โ† Back to Skills Marketplace
wangxuan1992asia-svg

Xuanself

by wangxuan1992asia-svg ยท GitHub โ†— ยท v1.0.0 ยท MIT-0
cross-platform โš  suspicious
76
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install xuanself
Description
๐Ÿฉบ ๅŒป็–—ๅ™จๆขฐไฟ„็ฝ—ๆ–ฏๅธ‚ๅœบๆทฑๅบฆ่ฐƒ็ ”ๆ ‡ๅ‡†ๅทฅไฝœๆตใ€‚ไธ“ไธบไฟ„็ฝ—ๆ–ฏ Country Manager ๅฎšๅˆถ๏ผŒๆ•ดๅˆๅคš่ฏญ็งๅฎžๆ—ถๆœ็ดข๏ผˆSerpAPI๏ผ‰ใ€ๅŒปๅญฆ่ฟ›ๅฑ•่ฟฝ่ธชใ€ๆ‚ฃ่€…็พคไฝ“ๆ•ฐๆฎ๏ผˆIDF๏ผ‰ใ€ๆ”ฟๅบœๆœบๆž„ๅŠจๆ€็›‘ๆŽง๏ผŒ่พ“ๅ‡บ็ซ ่Š‚ๅฎŒๆ•ดใ€ๆŽ’็‰ˆไธ“ไธšใ€ๅฏ็›ดๆŽฅไบคไป˜็š„ Word ๆŠฅๅ‘Šใ€‚
Usage Guidance
What to check before installing: - Confirm the SerpAPI (and optional TGStat) API key requirement: SKILL.md and PORTING_NOTES require a SerpAPI key even though the registry metadata didn't list any required credentials. Ask the publisher to declare required credentials in the manifest. - Do not paste API keys into a repo file in a shared location. The provided template stores keys in data/data_sources.json; consider keeping keys in environment variables or a secure store and updating the code to read them from env vars instead. - The skill runs local Python code (word_exporter.py, run_report.py). Review/read these scripts and run them in a controlled environment (sandbox or VM) if you plan to execute them locally. - If you already have a sibling skill named report-gama in the parent directory, the run script may import and execute code from that directory. Audit that code too, or run without report-gama installed to ensure only the bundled word_exporter is used. - Because this skill scrapes government and health data, confirm legal/compliance obligations for collecting and storing health-related information in your jurisdiction and your company's policies. - If you need higher assurance, ask the publisher to: (1) update manifest to declare required credentials, (2) change key handling to use environment variables or a secure secret store, and (3) provide a minimal reproducible install/run example and a checksum for the included scripts.
Capability Analysis
Type: OpenClaw Skill Name: xuanself Version: 1.0.0 The xuanself skill bundle is a specialized workflow for conducting medical device market research in Russia. It utilizes SerpAPI for multi-language data gathering and the python-docx library to generate structured Word reports. Analysis of the Python scripts (word_exporter.py, run_report.py) and the agent instructions (SKILL.md) reveals no evidence of malicious intent, data exfiltration, or unauthorized system access. The code is transparently designed to fulfill its stated purpose of market analysis and professional document generation.
Capability Assessment
โ„น Purpose & Capability
The stated purpose (Russian medical-device market research, multilingual web search, IDF data, government/tender monitoring, Word output) matches the included code and instructions: SKILL.md, PORTING_NOTES, data_sources.json and scripts implement web search and Word export. However the registry metadata lists no required env vars/credentials while the documentation and data template clearly require a SerpAPI key (and optionally TGStat). That omission is an incoherence between manifest and actual requirements.
โœ“ Instruction Scope
Runtime instructions focus on web search (SerpAPI/Yandex/Google), scraping/collection of public sources (IDF, minzdrav, kremlin, zakupki, ecommerce sites) and producing a Word report. The scope stays within market-research tasks; I see no instructions that ask the agent to read unrelated local files or exfiltrate unknown secrets. The tool list (WebFetch, WebSearch, ExecuteCommand, Read/Write) is broad but consistent with a skill that fetches pages and runs local Python to generate DOCX.
โœ“ Install Mechanism
No install spec is provided (instruction-only for the agent) and included Python scripts use common pip packages (python-docx, requests, bs4, etc.). No downloads from arbitrary URLs or archive extraction are present. The risk surface is typical for a code snippet that runs locally.
โš  Credentials
The skill requires API keys (SerpAPI mandatory, TGStat optional) according to SKILL.md and PORTING_NOTES and data_sources.json; yet the registry metadata lists no required environment variables or primary credential. The skill also instructs users to edit data/data_sources.json to store keys (a file in the skill directory) rather than documenting a secure environment-variable approach. This mismatch and the practice of storing secrets in a repository file are disproportionate and risky โ€” the manifest should declare the required credentials and the skill should document secure handling (env vars or secure vault).
โœ“ Persistence & Privilege
always:false (default) and model invocation not disabled โ€” normal for a user-invocable skill. The skill does not request special persistent privileges or modify other skills. One operational note: run_report.py attempts to import modules from a sibling 'report-gama' directory if present, meaning it can execute code from another skill directory at runtime; this is an intended integration but increases the surface to review that other skill if present.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install xuanself
  3. After installation, invoke the skill by name or use /xuanself
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Xuanself 1.0.0 โ€” ้ฆ–ไธชๅฎ˜ๆ–นๅ‘ๅธƒ็‰ˆ - ๆ˜Ž็กฎไธ‰ๅคงๅฟ…ๅกซ็ซ ่Š‚ๅŠๅผบๅˆถๆ•ฐๆฎ่ดจ้‡ๆ ‡ๅ‡†๏ผŒไฟ้šœๆŠฅๅ‘Šไธ“ไธšๆ€งไธŽๅˆ่ง„ๆ€ง - ๆ”ฏๆŒไธ“ไธšWordๆŠฅๅ‘Šๅฏผๅ‡บ๏ผŒๅ†…็ฝฎๆœ€ๆ–ฐ็‰ˆๆŽ’็‰ˆ่ง„่Œƒ - ้™„ๅธฆ่ฏฆ็ป†ๆ–‡ไปถ็ป“ๆž„่ฏดๆ˜ŽไธŽไพ่ต–็Žฏๅขƒๅˆ—่กจ๏ผŒๆ”ฏๆŒไผไธš็บง่ฝๅœฐ
Metadata
Slug xuanself
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Xuanself?

๐Ÿฉบ ๅŒป็–—ๅ™จๆขฐไฟ„็ฝ—ๆ–ฏๅธ‚ๅœบๆทฑๅบฆ่ฐƒ็ ”ๆ ‡ๅ‡†ๅทฅไฝœๆตใ€‚ไธ“ไธบไฟ„็ฝ—ๆ–ฏ Country Manager ๅฎšๅˆถ๏ผŒๆ•ดๅˆๅคš่ฏญ็งๅฎžๆ—ถๆœ็ดข๏ผˆSerpAPI๏ผ‰ใ€ๅŒปๅญฆ่ฟ›ๅฑ•่ฟฝ่ธชใ€ๆ‚ฃ่€…็พคไฝ“ๆ•ฐๆฎ๏ผˆIDF๏ผ‰ใ€ๆ”ฟๅบœๆœบๆž„ๅŠจๆ€็›‘ๆŽง๏ผŒ่พ“ๅ‡บ็ซ ่Š‚ๅฎŒๆ•ดใ€ๆŽ’็‰ˆไธ“ไธšใ€ๅฏ็›ดๆŽฅไบคไป˜็š„ Word ๆŠฅๅ‘Šใ€‚ It is an AI Agent Skill for Claude Code / OpenClaw, with 76 downloads so far.

How do I install Xuanself?

Run "/install xuanself" in the OpenClaw or Claude Code chat to install it in one step โ€” no extra setup required.

Is Xuanself free?

Yes, Xuanself is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Xuanself support?

Xuanself is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Xuanself?

It is built and maintained by wangxuan1992asia-svg (@wangxuan1992asia-svg); the current version is v1.0.0.

๐Ÿ’ฌ Comments