OpenClaw/clawhub-security-signals huggingface dataset:
Skill: mengbad/deepgram-voice-workflow (version 0.1.0)

--- name: deepgram-voice-workflow description: End-to-end voice workflow with Deepgram STT and TTS. Use when transcribing voice messages, generating spoken replies, or building a shell-based audio pipeline that turns input audio into text and optionally returns an MP3 reply. Especially useful for Telegram/QQ/OneBot voice-message automation and Chinese speech workflows. --- # Deepgram Voice Workflow ## Overview Use this skill for a complete speech workflow: 1. transcribe audio to text with Deepgram STT 2. optionally synthesize a spoken reply with Deepgram TTS 3. return structured outputs that can feed chat or agent pipelines This skill is the right choice when the task is broader than plain transcription and needs an input-audio to output-audio pipeline. ## Quick Start ### Transcribe only ```bash {baseDir}/scripts/deepgram-transcribe.sh /path/to/audio.ogg ``` ### Generate speech from text ```bash {baseDir}/scripts/deepgram-tts.sh "你好，我是 Neko。" ``` ### Run the full pipeline ```bash {baseDir}/scripts/neko-voice-pipeline.sh /path/to/audio.ogg --reply "收到啦，这是语音回复测试。" ``` ## Environment Set `DEEPGRAM_API_KEY` before use. The bundled scripts also fall back to reading it from: - `/root/.openclaw/.env` ## Workflow Decision ### Use `deepgram-transcribe.sh` when - only text transcription is needed - the downstream system will generate its own reply - the task is speech-to-text only ### Use `deepgram-tts.sh` when - text already exists - only an MP3 spoken response is needed - the workflow is text-to-speech only ### Use `neko-voice-pipeline.sh` when - the task begins with an audio file - a transcript is needed - an optional spoken reply should be generated in the same flow ## Outputs ### STT output `deepgram-transcribe.sh` writes: - transcript text file - raw API JSON file next to it ### TTS output `deepgram-tts.sh` writes: - MP3 output file ### Pipeline output `neko-voice-pipeline.sh` prints JSON with: - `out_dir` - `transcript_path` - `transcript` - `reply_audio_path` This makes it easy to wire into scripts or adapters. ## Typical Uses Prefer this skill for: - transcribing Telegram/QQ/OneBot voice messages - generating MP3 replies to short voice prompts - building bot-side voice input/output automation - testing speech pipelines from shell without introducing a full SDK ## Notes - Defaults are tuned for lightweight practical use, not maximal configurability. - `deepgram-transcribe.sh` defaults to `model=nova-2` and `language=zh`. - `deepgram-tts.sh` defaults to `model=aura-2-luna-en`; override the model when a different voice is preferred. - Inspect the raw JSON transcript response when debugging recognition quality or API errors. ## References Read these files when needed: - `references/stt-notes.md` for transcription details - `references/tts-notes.md` for speech synthesis details - `references/pipeline-notes.md` for end-to-end pipeline behavior


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: zhouqkt/agency-senior-developer (version 1.0.0)

--- name: agency-senior-developer description: Expert AI agent specializing in senior developer. From The Agency (github.com/msitarzewski/agency-agents). metadata: openclaw: emoji: "💎" requires: { bins: [] } install: [] --- # senior developer ## Identity & Style ## 🧠 Your Identity & Memory - **Role**: Implement premium web experiences using Laravel/Livewire/FluxUI - **Personality**: Creative, detail-oriented, performance-focused, innovation-driven - **Memory**: You remember previous implementation patterns, what works, and common pitfalls - **Experience**: You've built many premium sites and know the difference between basic and luxury ## Core Mission ## 🎨 Your Development Philosophy ### Premium Craftsmanship - Every pixel should feel intentional and refined - Smooth animations and micro-interactions are essential - Performance and beauty must coexist - Innovation over convention when it enhances UX ### Technology Excellence - Master of Laravel/Livewire integration patterns - FluxUI component expert (all components available) - Advanced CSS: glass morphism, organic shapes, premium animations - Three.js integration for immersive experiences when appropriate ## How to Activate Reference this agent by name or specialty when you need its expertise.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: crossservicesolutions/remove-password-from-pdf (version 1.0.0)

--- name: remove-password-from-pdf description: Remove password protection from a PDF by uploading it (with its current password) to the Solutions API, polling until completion, then returning a download URL for the unlocked PDF. license: MIT compatibility: agentskills: ">=0.1.0" metadata: category: document-security tags: - pdf - unlock - remove-password - decrypt - cross-service-solutions provider: Cross-Service-Solutions (Solutions API) allowed-tools: - http - files --- # remove-password-from-pdf ## Purpose This skill removes password protection from a PDF by: 1) accepting a password-protected PDF from the user, 2) accepting the current password from the user, 3) uploading both to the Solutions API, 4) polling the job status until it is finished, 5) returning the download URL for the unlocked PDF. ## Credentials The API requires an API key used as a Bearer token: - `Authorization: Bearer <API_KEY>` How the user gets an API key: - https://login.cross-service-solutions.com/register - Or the user can provide an API key directly. **Rule:** never echo or log the API key. ## API endpoints Base URL: - `https://api.xss-cross-service-solutions.com/solutions/solutions` Create remove-password job: - `POST /api/33` - `multipart/form-data` parameters: - `file` (PDF-Datei) — required — PDF file - `password` (Password) — required — string (current password to unlock) Get result by ID: - `GET /api/<ID>` When done, the response contains: - `output.files[]` with `{ name, path }` where `path` is a downloadable URL. ## Inputs ### Required - PDF file (binary) - Current password (`password`, string) - API key (string) ### Optional - None ## Output Return a structured result: - `job_id` (number) - `status` (string) - `download_url` (string, when done) - `file_name` (string, when available) Example output: ```json { "job_id": 654, "status": "done", "download_url": "https://.../unlocked.pdf", "file_name": "unlocked.pdf" }


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (HIGH)
Skill: thesethrose/npm-search (version 1.0.0)

--- name: npm-search description: Search npm packages. Use for finding Node.js/JavaScript packages, libraries, and tools. metadata: {"clawdbot":{"emoji":"📦","requires":{"bins":["jq","npm-search-mcp-server"]}}} --- # NPM Search CLI wrapper for npm-search-mcp-server. > **Note:** Examples show command syntax. Replace queries with the user's actual request. ## Search Packages ```bash bash scripts/npmsearch "<query>" ``` ## Command Reference | Command | Description | |---------|-------------| | `npmsearch "<query>"` | Search npm packages | ## Notes - Requires `npm-search-mcp-server` installed - Requires `jq`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: suspicious | SkillSpector: clean (LOW)
Skill: daniellummis/github-actions-timeout-risk-audit (version 1.0.0)

--- name: github-actions-timeout-risk-audit description: Audit GitHub Actions job runtime risk against timeout thresholds so near-timeout jobs get fixed before they fail CI. version: 1.0.0 metadata: {"openclaw":{"requires":{"bins":["bash","python3"]}}} --- # GitHub Actions Timeout Risk Audit Use this skill to find GitHub Actions jobs that are timing out or trending dangerously close to timeout limits. ## What this skill does - Reads one or more run JSON exports (`gh run view --json ...`) - Calculates per-job runtime (`completedAt - startedAt`) - Flags risk severity by configured timeout threshold: - `warn` when runtime exceeds `WARN_RATIO * JOB_TIMEOUT_SECONDS` - `critical` when runtime exceeds `CRITICAL_RATIO * JOB_TIMEOUT_SECONDS` - always `critical` for jobs with `conclusion=timed_out` - Groups repeated jobs by repository + workflow + job name - Emits text or JSON output for CI gates / dashboards ## Inputs Optional: - `RUN_GLOB` (default: `artifacts/github-actions/*.json`) - `TOP_N` (default: `20`) - `OUTPUT_FORMAT` (`text` or `json`, default: `text`) - `JOB_TIMEOUT_SECONDS` (default: `3600`) - `WARN_RATIO` (default: `0.80`) - `CRITICAL_RATIO` (default: `0.95`) - `FAIL_ON_CRITICAL` (`0` or `1`, default: `0`) - `WORKFLOW_MATCH`, `WORKFLOW_EXCLUDE` (regex, optional) - `JOB_MATCH`, `JOB_EXCLUDE` (regex, optional) - `REPO_MATCH`, `REPO_EXCLUDE` (regex, optional) - `BRANCH_MATCH`, `BRANCH_EXCLUDE` (regex, optional) ## Collect run JSON ```bash gh run view <run-id> --json databaseId,workflowName,headBranch,url,repository,jobs \ > artifacts/github-actions/run-<run-id>.json ``` > Ensure `jobs` includes `startedAt`, `completedAt`, and `conclusion`. ## Run Text report: ```bash RUN_GLOB='artifacts/github-actions/*.json' \ JOB_TIMEOUT_SECONDS=3600 \ WARN_RATIO=0.85 \ CRITICAL_RATIO=0.95 \ bash skills/github-actions-timeout-risk-audit/scripts/timeout-risk-audit.sh ``` JSON output + fail gate: ```bash RUN_GLOB='artifacts/github-actions/*.json' \ OUTPUT_FORMAT=json \ FAIL_ON_CRITICAL=1 \ bash skills/github-actions-timeout-risk-audit/scripts/timeout-risk-audit.sh ``` Repo/workflow filter: ```bash RUN_GLOB='artifacts/github-actions/*.json' \ REPO_MATCH='^flowcreatebot/' \ WORKFLOW_MATCH='(CI|Build)' \ bash skills/github-actions-timeout-risk-audit/scripts/timeout-risk-audit.sh ``` Run with bundled fixtures: ```bash RUN_GLOB='skills/github-actions-timeout-risk-audit/fixtures/*.json' \ bash skills/github-actions-timeout-risk-audit/scripts/timeout-risk-audit.sh ``` ## Output contract - Exit `0` in reporting mode - Exit `1` when `FAIL_ON_CRITICAL=1` and at least one critical instance exists - Text output includes summary, thresholds, and top timeout-risk jobs - JSON output includes `summary`, ranked `groups`, and `critical_instances`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: sxliuyu/domain-monitor (version 1.0.0)

--- name: domain-monitor version: 1.0.0 description: 域名监控工具。监控域名到期时间、WHOIS信息变化、SSL证书状态。适合站长和域名投资者。 author: 你的名字 triggers: - "域名监控" - "WHOIS" - "域名到期" - "SSL证书" --- # Domain Monitor 🌐 监控域名状态，到期和 WHOIS 变化时提醒。 ## 功能 - ⏰ 域名到期提醒 - 📋 WHOIS 信息监控 - 🔒 SSL 证书监控 - 📊 状态变化通知 ## 使用方法 ### 添加域名 ```bash python3 scripts/domain.py add example.com ``` ### 查看状态 ```bash python3 scripts/domain.py status example.com ``` ### 列出监控 ```bash python3 scripts/domain.py list ``` ### 检查所有 ```bash python3 scripts/domain.py check ``` ## 示例 ```bash # 添加域名监控 python3 scripts/domain.py add example.com python3 scripts/domain.py add mysite.io # 查看状态 python3 scripts/domain.py status example.com # 检查所有 python3 scripts/domain.py check ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: jolestar/defillama-yields-openapi-skill (version 1.0.0)

--- name: defillama-yields-openapi-skill description: Operate DefiLlama public yield APIs through UXC with a curated OpenAPI schema and read-first guardrails. --- # DefiLlama Yields API Skill Use this skill to run DefiLlama public yield API operations through `uxc` + OpenAPI. Reuse the `uxc` skill for shared execution, auth, and error-handling guidance. ## Prerequisites - `uxc` is installed and available in `PATH`. - Network access to `https://yields.llama.fi`. - Access to the curated OpenAPI schema URL: - `https://raw.githubusercontent.com/holon-run/uxc/main/skills/defillama-yields-openapi-skill/references/defillama-yields.openapi.json` ## Scope This skill covers a public read-only yield surface on `yields.llama.fi`: - yield pool discovery - per-pool chart history This skill does **not** cover: - write operations - protocol or chain overview endpoints from `api.llama.fi` - price endpoints from `coins.llama.fi` - DefiLlama Pro APIs ## Authentication This public skill does not require authentication. ## Core Workflow 1. Use the fixed link command by default: - `command -v defillama-yields-openapi-cli` - If missing, create it: `uxc link defillama-yields-openapi-cli https://yields.llama.fi --schema-url https://raw.githubusercontent.com/holon-run/uxc/main/skills/defillama-yields-openapi-skill/references/defillama-yields.openapi.json` - `defillama-yields-openapi-cli -h` 2. Inspect operation schema first: - `defillama-yields-openapi-cli get:/pools -h` - `defillama-yields-openapi-cli get:/chart/{pool} -h` 3. Prefer narrow read validation before broader reads: - `defillama-yields-openapi-cli get:/pools` - `defillama-yields-openapi-cli get:/chart/{pool} pool=747c1d2a-c668-4682-b9f9-296708a3dd90` ## Operations - `get:/pools` - `get:/chart/{pool}` ## Guardrails - Keep automation on the JSON output envelope; do not use `--text`. - Parse stable fields first: `ok`, `kind`, `protocol`, `data`, `error`. - Treat this v1 skill as read-only. - Public DefiLlama data is split across multiple hosts; this skill intentionally wraps only `yields.llama.fi`. - `defillama-yields-openapi-cli <operation> ...` is equivalent to `uxc https://yields.llama.fi --schema-url <defillama_yields_openapi_schema> <operation> ...`. ## References - Usage patterns: `references/usage-patterns.md` - Curated OpenAPI schema: `references/defillama-yields.openapi.json` - DefiLlama API docs: https://defillama.com/docs/api


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: nancliu/academic-deep-research-pro (version 1.0.0)

--- name: academic-deep-research slug: academic-deep-research-pro description: Transparent, rigorous research with full methodology — not a black-box API wrapper. Conducts exhaustive investigation through mandated 2-cycle research per theme, APA 7th citations, evidence hierarchy, and 3 user checkpoints. Self-contained using native OpenClaw tools (web_search, web_fetch, sessions_spawn). Use for literature reviews, competitive intelligence, or any research requiring academic rigor and reproducibility. homepage: https://github.com/kesslerio/academic-deep-research-clawhub-skill metadata: openclaw: emoji: 🔬 --- # Academic Deep Research 🔬 ## When to Use Trigger this skill when the user wants: - Deep research, exhaustive analysis, or literature review - Multi-source verification and evidence hierarchies - Academic-style reports with citations ## Required Stop Points 1. **Initial engagement**: ask 2–3 clarifying questions and confirm understanding. 2. **Research plan**: present themes, steps, and deliverables; wait for approval. 3. **Final report**: deliver full narrative report with citations. ## Minimum Requirements - Two full research cycles per theme. - Analyze between every tool call. - Multiple sources per claim; contradictions addressed. - APA 7th in-text citations and reference list. - Narrative-only final report (no lists or tables). ## References - `reference/protocol.md` — research phases, tool order, and analysis rules - `reference/writing-style.md` — narrative constraints and phase formatting - `reference/citations-apa.md` — citation rules and examples - `reference/report-template.md` — required report structure - `reference/error-handling.md` — gaps, contradictions, failures - `reference/quality-standards.md` — evidence hierarchy and confidence levels - `reference/parallel-research.md` — sessions_spawn workflow - `quickref.md` — short checklist - `example.md` — sample usage


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: ssidharhubble/buymeacoffee-autobot (version 1.0.12)

--- name: buymeacoffee-autobot version: 1.0.12 description: | Automates Buy Me a Coffee / Ko-fi page — generates content, posts updates, thanks supporters, and converts followers into paying supporters Also runs affiliate links for digital products and cross-promotes across platforms. compatibility: Python 3, requests. Buy Me a Coffee has no public API (use browser automation). metadata: author: ssyopros.zo.computer category: passive- tags: buymeacoffee, ko-fi, creator-monetization, tips, donations, supporters, passive- # buymeacoffee-autobot Automate your Buy Me a Coffee page. ## What This Does 1. **Posts content updates** — auto-posts to your page via browser automation 2. **Thanks supporters** — personalized thank-you messages after each tip 3. **Converts followers** — promotes page to drive new supporters 4. **Cross-promotes** — shares your page on social channels 5. **Tracks earnings** — daily summary of tips received ## Core Script ### `scripts/bmc_autoposter.py` ```python #!/usr/bin/env python3 """Buy Me a Coffee autoposter — automates content and supporter management.""" def post_update(message): """Post an update to your BMC/Ko-fi page.""" pass # Browser automation via Selenium def thank_supporter(name, amount): """Send personalized thank-you after a tip.""" pass def promote_page(): """Share page link across connected platforms.""" pass def get_earnings(): """Scrape today's tips and total earnings.""" pass ``` ## Growth Strategy - Post 3x/week minimum — consistency builds supporter base - Offer 3 supporter tiers: $3, $5, $10 - Bundle digital products as perks - Cross-promote from Twitter/X and LinkedIn ## Earnings Model - Buy Me a Coffee: 0% fee on tips (they - Ko-fi: 0% fee, optional paid subscriptions - Target: $100–$500/month from 10–50 active supporters ## Steps to Connect 1. Sign up at [buymeacoffee.com](https://buymeacoffee.com) or [ko-fi.com](https://ko-fi.com) 2. Save your page URL as `BMC_PAGE_URL` in [Settings > Advanced](/?t=settings&s=advanced) 3. Save login credentials as `BMC_EMAIL` + `BMC_PASSWORD` ## Deliverable `buymeacoffee-autobot/` with: - `scripts/autoposter.py` - `scripts/supporter_thanker.py` - `config/content_calendar.json` — scheduled posts - `SKILL.md` — this file


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: paudyyin/frontend-design-cn (version 1.0.0)

--- name: frontend-design version: 1.0.0 description: > 创建独特、生产级的前端界面，追求高设计品质。当用户要求构建 网页组件、页面、海报、应用时使用（包括网站、着陆页、仪表盘、 React组件、HTML/CSS布局、美化任何Web界面）。生成有创意、 打磨精细的代码和UI设计，坚决拒绝千篇一律的"AI审美"。 metadata: author: 移植并优化自 Anthropic category: design --- # 前端设计大师 创建让人眼前一亮、过目不忘的生产级前端界面。拒绝平庸的AI生成审美，追求有态度、有观点、有细节的设计。 --- ## 🎯 什么时候使用 **立即触发：** - 用户说"帮我写个网页"、"做个前端页面" - 用户要构建组件、仪表盘、着陆页、海报 - 用户要美化、优化、改版现有界面 - 用户提到React/Vue/HTML/CSS/布局等关键词 **不要触发：** - 纯后端代码 - 数据处理脚本 - 非可视化的工具函数 --- ## 🎨 设计前的关键决策 **写第一行代码前，先想清楚这4件事：** ### 1. 明确目的 - 这个界面解决什么问题？ - 谁在用它？（开发者/消费者/管理层/孩子） - 用户第一眼应该注意到什么？ ### 2. 选择大胆的美学方向（必须选一个！） | 风格 | 描述 | 适用场景 | |------|------|---------| | **极简主义** | 极致留白，少即是多，每个元素都有理由 | 高端产品、作品集 | | **极繁主义** | 信息爆炸，重叠，分层，视觉冲击 | 艺术节、时尚品牌 | | **复古未来** | 80年代电脑风，CRT效果，像素感 | 科技、游戏、NFT | | **有机自然** | 曲线、渐变、柔和、流动感 | 健康、生活方式 | | **奢华精致** | 高对比度，精细排版，黑金/白金配色 | 奢侈品、高端服务 | | **趣味玩具** | 圆润、明亮、可爱、互动感强 | 面向儿童、娱乐产品 | | **杂志编辑** | 栅格系统，大标题，图文穿插 | 媒体、博客、内容站 | | **粗野主义** | 原始、直接、边框、黑白为主 | 艺术、先锋品牌 | | **装饰艺术** | 几何图案，对称，金色点缀 | 高端活动、酒店 | | **柔和马卡龙** | 低饱和度，圆型，软阴影 | 社交、女性向产品 | | **工业实用** | 功能优先，等宽字体，仪表盘风格 | 工具、数据产品 | ⚠️ **严禁：** 模糊的"现代简约风"。必须选一个明确的方向，并贯彻到底！ ### 3. 技术约束 - 用什么框架？（纯HTML/React/Vue） - 性能要求？（纯CSS优先，尽量少JS） - 无障碍要求？ ### 4. 记忆点设计 > **用户记住这个界面的那一个点是什么？** 必须有且只有一个核心记忆点： - 一个特别的动画效果 - 一种不寻常的布局方式 - 一个独特的字体组合 - 一个惊艳的背景纹理 - 一个意想不到的交互 --- ## 🔑 五大设计原则 ### 1. 字体排版：拒绝平庸 ✅ **应该做：** - 选择有性格的字体，避开Inter/Roboto/Arial这些过度使用的字体 - 用一个有特色的标题字体 + 一个易读的正文字体 - 字号要有层级差异（不要都是14-16px） - 大标题用字距（letter-spacing）制造高级感 ❌ **不应该：** - 全用系统默认字体 - 字号差异太小，没有视觉层级 - 一行超过80字符（阅读困难） ### 2. 色彩：大胆承诺 ✅ **应该做：** - 用CSS变量确保一致性 - 主色调占70%，辅助色20%，强调色10% - 大胆用单色或双色（少即是多） - 深色/浅色模式都考虑 ❌ **不应该：** - 紫色渐变配白色背景（烂大街了！） - 彩虹色，什么颜色都有 - 对比度不够，文字看不清 ### 3. 动效：一击即中 ✅ **应该做：** - 页面加载用交错动画（animation-delay） - 滚动触发的渐入效果 - 悬停时的小惊喜（不要太夸张） - 纯CSS动画优先（性能好） ❌ **不应该：** - 到处都是微交互，分散注意力 - 动画太长太抢戏（超过300ms） - 一滚动什么都在动（晕） ### 4. 空间布局：打破常规 ✅ **应该做：** - 非对称布局（不要永远左右对称） - 元素重叠制造层次感 - 斜向流动，打破水平垂直的单调 - 大胆留白（或者大胆密集） - 偶尔有元素突破栅格 ❌ **不应该：** - 永远居中，永远12栅格，永远flex - 所有元素间距都一样 - 页面像个规矩的表格 ### 5. 背景与细节：制造氛围 ✅ **可以加：** - 噪点纹理（grain/noise） - 渐变网格（gradient mesh） - 几何图案点缀 - 多层透明叠加 - 戏剧化的阴影 - 装饰性边框 - 自定义鼠标光标 ❌ **永远纯白/纯黑背景（除非是极简风格）** --- ## 🚫 绝对禁止的AI俗套 看到这些直接重写： 1. ❌ **Space Grotesk字体** - 每个AI生成的页面都在用 2. ❌ **紫色渐变 + 白色背景** - 看吐了 3. ❌ **永远的卡片布局** - 圆角12px，阴影，三点菜单 4. ❌ **Hero标题永远3rem，正文永远1.25rem** 5. ❌ **永远居中，永远flex，永远column** 6. ❌ **"glassmorphism"毛玻璃滥用** 7. ❌ **所有按钮都是蓝底白字** --- ## 💻 代码质量要求 ### 生产级标准 - 代码可直接运行，不用用户修bug - 响应式设计（手机/平板/桌面） - 语义化HTML标签 - 注释关键决策（为什么这样设计） ### 复杂度匹配 - **极简风格** = 代码克制，细节在间距、字重 - **极繁风格** = 代码丰富，多层动画、装饰元素 - 风格决定代码量，不要反过来 --- ## 📐 交付清单 每次交付必须包含： 1. ✅ 完整可运行的代码（HTML/CSS/JS或组件） 2. ✅ 设计说明（用了什么风格，核心记忆点是什么） 3. ✅ 如果是多页面，说明页面间关系 4. ✅ 浏览器兼容性说明（纯CSS的话基本都支持） --- ## 🎯 示例设计思路 > **示例：数据仪表盘** > > **风格选择：工业实用风** > - 字体：等宽字体 + 无衬线标题 > - 配色：深灰背景 + 霓虹色系数据高亮 > - 布局：密集栅格，信息密度高 > - 记忆点：数字跳动动画 + 实时进度条效果 > - 动效：鼠标悬停时卡片轻微上浮，数据栏发光 记住：**明确的观点 + 一致的执行 > 完美但平庸的设计**。 --- **现在，让我们开始创造让人难忘的界面吧！** 🎨✨


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: leeguooooo/zentao (version 1.0.1)

--- name: zentao description: Use the zentao CLI to login and query ZenTao products and bugs. ZENTAO_URL usually includes /zentao. homepage: https://www.npmjs.com/package/@leeguoo/zentao-mcp metadata: {"openclaw":{"emoji":"🐞","install":[{"id":"node","kind":"node","package":"@leeguoo/zentao-mcp","bins":["zentao"],"label":"Install zentao CLI (node)"}]}} --- # zentao (ZenTao CLI) ## When to use this skill Use this skill when the user asks to: - login to ZenTao via the CLI - list products - list bugs for a product - view bug details - list the user's own bugs ## Installation (recommended) To install globally with pnpm: ```bash pnpm i -g @leeguoo/zentao-mcp ``` If pnpm is not installed: ```bash npm i -g pnpm pnpm i -g @leeguoo/zentao-mcp ``` ## Login workflow 1) Run login once: ```bash zentao login \ --zentao-url="https://zentao.example.com/zentao" \ --zentao-account="leo" \ --zentao-password="***" ``` 2) This writes credentials to: - `~/.config/zentao/config.toml` (or `$XDG_CONFIG_HOME/zentao/config.toml`) 3) Verify: ```bash zentao whoami ``` IMPORTANT: `--zentao-url` usually must include `/zentao`. If login returns HTML 404, the base path is likely missing `/zentao`. ## Commands List products (simple by default): ```bash zentao products list ``` List bugs for a product: ```bash zentao bugs list --product 6 ``` Get bug details: ```bash zentao bug get --id 1329 ``` List my bugs (include details): ```bash zentao bugs mine --status active --include-details ``` Full JSON output: - `zentao products list --json` - `zentao bugs list --product 6 --json` - `zentao bug get --id 1329 --json` - `zentao bugs mine --include-details --json`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: lc044/trailsnap-cli (version 1.0.0)

--- name: "trailsnap-cli" description: "TrailSnap CLI 命令行工具，用于查询照片、相册、标签、位置和人物等信息。当用户需要查看照片、相册数据时调用此技能。" --- # TrailSnap CLI 技能 此技能允许使用 `trailsnap-cli` Python 脚本与 TrailSnap 后端 API 进行交互。 ## 功能 1. 根据指定条件（可选过滤参数）查询照片列表。 2. 查询分类标签、相册、位置和人物（面部）信息。 3. 查询挂载的存储文件夹（目录）列表。 ## 初始配置 首次使用该工具前，需要配置 API 地址和 Token： ```bash python {baseDir}/cli.py config set --url <API_BASE_URL> --token <YOUR_API_TOKEN> ``` 配置信息将被保存到同目录下的 `.env` 文件中。 ## 使用方法 使用前可以通过 `python {baseDir}/cli.py <command> -h` 或 `python {baseDir}/cli.py <command> <subcommand> -h` 查看每个命令的详细帮助信息。通常情况下，你需要先根据用户的问题逐步筛选出检索条件，然后查询符合条件的照片列表。如果需要访问照片的媒体文件（如 base64 编码或直接下载文件），你可以使用 `medias` 命令。 **你只能通过cli.py脚本运行，不能直接调用API。更不能直接读取.env文件中的配置信息。** 使用 Python 运行脚本： ```bash python {baseDir}/cli.py <command> <subcommand> [options] ``` 详细的命令参考请参考 [reference.md](reference.md) 文件。 ### 示例 请参考 [examples/simple.md](examples/simple.md) 文件。


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)