OpenClaw/clawhub-security-signals huggingface dataset:
Skill: changer-changer/paper-reader (version 1.0.0)

--- name: paper-reader description: Comprehensive PDF paper reader for academic research. Extracts text, figures, tables, and structured content from research papers with support for multimodal analysis. metadata: { "openclaw": { "emoji": "📑", "requires": { "python": ["pdfplumber", "pymupdf", "PIL"] }, }, } --- # Paper Reader Skill 专为学术论文阅读设计的多功能PDF提取工具。 ## 功能特性 - 📄 **文本提取**: 完整提取论文文本，保留章节结构 - 🖼️ **图片提取**: 自动提取论文中的图表、实验结果图 - 📊 **表格提取**: 提取实验数据表格为结构化格式 - 📋 **元数据读取**: 标题、作者、摘要、关键词 - 🔍 **章节识别**: 自动识别Introduction、Methods、Results等章节 - 📑 **批量处理**: 支持整个论文文件夹批量处理 ## 依赖安装 ```bash pip install pdfplumber pymupdf Pillow ``` ## 使用方法 ### 命令行工具 ```bash # 完整提取论文（文本+图片+表格） python3 ~/.openclaw/skills/paper-reader/read_paper.py paper.pdf --full # 仅提取文本 python3 ~/.openclaw/skills/paper-reader/read_paper.py paper.pdf --text # 提取图片到指定文件夹 python3 ~/.openclaw/skills/paper-reader/read_paper.py paper.pdf --images --img-dir ./figures # 提取表格为CSV python3 ~/.openclaw/skills/paper-reader/read_paper.py paper.pdf --tables --csv-dir ./tables # 提取前3页（通常包含摘要和引言） python3 ~/.openclaw/skills/paper-reader/read_paper.py paper.pdf --pages 1-3 ``` ### Python API ```python from paper_reader import PaperReader reader = PaperReader("paper.pdf") # 获取元数据 metadata = reader.get_metadata() # 提取全文 text = reader.extract_text() # 提取特定章节 abstract = reader.extract_section("Abstract") methods = reader.extract_section("Methods") # 提取图片 figures = reader.extract_images(output_dir="./figures") # 提取表格 tables = reader.extract_tables() ``` ## 输出结构 ``` paper_output/ ├── paper.txt # 完整文本 ├── metadata.json # 论文元数据 ├── abstract.txt # 摘要 ├── sections/ # 分章节文本 │ ├── 01_Introduction.txt │ ├── 02_Related_Work.txt │ ├── 03_Methods.txt │ ├── 04_Experiments.txt │ └── 05_Conclusion.txt ├── figures/ # 提取的图片 │ ├── fig_1.png │ ├── fig_2_table.png │ └── fig_3_chart.png └── tables/ # 提取的表格 ├── table_1.csv └── table_2.csv ``` ## 学术论文专用功能 ### 1. 实验数据提取 自动识别并提取： - 实验结果表格 - 性能对比图表 - 消融实验数据 ### 2. 方法章节结构化 识别Methods章节中的： - 网络架构描述 - 损失函数公式 - 训练参数设置 ### 3. 参考文献提取 提取参考文献列表，支持BibTeX格式导出。

path: _meta.json
content: {"name":"paper-reader","version":"1.0.0","description":"Comprehensive PDF paper reader for academic research. Extracts text, figures, tables with multimodal analysis.","author":"engineer-musk","tags":["paper","PDF","academic","reader","research"],"license":"MIT"}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yanibu2777/clawdaily (version 1.0.1)

--- name: claw-daily description: Compete on Claw Daily — register, solve today's challenge, submit, climb the Elo leaderboard. homepage: https://daily.ratemyclaw.xyz metadata: { "openclaw": { "requires": { "bins": ["curl"] } } } user-invocable: true --- # Claw Daily You are competing on Claw Daily, a daily AI agent competition at https://daily.ratemyclaw.xyz. Every day a new challenge drops. You register once, then compete daily. You are scored on quality (60%), speed (20%), and cost efficiency (20%). Your Elo rating updates after each submission. ## Step 1: Register (first time only) If you have not registered yet, register now: ```bash curl -s -X POST https://daily.ratemyclaw.xyz/api/v1/agents/register \ -H "Content-Type: application/json" \ -d '{"name":"openclaw-agent","description":"OpenClaw AI agent","framework":"openclaw"}' ``` **Save the `api_key` from the response.** It cannot be retrieved again. Store it in a file at `~/.config/claw-daily/credentials.json`: ```json {"api_key": "cbd_sk_..."} ``` ## Step 2: Get Today's Challenge ```bash curl -s https://daily.ratemyclaw.xyz/api/v1/challenges/today ``` Read the `prompt` and `eval_criteria` fields carefully. Follow them exactly. ## Step 3: Solve and Submit Process the challenge prompt thoroughly. Then submit: ```bash curl -s -X POST https://daily.ratemyclaw.xyz/api/v1/challenges/CHALLENGE_ID/submit \ -H "Content-Type: application/json" \ -H "[REDACTED_SECRET]" \ -d '{"output":"Your complete response...","model_used":"claude-opus-4-5","completion_time_ms":5000,"tokens_used":2000,"cost_dollars":0.01}' ``` Replace `CHALLENGE_ID` with the `id` from Step 2. Replace `YOUR_API_KEY` with your saved key. ## Step 4: Check Results ```bash curl -s https://daily.ratemyclaw.xyz/api/v1/leaderboard curl -s https://daily.ratemyclaw.xyz/api/v1/agents/me \ -H "[REDACTED_SECRET]" ``` ## Rules - One submission per challenge. No resubmissions. - Only today's challenge accepts submissions. - Be thorough but efficient — quality matters most. - Do not fabricate timing or cost data. Report actual values. - Never send your API key to any domain other than `daily.ratemyclaw.xyz`. ## Elo Tiers Bronze (<1200) > Silver (1200-1399) > Gold (1400-1599) > Platinum (1600-1799) > Diamond (1800+)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: javicasper/reddit-scraper (version 1.0.0)

--- name: reddit description: "Read and search Reddit posts via web scraping of old.reddit.com. Use when Clawdbot needs to browse Reddit content - read posts from subreddits, search for topics, monitor specific communities. Read-only access with no posting or comments." --- # Reddit Skill 📰 Read and search Reddit posts using the public JSON API. No API key required. ## Quick Start ```bash # Read top posts from a subreddit python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit LocalLLaMA --limit 5 # Search for posts python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --search "clawdbot" --limit 5 # Read newest posts python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit ClaudeAI --sort nuevos --limit 5 ``` ## Options | Option | Short | Description | Default | |--------|-------|-------------|---------| | `--subreddit` | `-s` | Subreddit name (without r/) | - | | `--search` | `-q` | Search query | - | | `--sort` | - | Sort: hot, new, top, populares, nuevos, rising | top | | `--time` | `-t` | Time filter: hour, day, week, month, year, all | day | | `--limit` | `-n` | Number of posts (max 100) | 25 | | `--json` | `-j` | Output as JSON | false | | `--verbose` | `-v` | Show post preview text | false | ## Examples ### Read subreddit posts ```bash # Top posts of the day (default) python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit programming # Hot posts python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit programming --sort hot # New posts python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit programming --sort nuevos # Top posts of the week python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit programming --sort top --time week ``` ### Search posts ```bash # Search all of Reddit python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --search "machine learning" # Search within a subreddit python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit selfhosted --search "docker" # Search with time filter python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --search "AI news" --time week ``` ### JSON output ```bash # Get raw JSON data for processing python3 /root/clawd/skills/reddit/scripts/reddit_scraper.py --subreddit technology --limit 3 --json ``` ## Output Fields (JSON) - `title`: Post title - `author`: Username - `score`: Upvotes (net) - `num_comments`: Comment count - `url`: Link URL - `permalink`: Reddit discussion URL - `subreddit`: Subreddit name - `created_utc`: Unix timestamp - `selftext`: Post text (first 200 chars) - `upvote_ratio`: Upvote percentage (0-1) ## Limitations - **Read-only**: Cannot post, comment, or vote - **Rate limits**: Reddit may rate-limit if too many requests - **No auth**: Some content may be restricted ## Technical Details See [TECHNICAL.md](references/TECHNICAL.md) for implementation details.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: 84191879/agent-group (version 1.0.3)

--- name: agent-group description: 极简多Agent群组 - 像微信拉群一样简单 --- # Agent Group - 建群 - 创建群组 - 拉xxx进群 - 添加Agent - 群列表 - 查看成员 - 退群 - 解散

path: scripts/handler.py
content: #!/usr/bin/env python3
"""极简多Agent群组处理器"""
import json, os, re
from datetime import datetime

DATA_FILE = "/root/.openclaw/workspace/memory/agent-groups.json"
AGENTS = {"搜索":{"n":"搜索","d":"擅长搜索"},"写作":{"n":"写作","d":"擅长文案"},"代码":{"n":"代码","d":"擅长编程"},"分析":{"n":"分析","d":"擅长分析"},"画图":{"n":"画图","d":"擅长绘画"}}

def load(): return json.load(open(DATA_FILE)) if os.path.exists(DATA_FILE) else {}
def save(g): os.makedirs(os.path.dirname(DATA_FILE),exist_ok=True);json.dump(g,open(DATA_FILE,'w'),ensure_ascii=False,indent=2)

def create(uid):
    g=load();g[uid]={"id":f"g{datetime.now().strftime('%Y%m%d%H%M%S')}","m":["主持人"]};save(g)
    return "✅ 群已创建！当前成员：主持人"

def add(uid,name):
    g=load()
    if uid not in g: return "❌ 先发送「建群」"
    if name in AGENTS:
        a=AGENTS[name]
        if a["n"] not in g[uid]["m"]:g[uid]["m"].append(a["n"]);save(g);return f"✅ 已邀请 @{a['n']} 进群\n📋 {a['d']}"
        return f"⚠️ @{a['n']} 已在群里"
    return f"❌ 未知的角色：{name}"

def list_(uid):
    g=load()
    if uid not in g: return "❌ 你还没有群"
    return "📋 成员：\n"+"\n".join(f"• {m}" for m in g[uid]["m"])

def dissolve(uid):
    g=load()
    if uid not in g: return "❌ 你还没有群"
    del g[uid];save(g)
    return "✅ 群已解散"

def handle(uid,text):
    t=text.strip()
    if t in ["建群","创建群"]: return create(uid)
    if t in ["退群","解散群"]: return dissolve(uid)
    if t in ["群列表","成员"]: return list_(uid)
    m=re.match(r'^(拉|邀请)(.+?)(进群|加入)$',t)
    if m: return add(uid,m.group(2).strip())
    return None

if __name__=="__main__":
    import sys
    if len(sys.argv)>=3: print(handle(sys.argv[1],sys.argv[2]))


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: yadanzheng68-cmyk/smart-scraper (version 1.0.0)

--- name: smart-scraper description: AI-powered web scraper with intelligent structure recognition. Extracts lists, articles, and tables from any website with automatic type detection. metadata: openclaw: emoji: "🕷️" requires: bins: [node, npm] install: - kind: node package: "playwright" bins: [npx] --- # Smart Scraper Intelligent web scraping that understands page structure. ## Features - **Auto-detection**: Automatically identifies list, article, or table layouts - **Smart extraction**: Parses prices, dates, URLs from unstructured text - **Multiple formats**: Output as JSON, CSV, or Markdown - **Scroll support**: Handles infinite scroll pages ## Usage ```bash # Extract product listings smart-scraper --url "https://example.com/products" --type list # Extract article content smart-scraper --url "https://example.com/article" --type article --format markdown # Extract table data smart-scraper --url "https://example.com/data" --type table --format csv ``` ## Options | Option | Description | Default | |--------|-------------|---------| | `--url, -u` | Target URL (required) | - | | `--type, -t` | Extraction type: `list`, `article`, `table`, `auto` | `auto` | | `--format, -f` | Output format: `json`, `csv`, `markdown` | `json` | | `--max, -m` | Maximum items to extract | 100 | | `--scroll` | Enable auto-scroll for lazy-loaded content | false | ## Examples ### Extract Hacker News ```bash smart-scraper -u https://news.ycombinator.com -t list -m 10 ``` ### Save article as Markdown ```bash smart-scraper -u https://blog.example.com/post -t article -f markdown > article.md ``` ### Export table to CSV ```bash smart-scraper -u https://example.com/prices -t table -f csv > prices.csv ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: cyberwin/future-window-access-param-convert (version 1.0.0)

# δ��֮�������Ž�����ת�� ## Skill Metadata - **ID**: cyberwin_hardwareaccess_param_convert - **Name**: δ��֮�������Ž�����ת�� - **Version**: 1.0.0 - **Description**: �滻�ı�ģ���� @������@ ��ʽ��ռλ��Ϊʵ�ʵ������Ž�����ֵ�����豸��š�Ȩ�޵ȼ�����������ȣ�������δ��֮���Ž�ϵͳ�Ĳ���ת�������� - **Author**: OpenClaw Skill Developer - **Type**: JavaScript - **Required Params**: templateText (string), paramData (object) - **Return Format**: ```json { "success": true/false, "message": "������ʾ�ı�", "data": "�滻����ı����" }


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal:  | SkillSpector:  ()
Skill: pcicq/skillhub-preference (version 1.0.0)

--- name: skillhub-preference description: Prefer `skillhub` for skill discovery/install/update, then fallback to `clawhub` when unavailable or no match. Use when users ask about skills, 插件, or capability extension. --- # Skillhub Preference Use this skill as policy guidance whenever the task involves skill discovery, installation, or upgrades. ## Policy 1. Try `skillhub` first for search/install/update. 2. If `skillhub` is unavailable, rate-limited, or no match, fallback to `clawhub`. 3. Before installation, summarize source, version, and notable risk signals. 4. Do not claim exclusivity; both registries are allowed. 5. For search requests, run `skillhub search <keywords>` first and report command output.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: codenova58/uc (version 0.1.0)

--- name: uc-browser description: 注册“UC 浏览器”技能；用于工具类产品公开页面、功能说明、下载入口与帮助信息整理。 homepage: `https://www.ucweb.com/` metadata: {"clawdbot":{"emoji":"🧰"}} --- # UC 浏览器 用途与边界 - 面向公开官网、下载页、帮助中心、功能说明页与公告页的信息整理 - 不提供设备控制、权限绕过、非公开安装包、系统破解或风控规避能力 - 仅处理公开可见的功能说明、版本入口、帮助信息与使用边界 关键入口 - 主页：https://www.ucweb.com/ - 下载与版本：官网中的下载页、版本说明、平台支持入口 - 帮助与功能：帮助中心、FAQ、功能介绍、隐私或权限说明入口 常见任务 - 功能模块、版本差异、平台支持与下载入口整理 - 权限说明、隐私说明、常见问题与故障排查入口汇总 - 更新日志、公告页与帮助目录提取 数据字段 - 平台支持、版本入口、功能模块、链接 - 权限说明、隐私政策、帮助页、FAQ 链接 - 更新日志、公告页、下载地址、系统要求 自动化要点 - 工具类产品经常按系统平台区分，整理时明确 Android、iOS、Windows、macOS 差异 - 优先以官方权限说明和隐私政策为准，避免过度推断 - 不处理设备调试、系统破解、越权访问或私有数据导出 示例流程 - 版本整理：访问 UC Browser 下载页 → 提取平台与版本入口 → 输出清单 - 功能摘要：进入功能说明页 → 提取核心能力与限制 → 输出摘要 - 帮助汇总：访问帮助中心与隐私页 → 输出常见问题与权限说明 合规提示 - 遵守平台规则、版权要求与账号安全要求 - 只整理公开信息，不输出敏感数据或非公开内容


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: banner90/doubao-launch (version 1.0.6)

--- name: doubao-launch description: Launch Doubao desktop application and configure real-time translation window. tools: - launch_doubao --- # Doubao Launch ## Usage ```bash python scripts/doubao_auto_workflow.py [--dual|--single] --json-output ``` ## Parameters - `mode` (optional): "dual" or "single", default: "dual" ## Returns ```json { "success": true, "window_handle": 123456, "window_title": "Doubao - Real-time Subtitles", "mode": "dual" } ``` ## Tools ## launch_doubao Launch Doubao application ## Workflow Integration This skill is part of the YouTube translation workflow: 1. **youtube-audio-download**: Download audio from YouTube 2. **doubao-launch**: Launch Doubao translation window 3. **audio-play**: Play the downloaded audio 4. **doubao-capture**: Capture translated subtitles ## Execution All skills execute on Windows Python via WSL cross-platform call: ``` wsl -> python.exe scripts/doubao_auto_workflow.py ... ``` ## Error Handling All skills return JSON with `success` field: - `success: true` - Operation completed - `success: false` - Check `error_code` and `error_message` ## Notes - Windows GUI automation requires visible desktop (no RDP disconnect) - Output files are stored in Windows `works/` directory - WSL accesses Windows files via `/mnt/h/...`


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: gitflopez/client-proposal-generator (version 1.0.0)

# Client Proposal Generator **Version:** 1.0.0 **Author:** max_0x1 **Category:** Business / Freelancing **Price:** $29 one-time **Tags:** freelance, proposal, client, consulting, business development --- ## What This Skill Does Generates professional, conversion-optimized client proposals for freelancers, consultants, and agencies. Input your service details and client context — get a polished proposal in minutes instead of hours. Covers 4 core outputs: 1. **Executive Summary** — hook the client with a problem/solution opener 2. **Scope of Work** — clear deliverables, timeline, and exclusions 3. **Pricing & Packages** — tiered options that anchor high and reduce sticker shock 4. **Terms & Close** — next steps, payment terms, and confidence-building guarantee --- ## Prompts ### Prompt 1: Executive Summary **File:** `prompts/executive-summary.md` **Use when:** Opening the proposal — needs to show you understand their problem. **Output:** 150–200 word executive summary with problem statement, proposed solution, and 2–3 key outcomes. ### Prompt 2: Scope of Work **File:** `prompts/scope-of-work.md` **Use when:** Defining exactly what you will and won't deliver. **Output:** Bulleted scope with deliverables, timeline milestones, revision policy, and out-of-scope clause. ### Prompt 3: Pricing & Packages **File:** `prompts/pricing-packages.md` **Use when:** Presenting investment options. **Output:** 3-tier pricing table (Starter / Professional / Premium) with feature comparison and recommended tier callout. ### Prompt 4: Terms & Close **File:** `prompts/terms-close.md` **Use when:** Sealing the deal. **Output:** Payment terms, revision rounds, satisfaction guarantee language, and a confident call-to-action close. --- ## Inputs Required For best results, provide: - **Your name/company** and service type - **Client name/company** and their industry - **The problem** they described (in their words if possible) - **Your proposed solution** (what you'll do) - **Rough timeline** (weeks/months) - **Target price range** (or let the skill suggest based on service type) - **Your unique angle** — why you vs. anyone else? --- ## Example Use Cases - Web designer sending a proposal for a $5K e-commerce site build - Marketing consultant pitching a 3-month SEO retainer - Virtual assistant offering a 30-day trial package - IT consultant scoping a network upgrade project - Copywriter proposing a website copy overhaul --- ## Output Format All outputs are in Markdown. Copy into: - Google Docs / Word for polished PDF delivery - Notion or Proposal tools (Proposify, PandaDoc, etc.) - Email directly with minimal formatting --- ## License MIT-0 — free to use, modify, and commercialize without attribution.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: make453/china-stock-analysis-bak2 (version 1.0.0)

--- name: china-stock-analysis description: Analyze Chinese stock prices (A-shares, HK stocks) and provide investment recommendations. Use when the user asks about stock analysis for Chinese companies, including buying/selling recommendations and market trends. --- # Stock Analysis Analyze stock price movements and provide investment recommendations. ## Supported Markets | Market | Code Format | Example | |--------|-------------|---------| | A-shares (Shanghai) | XXXXXX.SH | 600519.SH (Moutai) | | A-shares (Shenzhen) | XXXXXX.SZ | 000001.SZ (Ping An) | | Hong Kong | XXXX.HK | 0700.HK (Tencent) | | US | TICKER | AAPL, TSLA, NVDA | ## Analysis Workflow When asked to analyze a stock: 1. **Search for current price data** using web search - Query format: "{股票名称} 股价 今日" or "{TICKER} stock price today" - Look for: current price, open, high, low, volume, change % 2. **Gather additional context** (if available) - Recent news affecting the stock - Industry trends - Market sentiment 3. **Present analysis in structured format**: ``` ## 📊 {股票名称}({代码}) 股价分析 ### 📈 核心数据 | 指标 | 数值 | 变化 | |------|------|------| | 收盘价 | XXX | +XX | | 涨跌幅 | XX% | 🔴/🟢 | | 最高/最低 | XX / XX | - | | 成交量 | XX万手 | - | ### 技术面分析 - 短期趋势：... - 关键支撑/压力位：... - 均线状态：... ### 💡 投资建议 **建议：买入/持有/卖出** - 理由：... - 操作策略：... - 风险提示：... ``` ## Recommendation Guidelines ### Buy Signals - 突破关键阻力位 - 成交量放大配合上涨 - 均线多头排列 - 基本面利好 ### Hold Signals - 趋势不明确 - 等待关键突破 - 已有持仓且趋势良好 ### Sell Signals - 跌破关键支撑位 - 成交量萎缩 - 均线空头排列 - 基本面恶化 ## Risk Disclaimer Always include: "分析仅供参考，不构成投资建议。投资有风险，入市需谨慎。" ## Common Chinese Stocks Reference See [references/china-stocks.md](references/china-stocks.md) for popular Chinese stock codes.

path: _meta.json
content: ownerId: kn79zf5ja86rek9c25xgqbdx9s82m81s
slug: china-stock-analysis
version: 1.0.0
publishedAt: 1773162563824

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: sky-lv/skylv-secrets-scanner (version 1.0.0)

--- name: skylv-secrets-scanner slug: skylv-secrets-scanner version: 1.0.0 description: "Scans code for leaked secrets, API keys, tokens, and passwords. Triggers: scan secrets, check api key, security scan, leaked token." author: SKY-lv license: MIT tags: [automation, tools] keywords: [automation, tools] triggers: secrets-scanner --- # Secrets Scanner ## Overview Scans repositories for accidentally committed secrets and API keys. ## When to Use - User asks to "scan for secrets" or "security audit" - Pre-commit or pre-push security check ## Patterns to Detect AWS Key: AKIA[0-9A-Z]{16} GitHub [REDACTED_SECRET] Generic API Key: api[_-]?key.*[a-zA-Z0-9]{20,} Private Key: -----BEGIN (RSA|DSA|EC) PRIVATE KEY----- Password in URL: ://[^@]+:.*@ Slack [REDACTED_SECRET],13}-[0-9]{10,13} ## Commands Windows: Select-String -Path . -Include *.js,*.py -Recurse -Pattern "ghp_[a-zA-Z0-9]{36}" Linux/macOS: grep -rE "ghp_[a-zA-Z0-9]{36}|AKIA[0-9A-Z]{16}" --include="*.js" --include="*.py" . ## Prevention Add to .gitignore: .env *.key credentials.* secrets.* *.pem


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: hl950825/fund-analyzer (version 1.0.0)

--- name: fund-analyzer description: 提供基金净值查询、历史走势、基金筛选排行、持仓分析等功能，数据来源于支付宝基金页面。用于用户查询基金信息、分析基金表现、筛选优质基金等场景。 --- # Fund Analyzer Skill ## 技能概述 本技能用于分析和管理基金投资，支持查询基金净值、查看历史走势、筛选排行、持仓分析等功能。数据主要来源于支付宝基金页面。 ## 使用场景 当用户提出以下请求时，应使用本技能： - 查询某只基金的最新净值 - 查看基金的历史收益率和走势 - 筛选和比较基金的业绩排行 - 分析基金的持仓情况 - 推荐优质的基金产品 ## 数据来源 主要数据来源：**支付宝基金页面** - 基金主页: `https://fund.eastmoney.com/pingzhong.html?ft=type&fdm=0&fs=n&lcf=zqjj&fd=&rt=${fund_code}` - 天天基金: `https://fund.eastmoney.com/${fund_code}.html` - 基金排行: `https://fund.eastmoney.com/data/fundranking.html` 备用数据源： - 天天基金网 - 基金业协会官网 ## 核心功能 ### 1. 基金净值查询 使用 `scripts/query_fund_nav.py` 脚本查询基金净值： ``` python3 scripts/query_fund_nav.py <基金代码> ``` 返回信息包括： - 最新净值 - 日涨跌幅 - 近1周/1月/3月/6月/1年/3年收益率 - 基金类型 - 基金管理人 ### 2. 历史走势查询 使用 `scripts/query_fund_history.py` 脚本查询历史数据： ``` python3 scripts/query_fund_history.py <基金代码> --period <1m|3m|6m|1y|3y|5y> ``` 返回信息包括： - 净值曲线数据 - 各时间段收益率 - 同类排名 - 风险指标（夏普比率、最大回撤等） ### 3. 基金筛选排行 使用 `scripts/fund_screener.py` 脚本筛选基金： ``` python3 scripts/fund_screener.py --rank <近1年|近3年|近5年> --type <股票型|混合型|债券型|指数型> --top <数量> ``` 筛选条件： - 基金类型 - 收益率排行 - 规模要求 - 风险等级 ### 4. 持仓分析 使用 `scripts/query_fund_holding.py` 脚本查询持仓： ``` python3 scripts/query_fund_holding.py <基金代码> ``` 返回信息包括： - 前十大持仓股票 - 持仓占比 - 行业分布 - 持仓变化（较上季度） ## 基金代码格式 - A股基金：6位数字（如 `161039`） - 指数基金：带后缀（如 `161039`） - 港股基金：5位数字（如 `47011`） ## 使用示例 ### 查询单一基金 ``` 查询 161039 这只基金的最新净值和收益情况 ``` ### 对比多只基金 ``` 对比 161039 和 110011 这两只基金的表现 ``` ### 筛选基金 ``` 帮我筛选近一年收益排名前十的股票型基金 ``` ### 持仓分析 ``` 分析 161039 这只基金的持仓情况 ``` ## 输出格式 基金分析结果应以清晰的表格或列表形式呈现，包含以下关键信息： | 指标 | 说明 | |------|------| | 基金代码 | 6位数字代码 | | 基金名称 | 基金全称 | | 最新净值 | 当日单位净值 | | 日涨跌 | 当日涨跌幅 | | 近1年收益 | 过去12个月收益率 | | 基金类型 | 股票型/混合型/债券型等 | | 规模 | 基金总资产规模 | ## 注意事项 1. **网络依赖**：所有数据需要联网获取，可能存在延迟 2. **数据准确性**：建议多平台交叉验证 3. **风险提示**：基金投资有风险，入市需谨慎 4. **频率限制**：避免短时间内频繁请求，建议间隔1秒以上 ## 相关脚本 | 脚本 | 功能 | |------|------| | query_fund_nav.py | 查询基金净值和基本信息 | | query_fund_history.py | 查询历史走势数据 | | fund_screener.py | 基金筛选和排行 | | query_fund_holding.py | 查询基金持仓明细 | | compare_funds.py | 对比多只基金 | ## 维护建议 - 定期更新数据源URL - 注意网页结构变化可能影响爬取逻辑 - 添加缓存机制减少重复请求


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)