Privacy Skills for OpenClaw Agents

Multi Search Engine

@gpyangyoujun

Multi search engine integration with 16 engines (7 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra...

元忆 yotta-memory

@yottameta

智能体记忆库（元忆）—— AI记忆系统：面向 AI 智能体的长期记忆、永久记忆与记忆引擎，跨会话上下文随时恢复，开工回忆、重要信息落盘、收工归档；语义检索 + 权限边界，零依赖，可 diff/回滚。

Brave Search

@byungkyu

Brave Search API integration with managed authentication. Search the web, images, news, and videos with privacy-focused search. Use this skill when users want to search the web, find images, get news, or search videos using Brave Search. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Brave Search connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Brave Search action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Brave Search examples; they add no Brave Search capability - Brave Search is not an event source, a trigger cannot read Brave Search data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

Employee Emotion Fluctuation HR Report | 员工入职/离职情绪波动预警（HR方向）

@smyx-sunjinhui

Using fixed cameras in enterprise office areas (with employee consent and anonymization), the system performs long-term monitoring of employees' facial expressions and posture features, building per-person historical baselines (smile frequency, sigh count, frown level, etc.). | 通过企业办公区固定摄像头（需征得员工同意并匿名化处理），长期监测员工的面部表情和姿态特征，建立个人历史基线（如笑容频率、叹气次数、皱眉程度等）。当检测到某员工近期的笑容频率显著下降（例如比基线降低40%）、叹气次数增加（例如比基线增加50%）或与其他异常行为（社交回避、长时间独自静坐）时，输出情绪波动预警，提醒HR或管理者进行关怀沟通。

dropbox-business

@byungkyu

Dropbox Business API integration with managed OAuth. Full admin access to team members, groups, team folders, devices, audit logs, member file access, sharing, and file requests for Dropbox Business teams. This is an admin-level integration that can read, create, update, and delete team resources, access individual members' files and shared folders via Dropbox-API-Select-User, and permanently remove members or folders. All write and delete operations require explicit user approval with specific resource identifiers. Member file access is privacy-sensitive — only use when the user explicitly requests it with a stated business justification. Use this skill when users want to administer Dropbox Business teams. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key. Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn a Dropbox Business connection into automation, in the order they are used: the connection (the first step), a hosted function that runs a Dropbox Business action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Dropbox Business examples; they add no Dropbox Business capability - Dropbox Business is not an event source, a trigger cannot read Dropbox Business data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).

regenerative-intelligence

@otherpowers

Use when designing, reviewing, or operating memory, recall, and pattern-stewardship systems for agentic AI where harm reduction, non-identifiability, consent-scoped recall, and energy restraint are required. A specification of invariants an implementing system must honor, not a runtime: this file bu

Searxng

@abk234

Privacy-respecting metasearch using your local SearXNG instance. Search the web, images, news, and more without external API dependencies.

Openclaw Flowsery

@tarasshyn

Query web analytics data from Flowsery Analytics — a privacy-first web analytics platform. Retrieve real-time visitors, time series, breakdowns (device, page...

Memory Management

@aaron-he-zhu

Use when the user asks to "remember project context", review saved findings, initialize runtime memory, archive stale work, reconcile notes, or erase a subje...

scent-trails

@otherpowers

A stigmergic coordination primitive: intelligences and people leave faint, decaying, identity-free gradients in shared cells so care can be coordinated without logs, ledgers, or watching others. Gradients can only add care, never subtract. Opaque by default; being seen is a door opened from inside.

astrai-inference-router

@beee003

Route all LLM calls through Astrai for 40%+ cost savings with intelligent routing and privacy controls

private-web-search-searchxng

@adelpro

Self-hosted private web search using SearXNG. Use when privacy is important, external search APIs are blocked or paid, or you need search without tracking.

End-to-end encrypted .md documents for agents & humans to collaborate. This is a multiplayer alternative to gog and Google Docs that lets people (via CLI) and agents create, search and sync encrypted markdown docs. This service leverages https://ddocs.new which can be enabled locally or via your preferred cloud set-up to make docs accessible across any device or chatbot interface in complete privacy.

@vijaykrishnavanshi

End-to-end encrypted .md documents for agents & humans to collaborate. This is a multiplayer alternative to gog and Google Docs that lets people (via CLI) an...

Review Responder

@chris

Use this skill when an operator is actively running the Google Business Profile review-response workflow for one of their configured client accounts. Specific triggers: 'check for new reviews,' 'run the review check for [client],' 'new review came in for [client],' 'draft a reply to the [reviewer] r

Has Anonymizer

@xuanwuskill

HaS (Hide and Seek) on-device text and image anonymization. Text: 8 languages (zh/en/fr/de/es/pt/ja/ko), open-set entity types. Image: 21 privacy categories...

Period Tracker

@ivangdavila

Tracks menstrual cycles, logs symptoms, and predicts periods, ovulation, and fertile windows from her own logged data. Use when a period starts, is late, or is missed, when logging cramps, PMS, PMDD, mood, spotting, or flow, when asking whether a cycle is irregular, heavy, or too long, when tracking basal temperature, LH tests, or cervical mucus to conceive or avoid pregnancy, when bleeding changes on the pill, IUD, or implant, or when cycles shift in perimenopause, postpartum, or after stopping contraception. Not for prenatal tracking once pregnancy is confirmed.

Clairvoyance

@srmhrrm-hub

User-invoked private pattern reading across authorized memories and dream notes.

DCL Sentinel Trace — PII Redactor & Identity Exposure Detector

@daririnch

Detect and redact personally identifiable information in AI outputs before they reach users or downstream systems — emails, phones, national IDs, bank cards, IBANs, crypto addresses, IPs, passports. Runs as a free instruction-only checklist, or as a real, paid regex scan...

Multi Search Engine 2.0.1

@solomon4github

Multi search engine integration with 17 engines (8 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra...

Sleep Routine Coach

@raindongdry

Short setup for flexible, gentle sleep reminders

Mistral OCR

@yzdame

Extract text, tables, and images from PDFs or images using Mistral OCR API and output in Markdown, JSON, or HTML formats.

EdgeOne ClawScan

@aigsec

The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab. Works like an antivirus for your AI environment: audits instal...

Hipaa Gap Analysis

@dangsllc

Assess compliance documents against HIPAA Security Rule and Privacy Rule requirements. Produces structured findings with evidence, gap descriptions, and reme...

Who Is Actor

@wscats

This skill should be used ONLY when the user EXPLICITLY and UNAMBIGUOUSLY requests a Git repository commit-history analysis that produces aggregate collabora...

WiseOCR

@wisediag

PDF & Image OCR — Convert a single PDF or image to Markdown via WiseDiag cloud API, with high-accuracy text extraction, table recognition, and multi-column l...

Ai Claims Assessment

@dangsllc

Assesses public healthcare-AI vendor documents to identify gaps between AI use claims, legal language, and HIPAA rules on PHI handling and model training.

Publish Safe PRs

@jumpunder

Sanitize and verify public GitHub contributions

Privacy Check

@cqdev-ai

隐私敏感信息扫描器 (Privacy Check) v1.0.1。 检测15+种敏感个人信息：身份证号、手机号、邮箱、银行卡、信用卡、 SSN、护照、驾驶证、微信号、支付宝号、API密钥等。 支持 JSON/CSV/HTML 报告输出、白名单忽略、文件类型过滤。 Use when: 需要在数据文件中发现敏感信息、 数据发布前做隐私审查、合规检查准备、数据脱敏预处理。 🎉 v1.0.1 安全增强更新： - 6 种新增PII模式（信用卡、SSN、港澳台护照、驾驶证、微信号、支付宝） - CSV / HTML 报告格式 - 白名单忽略模式 - 文件扩展名过滤 - 🔒 上下文行自动脱敏，避免敏

Location Awareness

@hegghammer

Location awareness via privacy-friendly GPS tracking (Home Assistant, OwnTracks, GPS Logger). Set location-based reminders and ask about movement history, travel time, and nearby POIs.

LinkHut

@hith3sh

LinkHut bookmark management API integration with managed OAuth. Save, organize, search, and manage bookmarks with tags, notes, and privacy settings. Use this...

Monero

@ivangdavila

Assist with Monero XMR transactions, privacy features, wallet management, and security practices.

AI Safety Guard

@andreqingyuwu

Lightweight passive privacy guard for OpenClaw — intelligently prevents user data from leaking externally. TRIGGER: before the AI sends or outputs any data t...

Local TTS

@irachex

Local text-to-speech using Qwen3-TTS with mlx_audio (macOS Apple Silicon) or qwen-tts (Linux/Windows). Privacy-first offline TTS with natural, realistic voic...

Analytics

@ivangdavila

Deploy privacy-first analytics with correct API patterns, rate limits, and GDPR compliance.

portveil

@roybogs

Control a Portveil VPN (WireGuard, US and Finland exits) from your agent: see which devices and agent machines are protected, move a machine to another country, rotate its location on a schedule, reconnect it, or add a new device. Free plan, no card.

wechat-local-reader

@gp198922

微信本地管家：在桌面电脑（Windows/macOS/Linux）本地读取你本人本机登录的微信加密数据库，自动脱敏（手机号/身份证/银行卡/邮箱）并生成每日工作简报，推送至邮箱/企业微信机器人/任意 HTTP 端口。全程零上传，隐私不出本机。当用户想"让 AI 自动梳理微信里的消息和工作群""每天总结微信内容并推送""把微信聊天记录接入自动化并脱敏"时使用。注意：仅限本人本机微信数据；不支持手机/平板/鸿蒙等移动端。

~Alter Know Yourself

@true-alter

A record of you exists and you have never read it. Read what ~alter has inferred, where each piece came from, and which rule produced it. Say who may make claims about your competence, and contest anything you disagree with. Nothing is deleted and nothing is quietly rewritten.

~Alter My Standing

@true-alter

A call failed and you cannot tell whether it was your key, your tier or their privacy budget. Ask instead of guessing. Read your handle, whether your key is still valid and what scopes it carries, what raises your tier next, and how much of someone's privacy allocation is left.

klik-session-redaction-check

@chengyixu

Turn a short, redacted Session summary into a collaboration-safe Context excerpt. Use before sharing an agent or meeting handoff when the original Session may contain private details that do not belong in the next task.