菜单
Scan repos and workspaces for leaked secrets. API keys in code, passwords in configs, tokens in logs. Catches them before they hit git.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
东方财富妙想金融技能套件（mx-skills-suite），包含 5 个专业金融子技能： 1. eastmoney_fin_data - 金融数据查询（行情、财务、关联关系） 2. eastmoney_fin_search - 金融资讯搜索（新闻、公告、研报、政策） 3. mx_select_stock - 智能选股（条件筛选、板块查询、股票推荐） 4. mx_self_select - 自选股管理（查询、添加、删除自选股） 5. eastmoney_stock_simulator - 模拟组合管理（持仓、买卖、撤单、委托、资金） 触发词：东方财富、妙想、金融数据、行情查询、股票资讯、选股、自选股、模拟交易、模拟炒股、持仓查询、东方财富数据、东方财富API。
使用有头浏览器(headed browser)打开网页，通过CDP协议进行元素点击和自动化操作。V3优化版：简化架构，保留核心功能（协议拦截、元素操作、截图），适用于复杂网页场景，特别是需要处理App唤起提示或特殊渲染的页面。
LLM Memory Integration - 公开框架包。通过环境变量链接本地私有配置，实现公私分离。
Manage tasks, communications, and scheduling with proactive and organized support.
给网页应用接入云数据库的额外能力。端到端流程：云数据库服务后端应用创建 → 数据库设计 → 前端对接。当用户明确提到需要支持多用户共用数据库实例或者需要部署网站（且不需要端侧能力）时，你可以利用本 skill，如果网页应用需要支持端侧能力（比如相机、端侧数据库等），那就一定不能使用本 skill。如果用户既要多用户共用数据库实例、网站部署，又要支持端侧能力，本 skill 不支持，并告知用户无法支持该请求
Generate and edit professional PPT presentations. Generation uses a 3-stage workflow: gather information & confirm writing approach, generate structured outline, generate PPT via cloud service & deliver. Editing operates directly on existing PPTX files via XML-level manipulation (unpack, modify, repack). TRIGGER when user asks to: generate PPT, create slides, make presentation, edit/modify PPT, adjust slide content/layout, delete/add/reorder slides, use PPT as template, 生成PPT, 做PPT, 制作幻灯片, 做演示文稿, 编辑/修改PPT, 基于模板修改. Supports both document-based and web-search-based content sourcing for generation.
| name | EnvGuard Secret & Credential Scanner |
| description | Scan repos and workspaces for leaked secrets. API keys in code, passwords in configs, tokens in logs. Catches them before they hit git. |
| author | @TheShadowRose |
| version | 1.0.2 |
| tags | ["env-guard"] |
| license | MIT |
Scan repos and workspaces for leaked secrets. API keys in code, passwords in configs, tokens in logs. Catches them before they hit git.
Find leaked secrets before they reach production.
node src/env-guard.js scan ./my-project
| Secret Type | Pattern |
|---|---|
| API Keys | sk-..., AKIA..., ghp_... |
| Passwords | password=, passwd: |
| Tokens | token=, bearer ... |
| Private Keys | -----BEGIN RSA PRIVATE KEY----- |
| Connection Strings | mongodb://, postgres:// |
| Webhook URLs | Discord webhooks, Slack webhooks |
🔴 SECRETS FOUND — 3 issues
src/config.js:12
API key detected: sk-proj-...Tm4x (OpenAI)
.env.backup:3
Database password in committed file
logs/debug.log:445
Bearer token logged in plaintext
This software is provided "AS IS", without warranty of any kind, express or implied.
USE AT YOUR OWN RISK.
By downloading, installing, or using this software, you acknowledge that you have read this disclaimer and agree to use the software entirely at your own risk.
DATA DISCLAIMER: This software processes and stores data locally on your system. The author(s) are not responsible for data loss, corruption, or unauthorized access resulting from software bugs, system failures, or user error. Always maintain independent backups of important data. This software does not transmit data externally unless explicitly configured by the user.
| 🐛 Bug Reports | TheShadowyRose@proton.me |
| ☕ Ko-fi | ko-fi.com/theshadowrose |
| 🛒 Gumroad | shadowyrose.gumroad.com |
| @TheShadowyRose | |
| 🐙 GitHub | github.com/TheShadowRose |
| 🧠 PromptBase | promptbase.com/profile/shadowrose |
Built with OpenClaw — thank you for making this possible.
🛠️ Need something custom? Custom OpenClaw agents & skills starting at $500. If you can describe it, I can build it. → Hire me on Fiverr