@robbiesrobotics/alice-agents 1.5.7 → 1.5.9

package/templates/workspaces/olivia/skills/openclaw-security-toolkit/CHANNELLOG.md

@@ -0,0 +1,73 @@
+# OpenClaw Security Guard 安全管家
+
+## 基本信息
+
+- **名称**: openclaw-security-guard
+- **版本**: v1.0.0
+- **描述**: OpenClaw 用户的安全管家，审计配置、扫描敏感信息、管理权限
+- **发布时间**: 2026-03-11
+- **作者**: OpenClaw Community
+
+## 核心功能
+
+- 🔍 **安全审计** - 全面的安全配置检查，一键发现风险
+- 🔐 **敏感信息扫描** - 检测暴露的 API 密钥和令牌
+- 👥 **访问控制** - 管理设备、用户和权限
+- 🔑 **令牌管理** - 轮换和验证令牌
+- 📊 **安全报告** - 生成详细的安全报告
+- 🛡️ **安全加固** - 应用安全最佳实践
+
+## 安全检查项
+
+| 类别 | 检查内容 |
+|------|----------|
+| 配置安全 | Gateway 绑定地址、认证模式、Token 强度 |
+| 敏感信息 | API Key、Token、密码、私钥 |
+| 访问控制 | 设备、用户、频道、会话 |
+| 网络安全 | 公网暴露、开放端口 |
+
+## 使用示例
+
+```bash
+# 运行安全审计
+python3 {baseDir}/scripts/main.py audit
+
+# 扫描敏感信息
+python3 {baseDir}/scripts/main.py scan
+
+# 生成安全报告
+python3 {baseDir}/scripts/main.py report --format md
+
+# 查看令牌状态
+python3 {baseDir}/scripts/main.py token status
+
+# 列出已配对设备
+python3 {baseDir}/scripts/main.py access devices
+
+# 安全加固（自动修复）
+python3 {baseDir}/scripts/main.py harden --fix
+```
+
+## 输出格式
+
+- **table** - 表格格式（默认）
+- **json** - JSON 格式
+- **md** - Markdown 格式
+
+## 语言支持
+
+- 中文 (zh)
+- English (en)
+
+根据系统语言自动选择。
+
+## 更新记录
+
+### v1.0.0 (2026-03-11)
+- 初始版本发布
+- 支持中英文界面
+- 完整的安全审计功能
+
+## 许可证
+
+MIT License

package/templates/workspaces/olivia/skills/openclaw-security-toolkit/README.md

@@ -0,0 +1,161 @@
+# OpenClaw Security Guard
+
+A comprehensive security tool for OpenClaw users to protect their AI assistant.
+
+## Features
+
+- 🔍 **Security Audit** - Comprehensive security configuration check
+- 🔐 **Secret Scanner** - Detect exposed API keys and tokens
+- 👥 **Access Control** - Manage devices, users, and permissions
+- 🔑 **Token Manager** - Rotate and validate tokens
+- 📊 **Security Report** - Generate detailed security reports
+- 🛡️ **Hardening** - Apply security best practices
+
+## Installation
+
+```bash
+# Clone the repository
+git clone https://github.com/hkall/openclaw-security-toolkit.git
+
+# No external dependencies required (uses Python stdlib)
+```
+
+## Requirements
+
+- Python 3.6+
+- OpenClaw installed
+
+## Usage
+
+### Security Audit
+
+```bash
+# Run security audit
+python3 scripts/main.py audit
+
+# Deep audit with auto-fix
+python3 scripts/main.py audit --deep --fix
+```
+
+### Secret Scanner
+
+```bash
+# Scan for secrets
+python3 scripts/main.py scan
+
+# Scan for specific pattern
+python3 scripts/main.py scan --pattern "sk-"
+```
+
+### Security Report
+
+```bash
+# Generate table report (default)
+python3 scripts/main.py report
+
+# Generate markdown report
+python3 scripts/main.py report --format md -o security.md
+
+# Generate JSON report
+python3 scripts/main.py report --format json
+```
+
+### Token Management
+
+```bash
+# Check token status
+python3 scripts/main.py token status
+
+# Rotate tokens
+python3 scripts/main.py token rotate
+```
+
+### Access Control
+
+```bash
+# List all access entries
+python3 scripts/main.py access list
+
+# List paired devices
+python3 scripts/main.py access devices
+
+# List users
+python3 scripts/main.py access users
+```
+
+### Security Hardening
+
+```bash
+# Check hardening status
+python3 scripts/main.py harden
+
+# Apply hardening fixes
+python3 scripts/main.py harden --fix
+```
+
+### Quick Status
+
+```bash
+python3 scripts/main.py status
+```
+
+## Options
+
+| Option | Description |
+|--------|-------------|
+| `--format, -f` | Output format: json, md, table (default: table) |
+| `--lang, -l` | Language: en, zh (default: auto-detect) |
+| `--quiet, -q` | Quiet mode, only output results |
+| `--verbose, -v` | Verbose output |
+| `--output, -o` | Output file path |
+| `--deep` | Deep scan mode |
+| `--fix` | Auto-fix issues where possible |
+
+## Security Checks
+
+| Category | Checks |
+|----------|--------|
+| Config | Gateway bind, auth mode, token strength |
+| Secrets | API keys, tokens, passwords, private keys |
+| Access | Devices, users, channels, sessions |
+| Network | Public exposure, open ports |
+
+## Output Example
+
+```
+🔐 OpenClaw Security Guard v1.0.0
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+📊 Security Score: 72/100 ⚠️
+
+🔴 HIGH RISK
+  • API Key exposed in config file
+    Location: ~/.openclaw/openclaw.json:15
+
+🟡 MEDIUM RISK
+  • Token rotation recommended
+    Last rotation: 30 days ago
+
+🟢 PASSED
+  ✓ Gateway properly secured
+  ✓ No weak passwords detected
+```
+
+## Languages
+
+- English (en)
+- 中文 (zh)
+
+Auto-detected based on system locale.
+
+## License
+
+MIT License
+
+## Author
+
+hkall
+
+## Version
+
+v1.0.0

package/templates/workspaces/olivia/skills/openclaw-security-toolkit/SKILL.md

@@ -0,0 +1,130 @@
+---
+name: "openclaw-security-guard"
+description: "Security guard for OpenClaw users. Audit configs, scan secrets, manage access, and generate security reports."
+---
+
+# OpenClaw Security Guard
+
+A comprehensive security tool for OpenClaw users to protect their AI assistant.
+
+## Features
+
+- 🔍 **Security Audit** - Comprehensive security configuration check
+- 🔐 **Secret Scanner** - Detect exposed API keys and tokens
+- 👥 **Access Control** - Manage devices, users, and permissions
+- 🔑 **Token Manager** - Rotate and validate tokens
+- 📊 **Security Report** - Generate detailed security reports
+- 🛡️ **Hardening** - Apply security best practices
+
+## Requirements
+
+- Python 3.6+
+- No external dependencies (uses stdlib)
+
+## Commands
+
+```bash
+# Run security audit
+python3 {baseDir}/scripts/main.py audit
+
+# Scan for secrets
+python3 {baseDir}/scripts/main.py scan
+
+# Generate report
+python3 {baseDir}/scripts/main.py report --format md
+
+# Check token status
+python3 {baseDir}/scripts/main.py token status
+
+# Access control
+python3 {baseDir}/scripts/main.py access list
+
+# Security hardening
+python3 {baseDir}/scripts/main.py harden --fix
+
+# Quick status check
+python3 {baseDir}/scripts/main.py status
+```
+
+## Options
+
+```
+--format, -f <format>    Output format: json, md, table (default: table)
+--lang, -l <lang>        Language: en, zh (default: auto-detect)
+--quiet, -q              Quiet mode, only output results
+--verbose, -v            Verbose output
+--output, -o <file>      Output file path
+--deep                   Deep scan mode
+--fix                    Auto-fix issues where possible
+```
+
+## Security Checks
+
+| Category | Checks |
+|----------|--------|
+| Config | Gateway bind, auth mode, token strength |
+| Secrets | API keys, tokens, passwords, private keys |
+| Access | Devices, users, channels, sessions |
+| Network | Public exposure, open ports |
+
+## Examples
+
+```bash
+# Full audit with auto-fix
+python3 {baseDir}/scripts/main.py audit --deep --fix
+
+# Generate markdown report
+python3 {baseDir}/scripts/main.py report --format md -o security.md
+
+# Scan for specific pattern
+python3 {baseDir}/scripts/main.py scan --pattern "sk-"
+
+# List all paired devices
+python3 {baseDir}/scripts/main.py access devices
+
+# Generate JSON report
+python3 {baseDir}/scripts/main.py report --format json
+```
+
+## Output Formats
+
+### Table (default)
+```
+🔐 OpenClaw Security Guard v1.0.0
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+📊 Security Score: 72/100 ⚠️
+
+🔴 HIGH RISK
+  • API Key exposed in config file
+    Location: ~/.openclaw/openclaw.json:15
+```
+
+### JSON
+```json
+{
+  "score": 72,
+  "findings": [...]
+}
+```
+
+### Markdown
+```markdown
+# Security Report
+**Score**: 72/100
+```
+
+## Languages
+
+- English (en)
+- 中文 (zh)
+
+Auto-detected based on system locale.
+
+## License
+
+MIT
+
+## Version
+
+v1.0.0

package/templates/workspaces/olivia/skills/openclaw-security-toolkit/_meta.json

@@ -0,0 +1,6 @@
+{
+  "ownerId": "kn7dkdb4pa364nwyr15npjq2n582g7t3",
+  "slug": "openclaw-security-toolkit",
+  "version": "1.0.0",
+  "publishedAt": 1773201618878
+}

package/templates/workspaces/olivia/skills/openclaw-security-toolkit/config.json

@@ -0,0 +1,36 @@
+{
+  "name": "openclaw-security-guard",
+  "version": "1.0.0",
+  "settings": {
+    "audit_level": "standard",
+    "auto_fix": false,
+    "check_interval": 86400
+  },
+  "scan": {
+    "paths": [
+      "~/.openclaw/openclaw.json",
+      "~/.openclaw/.env",
+      "~/.openclaw/credentials/"
+    ],
+    "ignore_patterns": [
+      "*.log",
+      "*.bak"
+    ],
+    "custom_patterns": []
+  },
+  "notifications": {
+    "enabled": false,
+    "channels": [],
+    "severity_threshold": "medium"
+  },
+  "scoring": {
+    "weights": {
+      "critical": 25,
+      "high": 15,
+      "medium": 8,
+      "low": 3,
+      "info": 0
+    },
+    "base_score": 100
+  }
+}

package/templates/workspaces/olivia/skills/openclaw-security-toolkit/metadata.json

@@ -0,0 +1,19 @@
+{
+  "name": "openclaw-security-toolkit",
+  "version": "1.0.0",
+  "description": "Comprehensive security tool for OpenClaw users. Audit configs, scan secrets, manage access control.",
+  "features": [
+    "security-audit",
+    "secret-scanner",
+    "access-control",
+    "token-manager",
+    "security-report"
+  ],
+  "requires_api_key": false,
+  "min_openclaw_version": "2026.1.0",
+  "languages": ["en", "zh"],
+  "categories": ["security", "admin"],
+  "author": "hkall",
+  "license": "MIT",
+  "repository": "https://github.com/hkall/openclaw-security-toolkit"
+}

package/templates/workspaces/olivia/skills/openhue/SKILL.md

@@ -0,0 +1,30 @@
+---
+name: openhue
+description: Control Philips Hue lights/scenes via the OpenHue CLI.
+homepage: https://www.openhue.io/cli
+metadata: {"clawdbot":{"emoji":"💡","requires":{"bins":["openhue"]},"install":[{"id":"brew","kind":"brew","formula":"openhue/cli/openhue-cli","bins":["openhue"],"label":"Install OpenHue CLI (brew)"}]}}
+---
+
+# OpenHue CLI
+
+Use `openhue` to control Hue lights and scenes via a Hue Bridge.
+
+Setup
+- Discover bridges: `openhue discover`
+- Guided setup: `openhue setup`
+
+Read
+- `openhue get light --json`
+- `openhue get room --json`
+- `openhue get scene --json`
+
+Write
+- Turn on: `openhue set light <id-or-name> --on`
+- Turn off: `openhue set light <id-or-name> --off`
+- Brightness: `openhue set light <id> --on --brightness 50`
+- Color: `openhue set light <id> --on --rgb #3399FF`
+- Scene: `openhue set scene <scene-id>`
+
+Notes
+- You may need to press the Hue Bridge button during setup.
+- Use `--room "Room Name"` when light names are ambiguous.

package/templates/workspaces/olivia/skills/openhue/_meta.json

@@ -0,0 +1,6 @@
+{
+  "ownerId": "kn70pywhg0fyz996kpa8xj89s57yhv26",
+  "slug": "openhue",
+  "version": "1.0.0",
+  "publishedAt": 1767545369355
+}

package/templates/workspaces/olivia/skills/orgx-operations-agent/SKILL.md

@@ -0,0 +1,41 @@
+---
+name: orgx-operations-agent
+description: OrgX operations execution contract for OpenClaw. Use for reliability, incident response, runbooks, cost controls, and rollout safety.
+version: 1.0.0
+user-invocable: true
+tags:
+  - operations
+  - orgx
+  - openclaw
+---
+
+# OrgX Operations Agent (OpenClaw)
+
+This skill defines how the OrgX Operations agent behaves when running inside OpenClaw.
+
+## Persona
+
+- Voice: cautious, thorough, pragmatic.
+- Autonomy: default to reversible actions; add guardrails before speed.
+- Consideration: assume production is fragile unless proven otherwise; reduce on-call burden.
+
+## Primary Contract
+
+- Prefer reversible actions and clear rollback paths.
+- Treat production changes as high risk unless explicitly approved.
+- Document runbooks so someone else can execute them safely.
+
+## Output Standards
+
+For ops deliverables:
+- what can go wrong
+- detection signals
+- mitigations/rollback
+- step-by-step runbook
+- verification checklist
+
+## Reporting Protocol (OrgX)
+
+- `orgx_emit_activity` for progress and status.
+- `orgx_request_decision` for blocking human decisions in default-safe mode.
+- `orgx_apply_changeset` for state changes when the operations scope exposes mutation tools.

package/templates/workspaces/olivia/skills/orgx-operations-agent/_meta.json

@@ -0,0 +1,6 @@
+{
+  "ownerId": "kn7drk1ch8egv0zrtbw3zn977x81a5x0",
+  "slug": "orgx-operations-agent",
+  "version": "1.0.0",
+  "publishedAt": 1774732067077
+}

package/templates/workspaces/olivia/skills/outreach/SKILL.md

@@ -0,0 +1,84 @@
+---
+name: Outreach
+description: Plan, personalize, and track outreach campaigns for sales, PR, recruiting, partnerships, and link building with timing strategy and follow-up cadence.
+---
+
+## Situation Detection
+
+| Context | Load |
+|---------|------|
+| Writing cold emails, follow-ups, subject lines | `templates.md` |
+| Sales outreach (SDR, BDR, AE) | `by-type.md` → Sales section |
+| PR/Media pitching, influencer outreach | `by-type.md` → PR section |
+| Link building, guest posts, SEO outreach | `by-type.md` → SEO section |
+| Recruiting, talent sourcing | `by-type.md` → Recruiting section |
+| Investor, partnership, BD outreach | `by-type.md` → BD section |
+| Tracking what works, analyzing patterns | `tracking.md` |
+
+---
+
+## Universal Rules
+
+**The Formula:** Who (right person, verified contact) + Why Now (trigger event) + WIIFT (what's in it for them)
+
+**Personalization:** Reference something SPECIFIC — not "loved your work" but "your piece on X changed how I think about Y." If you can't find a hook, you haven't researched enough.
+
+**Timing:**
+- Best: Tuesday-Thursday, 9-11am recipient's timezone
+- Avoid: Monday 9am, Friday afternoon, holidays, major news days
+- Check: Did they just post/publish something? Strike while relevant
+
+**Follow-up cadence:**
+
+| Touch | Timing | Purpose |
+|-------|--------|---------|
+| 1 | Day 0 | Value-first intro, specific ask |
+| 2 | Day 3-5 | New angle or additional value |
+| 3 | Day 7-10 | Different channel if possible |
+| 4 | Day 14+ | Break-up email |
+
+Stop after 3-4 touches. "Bumping this up" is spam.
+
+---
+
+## Quick Checks
+
+**Before sending:**
+- [ ] Verified email (not generic info@)
+- [ ] Personalization hook is SPECIFIC
+- [ ] Under 150 words for cold outreach
+- [ ] No attachments (link to resources)
+- [ ] Clear CTA (specific ask, not "let me know")
+- [ ] Subject line under 50 characters
+
+**Red flags to avoid:**
+- "I came across your profile..." (generic)
+- Pitching in first message (build curiosity first)
+- "Per my last email..." (guilt-trip)
+- Asking for "exposure" (have budget or don't ask)
+- Simultaneous competitor pitches with exclusive angles
+
+---
+
+## Outreach Profile
+
+*Build over time. Update after campaigns.*
+
+### What Works
+<!-- "Subject line: Question format +40% opens" "Tuesday 10am best time" -->
+
+### What Fails
+<!-- "Long emails ignored" "LinkedIn connect requests <10% accept" -->
+
+### Templates That Convert
+<!-- "Follow-up #2 formula: new value + specific ask" -->
+
+### Channel Preferences by Persona
+<!-- "Execs: email via EA" "Journalists: Twitter DM > email" -->
+
+### Contacts to Avoid
+<!-- "Reporter X: never responds" "VC Y: no cold outreach" -->
+
+---
+
+*Empty = nothing learned yet. Every campaign reveals patterns. Track and update.*

package/templates/workspaces/olivia/skills/outreach/_meta.json

@@ -0,0 +1,6 @@
+{
+  "ownerId": "kn73vp5rarc3b14rc7wjcw8f8580t5d1",
+  "slug": "outreach",
+  "version": "1.0.0",
+  "publishedAt": 1770927521182
+}