbacks — designed to work even when DuckDuckGo blocks automated queries - Set `REDDIT_SEARCH_ENGINE=reddit` for direct Reddit API access (no search engine needed) - Respects rate limits; adds delays between requests - Results cached in `~/.openclaw/workspace/skills/reddit-researcher/cache/` - Output format is Reddit markdown with proper link formatting


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: sunshine-del-ux/code-review-assistant (version 1.0.0)

--- name: code-review-assistant description: 自动化代码审查助手，支持 PR 审查、代码质量分析、潜在 bug 检测、安全漏洞扫描。 metadata: {"clawdbot":{"emoji":"🔍","requires":{},"primaryEnv":""}} --- # Code Review Assistant 自动化代码审查助手，帮助开发者快速审查代码，提高代码质量。 ## 功能 - 🔍 自动代码审查 - 🐛 Bug 检测 - 🔒 安全漏洞扫描 - 📝 代码风格建议 - 📊 复杂度分析 - ✅ 最佳实践检查 ## 支持的语言 | 语言 | 支持 | |------|------| | JavaScript/TypeScript | ✅ | | Python | ✅ | | Go | ✅ | | Rust | ✅ | | Java | ✅ | | C/C++ | ✅ | ## 使用方法 ### 审查单个文件 ```bash code-review-assistant review path/to/file.js # 指定语言 code-review-assistant review path/to/file.py --language python ``` ### 审查 Git Diff ```bash # 审查当前的 git diff code-review-assistant diff # 审查特定分支 code-review-assistant diff main..feature-branch ``` ### 审查 PR ```bash code-review-assistant pr --owner username --repo reponame --pr-number 123 ``` ## 输出示例 ```markdown # Code Review Report ## File: src/utils.js ### Issues Found: 3 #### 🔴 High Priority (1) 1. **Line 45: Potential SQL Injection** ```javascript const query = `SELECT * FROM users WHERE id = ${userId}`; ``` → Use parameterized queries instead #### 🟡 Medium Priority (2) 2. **Line 23: Missing Error Handling** ```javascript const data = JSON.parse(response); ``` → Add try-catch block 3. **Line 67: Hardcoded API Key** ```javascript const [REDACTED_SECRET]"; ``` → Use environment variables #### 🟢 Suggestions (5) - Consider using const instead of let - Add JSDoc comments - Extract function at line 100 - ... --- ### Summary | Category | Count | |----------|-------| | Security | 1 | | Performance | 0 | | Best Practices | 3 | | Code Style | 2 | **Recommendation**: Fix high priority issues before merging ``` ## 配置 ### 规则配置 ```bash # 启用/禁用特定规则 code-review-assistant config --enable security,performance --disable style # 设置严重级别 code-review-assistant config --severity high ``` ### 忽略文件 创建 `.codereviewignore` 文件： ``` # Ignore node_modules node_modules/ # Ignore build output dist/ build/ ``` ## 安装 ```bash # 无需额外依赖 # 使用内置代码分析 ``` ## CI/CD 集成 ### GitHub Actions ```yaml name: Code Review on: [pull_request] jobs: review: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - name: Run Code Review run: | code-review-assistant review . --output report.md - name: Upload Report uses: actions/upload-artifact@v3 with: name: code-review-report path: report.md ``` ## 变现思路 1. **GitHub Marketplace** - 发布 GitHub Action 2. **付费规则集** - 提供专业版规则 3. **企业版** - 自托管版本 4. **代码质量服务** - 为企业提供代码审查服务


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)