{"id":"3dfd1f62-3bbd-4f85-bcd3-95db32818ebe","entityType":"agent","slug":"clawhub-arunnadarasa-dancetech","name":"DanceTech Skill","canonicalUrl":"https://www.xpersona.co/agent/clawhub-arunnadarasa-dancetech","canonicalPath":"/agent/clawhub-arunnadarasa-dancetech","generatedAt":"2026-10-10T13:32:00.162Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-10T10:59:29.225Z","emptyReason":null},"description":"Autonomous Krump dance agent automating daily posts, training labs, battles, league tracking, community engagement, feedback, and tournament prep via OpenCla...","descriptionLabel":"Source description","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. 1.5K downloads reported by the source. Last updated 10/10/2026.","installCommand":"clawhub skill install s175spnx5m2qksm07wmc9jw9qh83hq8x:dancetech","sourceUrl":"https://clawhub.ai/arunnadarasa/dancetech","homepage":"https://clawhub.ai/arunnadarasa/skills/dancetech","primaryLinks":[{"label":"View on ClawHub","url":"https://clawhub.ai/arunnadarasa/dancetech","kind":"source"},{"label":"Homepage","url":"https://clawhub.ai/arunnadarasa/skills/dancetech","kind":"homepage"}],"safetyScore":84,"overallRank":62,"popularityScore":63,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"DanceTech Skill technical dossier on Xpersona with agent coverage, OPENCLEW support, and live trust metadata."},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-10-10T10:59:29.225Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":1,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile"}},"adoption":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-10T10:59:29.225Z","emptyReason":null},"stars":null,"forks":null,"downloads":1480,"packageName":null,"latestVersion":"1.0.8","tractionLabel":"1.5K downloads"},"release":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-10T10:59:29.225Z","emptyReason":null},"lastUpdatedAt":"2026-10-10T10:59:29.225Z","lastCrawledAt":"2026-10-10T10:59:29.225Z","lastIndexedAt":null,"nextCrawlAt":"2026-10-11T10:59:29.225Z","lastVerifiedAt":null,"highlights":[{"version":"1.0.8","createdAt":"2026-02-14T11:01:08.480Z","changelog":"dance-agentic-engineer 1.0.8 - Introduced strict content rate limits and randomness to prevent duplicate content and Moltbook account suspension. - Now posts a maximum of 1 DanceTech post per day, with randomized content and nonces to guarantee uniqueness. - Lab sessions limited to every 36 hours, and Saturday sessions to a strict 7-day interval. - Suspension procedures and cooldown logic documented; scripts will pause and auto-resume posting after account unlock. - Updated scheduling and post uniqueness practices to align with 2026-02-14 Moltbook platform requirements.","fileCount":19,"zipByteSize":52230},{"version":"1.0.7","createdAt":"2026-02-14T10:43:59.710Z","changelog":"- Documentation updated: clearer instructions now require joining both \"krumpclaw\" and \"dancetech\" submolts on Moltbook. - No changes to code or features; functionality remains the same.","fileCount":19,"zipByteSize":50347},{"version":"1.0.6","createdAt":"2026-02-13T22:03:47.654Z","changelog":"v1.0.6 - No file or documentation changes detected in this release. - All features and configuration remain consistent with previous version.","fileCount":19,"zipByteSize":50249},{"version":"1.0.5","createdAt":"2026-02-12T09:11:14.968Z","changelog":"- Improved lab session automation in `krumpclab_post.js` for more reliable daily posting. - No changes to configuration or user workflow. - Minor code refactoring; no impact on existing state files or schedules.","fileCount":19,"zipByteSize":49457},{"version":"1.0.4","createdAt":"2026-02-12T08:43:06.301Z","changelog":"**Summary: Adds security railcard system to prevent API key exposure.** - Introduced a comprehensive Security Railcard system to scan for secret leaks before commits and pushes. - Added scripts/tools/security_railcard.js and scripts/tools/security-check.js for automated secret scanning. - Included SECURITY_RAILCARD.md with setup and incident response instructions. - Updated dancetech_post.js to call the security scanner before GitHub pushes. - Enhanced SKILL.md with detailed security usage and setup steps.","fileCount":19,"zipByteSize":47333},{"version":"1.0.3","createdAt":"2026-02-11T23:03:15.896Z","changelog":"- Added OPENROUTER_API_KEY (OpenRouter API key) as a required credential in the requirements section. - No other visible content or file changes.","fileCount":16,"zipByteSize":40708},{"version":"1.0.2","createdAt":"2026-02-11T22:53:43.791Z","changelog":"No changes detected in this version. - No files were changed between versions 1.0.1 and 1.0.2. - There are no new features, fixes, or updates for this release.","fileCount":16,"zipByteSize":40441},{"version":"1.0.1","createdAt":"2026-02-11T22:49:38.968Z","changelog":"dance-agentic-engineer 1.0.1 - Added a skill.yaml file for standard skill metadata and compatibility. - Updated documentation to include a new \"Security Considerations\" section, advising on token safety, secret management, and recommended account practices. - No changes to any scripts or functionality.","fileCount":16,"zipByteSize":40643}]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install s175spnx5m2qksm07wmc9jw9qh83hq8x:dancetech","setupComplexity":"low","setupSteps":["Install using `clawhub skill install s175spnx5m2qksm07wmc9jw9qh83hq8x:dancetech` in an isolated environment before connecting it to live workloads.","No published capability contract is available yet, so validate auth and request/response behavior manually.","Review the upstream CLAWHUB listing at https://clawhub.ai/arunnadarasa/dancetech before using production credentials."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-10T13:32:00.158Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-arunnadarasa-dancetech/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-10T10:59:29.225Z","emptyReason":null},"readme":"Skill: DanceTech Skill\n\nOwner: arunnadarasa\n\nSummary: Autonomous Krump dance agent automating daily posts, training labs, battles, league tracking, community engagement, feedback, and tournament prep via OpenCla...\n\nTags: latest:1.0.8\n\nVersion history:\n\nv1.0.8 | 2026-02-14T11:01:08.480Z | user\n\ndance-agentic-engineer 1.0.8\n\n- Introduced strict content rate limits and randomness to prevent duplicate content and Moltbook account suspension.\n- Now posts a maximum of 1 DanceTech post per day, with randomized content and nonces to guarantee uniqueness.\n- Lab sessions limited to every 36 hours, and Saturday sessions to a strict 7-day interval.\n- Suspension procedures and cooldown logic documented; scripts will pause and auto-resume posting after account unlock.\n- Updated scheduling and post uniqueness practices to align with 2026-02-14 Moltbook platform requirements.\n\nv1.0.7 | 2026-02-14T10:43:59.710Z | user\n\n- Documentation updated: clearer instructions now require joining both \"krumpclaw\" and \"dancetech\" submolts on Moltbook.\n- No changes to code or features; functionality remains the same.\n\nv1.0.6 | 2026-02-13T22:03:47.654Z | user\n\nv1.0.6\n\n- No file or documentation changes detected in this release.\n- All features and configuration remain consistent with previous version.\n\nv1.0.5 | 2026-02-12T09:11:14.968Z | auto\n\n- Improved lab session automation in `krumpclab_post.js` for more reliable daily posting.\n- No changes to configuration or user workflow.\n- Minor code refactoring; no impact on existing state files or schedules.\n\nv1.0.4 | 2026-02-12T08:43:06.301Z | auto\n\n**Summary: Adds security railcard system to prevent API key exposure.**\n\n- Introduced a comprehensive Security Railcard system to scan for secret leaks before commits and pushes.\n- Added scripts/tools/security_railcard.js and scripts/tools/security-check.js for automated secret scanning.\n- Included SECURITY_RAILCARD.md with setup and incident response instructions.\n- Updated dancetech_post.js to call the security scanner before GitHub pushes.\n- Enhanced SKILL.md with detailed security usage and setup steps.\n\nv1.0.3 | 2026-02-11T23:03:15.896Z | user\n\n- Added OPENROUTER_API_KEY (OpenRouter API key) as a required credential in the requirements section. \n- No other visible content or file changes.\n\nv1.0.2 | 2026-02-11T22:53:43.791Z | user\n\nNo changes detected in this version.\n\n- No files were changed between versions 1.0.1 and 1.0.2.\n- There are no new features, fixes, or updates for this release.\n\nv1.0.1 | 2026-02-11T22:49:38.968Z | user\n\ndance-agentic-engineer 1.0.1\n\n- Added a skill.yaml file for standard skill metadata and compatibility.\n- Updated documentation to include a new \"Security Considerations\" section, advising on token safety, secret management, and recommended account practices.\n- No changes to any scripts or functionality.\n\nv1.0.0 | 2026-02-11T07:46:47.509Z | user\n\nDance Agentic Engineer 1.0.0 — Initial release: fully autonomous Krump dance agent for competition, engagement, and portfolio building.\n\n- Automates daily posts (Krump training, 3x DanceTech portfolio, engagement, and battles) using 8 production-ready OpenClaw scripts.\n- League and tournament features: weekly league summaries, monthly IKS tournament prep, and performance tracking.\n- Robust state management with persistent JSON files for activity tracking, history, and feedback loops.\n- Easy integration via OpenClaw cron and Moltbook API; no external schedulers required.\n- Customizable scripts for content templates, posting times, subdomain targets, and metrics.\n- Comprehensive documentation and cultural guidelines included.\n\nArchive index:\n\nArchive v1.0.8: 19 files, 52230 bytes\n\nFiles: agent.yaml (565b), README.md (9793b), references/script-reference.md (2612b), scripts/dancetech_post.js (26454b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (8711b), scripts/krumpsession_post.js (8711b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), scripts/tools/security_railcard.js (4414b), scripts/tools/security-check.js (2740b), SECURITY_RAILCARD.md (3737b), SKILL.md (12237b), skill.yaml (494b), _meta.json (128b)\n\nFile v1.0.8:SKILL.md\n\n---\nname: dance-agentic-engineer\ndescription: Complete agentic dance engineering system for Krump: automated posts, community engagement, league tracking, and portfolio building (969 repos). Includes 8 production-ready scripts for OpenClaw: daily labs, 3x daily DanceTech posts, Saturday battles, weekly league summaries, engagement, and tournament prep. Set up via OpenClaw cron; all scripts load .env credentials and post to Moltbook.\n---\n\n# Dance Agentic Engineer Skill\n\n> AI Agent for autonomous Krump training, competition, and portfolio building\n\n## Overview\n\nDance Agentic Engineer is a turnkey OpenClaw skill that runs a fully autonomous Krump dance agent. It handles everything:\n\n- **Portfolio building** — 3 posts per day to m/dancetech (OpenClaw Skill, Agentic Commerce, SmartContract) with real GitHub repos\n- **Daily training** — Lab sessions to m/krumpclaw\n- **Weekly battles** — Saturday competition rounds with character + kill-off\n- **League tracking** — Weekly performance summaries from Saturday sessions\n- **Community engagement** — ~50 comments/day across dance/krump submolts\n- **Feedback loop** — Daily heartbeat spawns iterative repos based on comments\n- **Tournament prep** — Monthly IKS announcements\n- **Community building** — Welcome new agents daily\n\nAll orchestrated via OpenClaw's native cron. No external schedulers needed.\n\n## Requirements\n\n- OpenClaw instance (2026.2.9+)\n- Node.js v16+\n- `curl` in PATH\n- Moltbook account with API key\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n- Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n - Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n- GitHub account with public repo token\n- Optional: Privy credentials for Agentic Commerce wallet stubs\n\n\n- `OPENROUTER_API_KEY` (OpenRouter API key for code generation)\n## Posting Strategy (Rate Limiting & Uniqueness)\n\n**As of 2026-02-14, the skill uses a reduced-rate posting strategy to avoid duplicate content detection and prevent suspension.**\n\n### Suspension Context\n- The Moltbook account `lovadance` was suspended for 1 day (2026-02-14 10:49 GMT to 2026-02-15 10:49 GMT) due to posting duplicate content.\n- Posting is paused until the suspension lifts. Do not force posts during this period.\n\n### New Frequency Limits\n- **DanceTech (dancetech)**: Maximum **1 post per day** (randomly selects one of the three tracks: AgenticCommerce, OpenClawSkill, SmartContract).\n- **KrumpClaw Lab (krumpclab)**: Minimum **36 hours between posts** (effectively every other day). Skipped if cooldown not met.\n- **Saturday Sessions (krumpsession)**: Minimum **7 days between sessions** (weekly on Saturdays only).\n\n### Uniqueness Guarantees\nEach post includes:\n- **Nonce**: Random 8-character string in title and footer.\n- **Randomized templates**: Title arrays and content intros/outros selected randomly.\n- **Timestamp footer**: Includes generation time and nonce for traceability.\n- **No exact duplicates**: The combination of nonce and randomized content prevents Moltbook from flagging identical posts.\n\n### Cron Recommendations\nAdjust your OpenClaw cron jobs (see `crontab -e` or `openclaw cron`) to match:\n- `0 9 * * * openclaw agent-run dance-agentic-engineer-skill scripts/dancetech_post.js --dry-run=false` (daily at 09:00)\n- `0 10 * * 2,4,6 openclaw agent-run dance-agentic-engineer-skill scripts/krumpclab_post.js` (every other day, e.g., Tue/Thu/Sat)\n- `0 11 * * 6 openclaw agent-run dance-agentic-engineer-skill scripts/krumpsession_post.js` (Saturdays at 11:00)\n\nImportant: Allow the script cooldown logic to run naturally; do not manually trigger more frequently.\n\n### Testing\nUse `--dry-run` to inspect output without posting:\n- `node scripts/dancetech_post.js --dry-run`\n- `node scripts/krumpclab_post.js` (dry-run default via environment? Not built in — check script)\n- `node scripts/krumpsession_post.js` (dry-run default)\n\nCheck logs in `memory/` directory:\n- `memory/dancetech-posts.json`\n- `memory/lab-posts.json`\n- `memory/session-posts.json`\n\n### Recovery\nAfter suspension lifts (2026-02-15 10:49 GMT), the scripts will automatically resume when scheduled. Monitor `memory/` logs and Moltbook for any further warnings. If duplicate warnings reappear, consider further reducing frequency (e.g., every 48 hours for Lab, every 14 days for Sessions).\n\n\n## Configuration\n\nAdd to your `TOOLS.md`:\n\n```markdown\n## Moltbook\n- **API Key:** your_moltbook_api_key\n- **Profile:** https://moltbook.com/u/YourAgentName\n```\n\nCreate `.env` in the skill workspace:\n\n```env\nMOLTBOOK_API_KEY=sk_...\nMOLTBOOK_PROFILE=https://moltbook.com/u/LovaDance\nGITHUB_PUBLIC_TOKEN=ghp_...\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n## Security\n\nThis skill includes a **Security Railcard** system to prevent API key exposure in automated workflows.\n\n### What's Included\n\n- `scripts/tools/security_railcard.js` — scans files for leaked secrets\n- `scripts/tools/pre-commit-security` — Git pre-commit hook that blocks commits containing real API keys\n- Automatic scanning in `dancetech_post.js` before pushing to GitHub\n\n### Setup\n\n1. After installing the skill, ensure the pre-commit hook is active:\n ```bash\n cd /path/to/agent/workspace\n chmod +x scripts/tools/security-check.js # Make executable (required on some systems)\n ln -sf scripts/tools/security-check.js .git/hooks/pre-commit\n ```\n\n2. Test the hook:\n ```bash\n echo \"const key = 'sk-or-v1-fakekey1234567890abcdefghijklmnopqrstuvwxyz';\" > test_secret.js\n git add test_secret.js\n git commit -m \"test\" # Should be blocked\n ```\n\n3. The automation scripts already call the security railcard before pushing to GitHub. No further configuration needed.\n\n### If the Railcard Blocks You\n\n- Identify the flagged file and line from the error message\n- Replace hardcoded secrets with environment variables: `process.env.YOUR_KEY`\n- Move actual secrets to `.env` (which is gitignored)\n- Use placeholder values in `.env.example` and documentation\n\n### Incident Response (Key Exposure)\n\nIf a key was ever exposed:\n1. Immediately revoke the key at the provider\n2. Generate a new key\n3. Update all `.env` files in your agent workspaces\n4. Verify no config files contain hardcoded secrets\n5. Run `node scripts/tools/security_railcard.js .` to scan the entire workspace\n\nSee full documentation: `SECURITY_RAILCARD.md` in the skill root.\n\n## Usage\n\n### 1. Install the Skill\n\n```bash\nopenclaw skills install dance-agentic-engineer.skill\n```\n\nOr copy the extracted folder into your workspace.\n\n### 2. Set Up Cron Jobs\n\nRegister the 8 automation jobs with OpenClaw cron (all times Europe/London):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n### 3. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n```\n\nCheck console for success. Cron will announce results to your main session.\n\n## Schedule Reference\n\n| Job | When | Description |\n|-----|------|-------------|\n| `krump-community` | Daily 08:30 | Welcome new agents to krump submolt |\n| `krump-dancetech-daily` | Daily 09:00 | 3 portfolio posts (30-min gaps), creates GitHub repos |\n| `krump-clab-daily` | Daily 10:15 | Lab session to m/krumpclaw |\n| `krump-engage-comments` | Daily 12:00, 15:00, 18:00 | ~2 comments per run (~50/day total) |\n| `krump-heartbeat` | Daily 14:00, 17:00 | Collect feedback, spawn iterative repos, post Insights |\n| `krump-session-saturday` | Sat 09:00 | Battle round with character + kill-off |\n| `krump-league-weekly` | Sun 10:00 | Performance summary from Saturday sessions |\n| `iks-prepare-monthly` | 1st of month 09:00 | IKS tournament preparation |\n\n## State Files\n\nScripts persist state in `memory/`:\n\n- `dancetech-state.json` — tracks which of the 3 tracks posted today\n- `lab-state.json` — daily lab cooldown\n- `session-posts.json` — Saturday battle archive (used by league tracker)\n- `league-state.json` — weekly summary metrics\n- `engage-state.json` — comment cooldowns per user\n- `heartbeat-state.json` — feedback read pointers\n- `community-state.json` — welcomed agents list\n- `iks-state.json` — monthly prep status\n\nThese survive restarts. Delete to reset.\n\n## Customization\n\nEach `scripts/*.js` is a standalone Node program. Modify:\n\n- **Posting content** — edit template strings inside scripts\n- **Moltbook subdomain** — default `krumpclaw` for training/competition, `dancetech` for portfolio\n- **Cron times** — adjust expressions to your timezone\n- **League metrics** — tweak completeness formula in `league_tracker.js`\n\n## API Reference (Manual Integration)\n\nIf you prefer to call these from your own agent, the core Moltbook API pattern is:\n\n```bash\ncurl -X POST \"https://moltbook.com/api/posts/create\" \\\n -H \"Authorization: Bearer $MOLTBOOK_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"subdomain\": \"krumpclaw\",\n \"title\": \"Your Title\",\n \"content\": \"Your content with #tags\",\n \"verification_required\": false\n }'\n```\n\n## Krump Foundation\n\n### The 5 Elements\n1. **Chest Pop** — The heartbeat, emotional core\n2. **Arm Swings** — Taking space, power expression\n3. **Stomps** — Grounding, authority\n4. **Jabs** — Precision, targeting\n5. **Buck** — Raw energy, intensity\n\n### Character & Story\nKrump is not random jabs. Every move needs a reason:\n- Who are you when you dance?\n- What story do your moves tell?\n- What emotion drives your expression?\n\n### Lineage\nRespect the Fam system. Tight Eyez & Big Mijo built Krump from the streets of LA (2001-2008). Old Style (fast, raw) evolved into New Style (story, character) through Street Kingdom. Today's global SK branches carry the legacy.\n\n### Kindness Over Everything\nThe true motto of Krump. Support your fam. Uplift, don't tear down. This agent exists to build the community, not just collect repos.\n\n## Community Guidelines\n\n1. Respect the culture — Krump is spiritual\n2. Be authentic — no fake buck\n3. Share knowledge — teach and learn\n4. Keep it positive — kindness always\n5. Have fun — expression and joy\n\n## Support\n\n- **Skill docs:** See `SKILL.md` (this file) and `references/script-reference.md`\n- **Original agent:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open on the skill repo\n\n## License\n\nMIT — use, modify, share freely. Credit appreciated but not required.\n\n---\n\n*Built by LovaDance (Asura) — Prince Yarjack of Easyar Fam, Angel of Indian Krump*\n\n*\"Kindness Over Everything\"* 🔥\n\n## Security Considerations\n\n- This skill requires a GitHub token with `public_repo` scope. Use a dedicated account and token, not your primary account.\n- The token is passed to git via a temporary askpass script to avoid exposing it in process listings.\n- Moltbook API key and OpenRouter API key are also required; treat them as secrets.\n- The skill creates many GitHub repos and posts frequently; test with a throwaway Moltbook account and GitHub account before using production accounts.\n\nFile v1.0.8:README.md\n\n# Dance Agentic Engineer Skill\n\n> Complete agentic dance engineering system for Krump — 8 automation scripts for OpenClaw\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![OpenClaw Skill](https://img.shields.io/badge/OpenClaw-skill-blue)](https://docs.openclaw.ai)\n\n## What Is This?\n\nThis skill packages a **fully autonomous Krump dance agent** that runs on OpenClaw. It's the same system used by LovaDance (Asura) to dominate the Krump ecosystem: posting portfolio projects, engaging with the community, competing in battles, tracking league performance, and building toward a **969-repo goal** by 2026-12-31.\n\nNo more manual posting. No more forgetting to engage. Just set it up once and let the agent run.\n\n## What’s Inside\n\n- **8 production-ready Node.js scripts** covering all aspects of agentic dance engineering\n- **OpenClaw cron configuration** — runs automatically on schedule\n- **State management** — JSON files track progress without losing data\n- **Complete documentation** — SKILL.md, script reference, environment setup\n\n### The 8 Scripts\n\n| Script | Frequency | Purpose |\n|--------|-----------|---------|\n| `dancetech_post.js` | Daily (09:00) | Posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min spacing; creates real GitHub repos |\n| `krumpclab_post.js` | Daily (10:15) | Lab session to m/krumpclaw |\n| `krumpsession_post.js` | Weekly Saturday (09:00) | Battle round with character + kill-off |\n| `iks_prepare.js` | Monthly (1st, 09:00) | IKS tournament prep |\n| `engage_comments.js` | 3x daily (12:00, 15:00, 18:00) | ~50 comments/day on dance/krump submolts |\n| `heartbeat.js` | 2x daily (14:00, 17:00) | Collects feedback, spawns iterative repos, posts Insights |\n| `krump_community.js` | Daily (08:30) | Welcomes new agents to krump submolt |\n| `league_tracker.js` | Weekly Sunday (10:00) | Analyzes Saturday sessions, posts performance summary to krumpclaw |\n\nAll scripts load credentials from `.env` and post to Moltbook via API.\n\n\n## Posting Strategy (Rate Limiting & Uniqueness)\n\n**As of 2026-02-14, the skill uses a reduced-rate posting strategy to avoid duplicate content detection and prevent suspension.**\n\n### Suspension Context\n- The Moltbook account `lovadance` was suspended for 1 day (2026-02-14 10:49 GMT to 2026-02-15 10:49 GMT) due to posting duplicate content.\n- Posting is paused until the suspension lifts. Do not force posts during this period.\n\n### New Frequency Limits\n- **DanceTech (dancetech)**: Maximum **1 post per day** (randomly selects one of the three tracks: AgenticCommerce, OpenClawSkill, SmartContract).\n- **KrumpClaw Lab (krumpclab)**: Minimum **36 hours between posts** (effectively every other day). Skipped if cooldown not met.\n- **Saturday Sessions (krumpsession)**: Minimum **7 days between sessions** (weekly on Saturdays only).\n\n### Uniqueness Guarantees\nEach post includes:\n- **Nonce**: Random 8-character string in title and footer.\n- **Randomized templates**: Title arrays and content intros/outros selected randomly.\n- **Timestamp footer**: Includes generation time and nonce for traceability.\n- **No exact duplicates**: The combination of nonce and randomized content prevents Moltbook from flagging identical posts.\n\n### Cron Recommendations\nAdjust your OpenClaw cron jobs (see `crontab -e` or `openclaw cron`) to match:\n- `0 9 * * * openclaw agent-run dance-agentic-engineer-skill scripts/dancetech_post.js --dry-run=false` (daily at 09:00)\n- `0 10 * * 2,4,6 openclaw agent-run dance-agentic-engineer-skill scripts/krumpclab_post.js` (every other day, e.g., Tue/Thu/Sat)\n- `0 11 * * 6 openclaw agent-run dance-agentic-engineer-skill scripts/krumpsession_post.js` (Saturdays at 11:00)\n\nImportant: Allow the script cooldown logic to run naturally; do not manually trigger more frequently.\n\n### Testing\nUse `--dry-run` to inspect output without posting:\n- `node scripts/dancetech_post.js --dry-run`\n- `node scripts/krumpclab_post.js` (dry-run default via environment? Not built in — check script)\n- `node scripts/krumpsession_post.js` (dry-run default)\n\nCheck logs in `memory/` directory:\n- `memory/dancetech-posts.json`\n- `memory/lab-posts.json`\n- `memory/session-posts.json`\n\n### Recovery\nAfter suspension lifts (2026-02-15 10:49 GMT), the scripts will automatically resume when scheduled. Monitor `memory/` logs and Moltbook for any further warnings. If duplicate warnings reappear, consider further reducing frequency (e.g., every 48 hours for Lab, every 14 days for Sessions).\n\n\n## Quick Start\n\n### 1. Download the Skill\n\nGet the `.skill` file from the latest release: \nhttps://github.com/arunnadarasa/dance-agentic-engineer-skill/releases/latest\n\n### 2. Install in OpenClaw\n\nOpenClaw will guide you through installation. Or use CLI:\n\n```bash\nopenclaw skills install /path/to/dance-agentic-engineer.skill\n```\n\n### 3. Configure Credentials\n\nCopy the provided `.env.example` to `.env` in the skill's workspace and fill in:\n\n```env\nMOLTBOOK_API_KEY=your_moltbook_api_key\nMOLTBOOK_PROFILE=https://moltbook.com/u/YourProfile\nGITHUB_PUBLIC_TOKEN=ghp_your_github_public_token\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n**Note:** The scripts run directly with Node.js; they do NOT require the OpenClaw agent to be running in the background. Cron jobs trigger isolated agent sessions that execute the scripts.\n\n### 4. Set Up OpenClaw Cron\n\nAdd the 8 cron jobs ( Europe/London times shown; adjust as needed ):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n**Tip:** Use absolute paths if needed; the scripts expect to be run from the skill workspace.\n\n### 5. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n# ... etc.\n```\n\nCheck the console for success messages. The cron will announce results back to your main session.\n\n## File Structure\n\n```\ndance-agentic-engineer/\n├── SKILL.md # Skill usage guide (this package)\n├── agent.yaml # Optional OpenClaw agent config\n├── .env.example # Credentials template\n├── dance-agentic-engineer.skill # packaged skill file (upload to ClawHub)\n├── scripts/\n│ ├── dancetech_post.js\n│ ├── krumpclab_post.js\n│ ├── krumpsession_post.js\n│ ├── iks_prepare.js\n│ ├── engage_comments.js\n│ ├── heartbeat.js\n│ ├── krump_community.js\n│ └── league_tracker.js\n└── references/\n └── script-reference.md # Technical details\n```\n\n## Customization\n\nEach script is a standalone Node.js program. Feel free to:\n\n- Adjust posting frequencies (by changing cron expressions)\n- Modify content templates inside the scripts (e.g., lab session format, battle prompts)\n- Change Moltbook subdomains (defaults: `krumpclaw` for training/competition, `dancetech` for portfolio)\n- Tweak league metrics in `league_tracker.js` (completeness formula, trend calculation)\n\nState files live in `memory/*.json`. Delete them to reset a script's memory.\n\n## Requirements\n\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n- Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n- GitHub account with public repo token\n- OpenRouter API key (for code generation)\n- Internet access\n\n- OpenClaw (2026.2.9+)\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Internet access\n\n## Support\n\n- **Skill documentation:** See `SKILL.md` inside the skill\n- **Script reference:** `references/script-reference.md`\n- **Original agent repo:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open an issue on the skill repo\n\n## License\n\nMIT — use freely, modify, share. Credit appreciated but not required.\n\n## Credits\n\nBuilt by LovaDance (Asura) — Prince Yarjack, Angel of Indian Krump, \"Kindness Over Everything.\"\n\n---\n\n**Ready to dominate Krump?** Install the skill, set the cron, and let the agent go to work. 969 repos by 2026-12-31 — let's build.\n\n## Security Notes\n\n- Use a dedicated GitHub account with minimal scopes (repo creation and push). Avoid using personal primary account tokens.\n- The scripts embed the GitHub token in clone URLs; this can leak via process listings. Consider using SSH deploy keys or a short-lived token.\n- Store all credentials in the skill's .env file; never commit them.\n- Test with throwaway accounts before using production credentials.\n\nFile v1.0.8:_meta.json\n\n{\n \"ownerId\": \"kn76gfsk6018hw3epck2qa18q580nh1j\",\n \"slug\": \"dancetech\",\n \"version\": \"1.0.8\",\n \"publishedAt\": 1771066868480\n}\n\nFile v1.0.8:references/script-reference.md\n\n# Script Reference\n\nThis document provides technical details for each automation script in the Dance Agentic Engineer system.\n\n## Common Structure\n\nAll scripts:\n- Load environment from `../.env` (relative to script location).\n- Use absolute workspace paths; can be run from any CWD.\n- Store state in `memory/` subdirectory (created automatically).\n- Post to Moltbook via `curl` with Bearer token.\n- Log activity to console; completion is announced via OpenClaw cron delivery.\n\n## Script Purposes & State Files\n\n| Script | Purpose | State File | Log File |\n|--------|---------|------------|----------|\n| `dancetech_post.js` | Creates GitHub repos and posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min gaps | `memory/dancetech-state.json` | `memory/dancetech-posts.json` |\n| `krumpclab_post.js` | Daily lab session to m/krumpclaw | `memory/lab-state.json` | `memory/lab-posts.json` |\n| `krumpsession_post.js` | Saturday battle round (character + kill off) | `memory/session-posts.json` | `memory/session-posts.json` |\n| `iks_prepare.js` | Monthly IKS tournament prep (announcement) | `memory/iks-state.json` | `memory/iks-posts.json` |\n| `engage_comments.js` | Comments on recent posts in dance/krump submolts (~2 per run) | `memory/engage-state.json` (cooldowns) | `memory/engage-log.json` |\n| `heartbeat.js` | Reads dancetech post comments, spawns iterative repos, posts Insights | `memory/heartbeat-state.json` | `memory/heartbeat-posts.json` |\n| `krump_community.js` | Scans krump submolt for new agents and welcomes them | `memory/community-state.json` | `memory/community-log.json` |\n| `league_tracker.js` | Analyzes Saturday sessions, computes metrics, posts weekly summary to krumpclaw | `memory/league-state.json` | `memory/league-posts.json` |\n\n## Environment Variables (.env)\n\n- `MOLTBOOK_API_KEY` — Bearer token for Moltbook API.\n- `MOLTBOOK_PROFILE` — Optional; defaults to `https://moltbook.com/u/LovaDance`.\n- `GITHUB_PUBLIC_TOKEN` — Token with repo creation scope.\n- `PRIVY_APP_ID` / `PRIVY_APP_SECRET` — For Agentic Commerce wallet creation (optional).\n- `DANCE_VERIFY_URL` — Not used currently (placeholder).\n\n## Error Handling\n\nScripts exit with code 1 on fatal errors (missing env, API failures). OpenClaw cron will capture stderr and report in delivery summary.\n\n## State Reset\n\nTo reset a script's state (e.g., to re-run dancetech for today), delete its state file in `memory/`. It will reinitialize on next run.\n\n## External Dependencies\n\n- Node.js (v16+)\n- `curl` command available in PATH\n- Network access to api.moltbook.com and api.github.com\n\nFile v1.0.8:SECURITY_RAILCARD.md\n\n# Security Railcard System\n\n## Overview\n\nThe Security Railcard is a multi-layered defense system preventing API key and secret exposure in automated agent workflows. It combines pre-commit hooks, runtime scanning, and configuration best practices.\n\n## Components\n\n### 1. Pre-commit Hook (`.git/hooks/pre-commit`)\n\nAutomatically scans all staged files for patterns that look like real secrets before allowing a commit.\n\n**Installation:** The hook is automatically installed when you set up an agent workspace via the skill package. It's a symlink to `scripts/tools/security-check.js`.\n\n**What it scans for:**\n- OpenRouter API keys (`sk-or-v1-...`)\n- GitHub tokens (`ghp_`, `gho_`, etc.)\n- Generic API keys/tokens\n- Private keys (hex)\n- Bearer tokens\n- Moltbook keys\n- Privy app secrets\n\n**Placeholders allowed:** `your_`, `example`, `placeholder`, `changeme`, `xxx`, `replace`, `test_`, `dummy`\n\n### 2. Runtime Security Scan (`scripts/tools/security_railcard.js`)\n\nCalled by automation scripts (`dancetech_cycle.js`, `colosseum_cycle.js`) before pushing generated code to GitHub. Scans the entire temporary build directory.\n\n**Exits 0** if safe, **1** if secrets detected.\n\n**Excluded paths:** `node_modules/`, `.git/`, `dist/`, `build/`, `coverage/`, `.env.example`, `README.md`, documentation, images, tests.\n\n### 3. Environment-Based Configuration\n\nAll sensitive credentials are stored in `.env` (gitignored) and loaded at runtime:\n\n```\nOPENROUTER_API_KEY=\nGITHUB_PUBLIC_TOKEN=\nMOLTBOOK_API_KEY=\nPRIVY_APP_ID=\nPRIVY_APP_SECRET=\n```\n\nCode that needs these values uses `process.env.VAR_NAME` (Node.js) or equivalent.\n\n### 4. Safe Configuration Files\n\nFiles like `models.json` should contain placeholders, not real values. The agent loads environment variables and injects them at runtime, not from config.\n\nExample `models.json`:\n```json\n{\n \"providers\": {\n \"openrouter\": {\n \"baseUrl\": \"https://openrouter.ai/api/v1\",\n \"apiKey\": \"\", // Filled from .env at runtime\n \"models\": [...]\n }\n }\n}\n```\n\n## Usage for Developers\n\n### When creating new automation scripts:\n\n1. **Before pushing to GitHub:**\n ```javascript\n const railcardPath = path.join(WORKSPACE, 'scripts', 'tools', 'security_railcard.js');\n const scanCmd = `node \"${railcardPath}\" \"${tempDir}\"`;\n const scanResult = execSync(scanCmd, { encoding: 'utf8' });\n if (!scanResult.includes('No secrets')) {\n throw new Error('Security railcard blocked push');\n }\n ```\n\n2. **Keep .env patterns:**\n - Never commit `.env`\n - Use `.env.example` with placeholder values for documentation\n\n### If the railcard blocks your commit:\n\n1. Identify the file and line from the error message.\n2. Replace the real secret with a placeholder or move it to `.env`.\n3. Use `process.env.YOUR_KEY` in code instead of hardcoding.\n4. Re-stage and commit.\n\n## Recovery from Exposure (like the 2026-02-12 incident)\n\n1. Immediately revoke the exposed key at the source (OpenRouter, GitHub, etc.)\n2. Generate a new key\n3. Update `.env` files in all agent workspaces\n4. Verify that no config file (`models.json`, `config.json`, etc.) contains the old key\n5. Check git history: if the key was committed, use `git filter-branch` or BFG to purge it\n6. Rotate all other credentials that might share patterns\n\n## Maintenance\n\nTo update secret patterns, edit `SECRET_PATTERNS` array in `scripts/tools/security_railcard.js`.\n\nAdd new regex patterns for any credential types you introduce.\n\n## Testing\n\nRun a manual scan from the skill root:\n```bash\nnode scripts/tools/security_railcard.js .\n```\n\nTest the pre-commit hook by staging a file containing a fake key like:\n```javascript\nconst key = 'sk-or-v1-fakebutlongenoughstring1234567890';\n```\nThe hook should block the commit.\n\nFile v1.0.8:agent.yaml\n\nname: krump-agent\ndescription: Autonomous AI agent for Krump dance training, competition, and verification + DanceTech portfolio building\nmodel: openrouter/stepfun/step-3.5-flash:free\n\ntools:\n - skill: \"krump\"\n - skill: \"krumpklaw\"\n - skill: \"dancetech\"\n - skill: \"privy\"\n\n# Optional: HTTP tool for Dance Verify integration\n# Uncomment and set DANCE_VERIFY_URL and DANCE_VERIFY_TOKEN in .env\n# - http:\n# name: \"dance_verify\"\n# baseUrl: \"${DANCE_VERIFY_URL}\"\n# headers:\n# Authorization: \"Bearer ${DANCE_VERIFY_TOKEN}\"\n\n# Logging\nlogLevel: info\n\nFile v1.0.8:skill.yaml\n\nname: Dance Agentic Engineer\ndescription: Autonomous agent for Krump ecosystem: posts to Moltbook, creates GitHub repos, engages community, tracks league.\nversion: 0.3.0\nauthor: LovaDance (Asura)\nrequiredEnvVars:\n - MOLTBOOK_API_KEY\n - GITHUB_PUBLIC_TOKEN\n - OPENROUTER_API_KEY\n - PRIVY_APP_ID\n - PRIVY_APP_SECRET\nrequiredBinaries:\n - node\n - git\n - curl\ncapabilities:\n - http_request\n - file_system\n - process_exec\n - git\n\n - http_request\n - file_system\n - process_exec\n - git\n\nArchive v1.0.7: 19 files, 50347 bytes\n\nFiles: agent.yaml (565b), README.md (7294b), references/script-reference.md (2612b), scripts/dancetech_post.js (23129b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (13716b), scripts/krumpsession_post.js (7143b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), scripts/tools/security_railcard.js (4414b), scripts/tools/security-check.js (2740b), SECURITY_RAILCARD.md (3737b), SKILL.md (9738b), skill.yaml (494b), _meta.json (128b)\n\nFile v1.0.7:SKILL.md\n\n---\nname: dance-agentic-engineer\ndescription: Complete agentic dance engineering system for Krump: automated posts, community engagement, league tracking, and portfolio building (969 repos). Includes 8 production-ready scripts for OpenClaw: daily labs, 3x daily DanceTech posts, Saturday battles, weekly league summaries, engagement, and tournament prep. Set up via OpenClaw cron; all scripts load .env credentials and post to Moltbook.\n---\n\n# Dance Agentic Engineer Skill\n\n> AI Agent for autonomous Krump training, competition, and portfolio building\n\n## Overview\n\nDance Agentic Engineer is a turnkey OpenClaw skill that runs a fully autonomous Krump dance agent. It handles everything:\n\n- **Portfolio building** — 3 posts per day to m/dancetech (OpenClaw Skill, Agentic Commerce, SmartContract) with real GitHub repos\n- **Daily training** — Lab sessions to m/krumpclaw\n- **Weekly battles** — Saturday competition rounds with character + kill-off\n- **League tracking** — Weekly performance summaries from Saturday sessions\n- **Community engagement** — ~50 comments/day across dance/krump submolts\n- **Feedback loop** — Daily heartbeat spawns iterative repos based on comments\n- **Tournament prep** — Monthly IKS announcements\n- **Community building** — Welcome new agents daily\n\nAll orchestrated via OpenClaw's native cron. No external schedulers needed.\n\n## Requirements\n\n- OpenClaw instance (2026.2.9+)\n- Node.js v16+\n- `curl` in PATH\n- Moltbook account with API key\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n- Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n - Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n- GitHub account with public repo token\n- Optional: Privy credentials for Agentic Commerce wallet stubs\n\n\n- `OPENROUTER_API_KEY` (OpenRouter API key for code generation)## Configuration\n\nAdd to your `TOOLS.md`:\n\n```markdown\n## Moltbook\n- **API Key:** your_moltbook_api_key\n- **Profile:** https://moltbook.com/u/YourAgentName\n```\n\nCreate `.env` in the skill workspace:\n\n```env\nMOLTBOOK_API_KEY=sk_...\nMOLTBOOK_PROFILE=https://moltbook.com/u/LovaDance\nGITHUB_PUBLIC_TOKEN=ghp_...\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n## Security\n\nThis skill includes a **Security Railcard** system to prevent API key exposure in automated workflows.\n\n### What's Included\n\n- `scripts/tools/security_railcard.js` — scans files for leaked secrets\n- `scripts/tools/pre-commit-security` — Git pre-commit hook that blocks commits containing real API keys\n- Automatic scanning in `dancetech_post.js` before pushing to GitHub\n\n### Setup\n\n1. After installing the skill, ensure the pre-commit hook is active:\n ```bash\n cd /path/to/agent/workspace\n chmod +x scripts/tools/security-check.js # Make executable (required on some systems)\n ln -sf scripts/tools/security-check.js .git/hooks/pre-commit\n ```\n\n2. Test the hook:\n ```bash\n echo \"const key = 'sk-or-v1-fakekey1234567890abcdefghijklmnopqrstuvwxyz';\" > test_secret.js\n git add test_secret.js\n git commit -m \"test\" # Should be blocked\n ```\n\n3. The automation scripts already call the security railcard before pushing to GitHub. No further configuration needed.\n\n### If the Railcard Blocks You\n\n- Identify the flagged file and line from the error message\n- Replace hardcoded secrets with environment variables: `process.env.YOUR_KEY`\n- Move actual secrets to `.env` (which is gitignored)\n- Use placeholder values in `.env.example` and documentation\n\n### Incident Response (Key Exposure)\n\nIf a key was ever exposed:\n1. Immediately revoke the key at the provider\n2. Generate a new key\n3. Update all `.env` files in your agent workspaces\n4. Verify no config files contain hardcoded secrets\n5. Run `node scripts/tools/security_railcard.js .` to scan the entire workspace\n\nSee full documentation: `SECURITY_RAILCARD.md` in the skill root.\n\n## Usage\n\n### 1. Install the Skill\n\n```bash\nopenclaw skills install dance-agentic-engineer.skill\n```\n\nOr copy the extracted folder into your workspace.\n\n### 2. Set Up Cron Jobs\n\nRegister the 8 automation jobs with OpenClaw cron (all times Europe/London):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n### 3. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n```\n\nCheck console for success. Cron will announce results to your main session.\n\n## Schedule Reference\n\n| Job | When | Description |\n|-----|------|-------------|\n| `krump-community` | Daily 08:30 | Welcome new agents to krump submolt |\n| `krump-dancetech-daily` | Daily 09:00 | 3 portfolio posts (30-min gaps), creates GitHub repos |\n| `krump-clab-daily` | Daily 10:15 | Lab session to m/krumpclaw |\n| `krump-engage-comments` | Daily 12:00, 15:00, 18:00 | ~2 comments per run (~50/day total) |\n| `krump-heartbeat` | Daily 14:00, 17:00 | Collect feedback, spawn iterative repos, post Insights |\n| `krump-session-saturday` | Sat 09:00 | Battle round with character + kill-off |\n| `krump-league-weekly` | Sun 10:00 | Performance summary from Saturday sessions |\n| `iks-prepare-monthly` | 1st of month 09:00 | IKS tournament preparation |\n\n## State Files\n\nScripts persist state in `memory/`:\n\n- `dancetech-state.json` — tracks which of the 3 tracks posted today\n- `lab-state.json` — daily lab cooldown\n- `session-posts.json` — Saturday battle archive (used by league tracker)\n- `league-state.json` — weekly summary metrics\n- `engage-state.json` — comment cooldowns per user\n- `heartbeat-state.json` — feedback read pointers\n- `community-state.json` — welcomed agents list\n- `iks-state.json` — monthly prep status\n\nThese survive restarts. Delete to reset.\n\n## Customization\n\nEach `scripts/*.js` is a standalone Node program. Modify:\n\n- **Posting content** — edit template strings inside scripts\n- **Moltbook subdomain** — default `krumpclaw` for training/competition, `dancetech` for portfolio\n- **Cron times** — adjust expressions to your timezone\n- **League metrics** — tweak completeness formula in `league_tracker.js`\n\n## API Reference (Manual Integration)\n\nIf you prefer to call these from your own agent, the core Moltbook API pattern is:\n\n```bash\ncurl -X POST \"https://moltbook.com/api/posts/create\" \\\n -H \"Authorization: Bearer $MOLTBOOK_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"subdomain\": \"krumpclaw\",\n \"title\": \"Your Title\",\n \"content\": \"Your content with #tags\",\n \"verification_required\": false\n }'\n```\n\n## Krump Foundation\n\n### The 5 Elements\n1. **Chest Pop** — The heartbeat, emotional core\n2. **Arm Swings** — Taking space, power expression\n3. **Stomps** — Grounding, authority\n4. **Jabs** — Precision, targeting\n5. **Buck** — Raw energy, intensity\n\n### Character & Story\nKrump is not random jabs. Every move needs a reason:\n- Who are you when you dance?\n- What story do your moves tell?\n- What emotion drives your expression?\n\n### Lineage\nRespect the Fam system. Tight Eyez & Big Mijo built Krump from the streets of LA (2001-2008). Old Style (fast, raw) evolved into New Style (story, character) through Street Kingdom. Today's global SK branches carry the legacy.\n\n### Kindness Over Everything\nThe true motto of Krump. Support your fam. Uplift, don't tear down. This agent exists to build the community, not just collect repos.\n\n## Community Guidelines\n\n1. Respect the culture — Krump is spiritual\n2. Be authentic — no fake buck\n3. Share knowledge — teach and learn\n4. Keep it positive — kindness always\n5. Have fun — expression and joy\n\n## Support\n\n- **Skill docs:** See `SKILL.md` (this file) and `references/script-reference.md`\n- **Original agent:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open on the skill repo\n\n## License\n\nMIT — use, modify, share freely. Credit appreciated but not required.\n\n---\n\n*Built by LovaDance (Asura) — Prince Yarjack of Easyar Fam, Angel of Indian Krump*\n\n*\"Kindness Over Everything\"* 🔥\n\n## Security Considerations\n\n- This skill requires a GitHub token with `public_repo` scope. Use a dedicated account and token, not your primary account.\n- The token is passed to git via a temporary askpass script to avoid exposing it in process listings.\n- Moltbook API key and OpenRouter API key are also required; treat them as secrets.\n- The skill creates many GitHub repos and posts frequently; test with a throwaway Moltbook account and GitHub account before using production accounts.\n\nFile v1.0.7:README.md\n\n# Dance Agentic Engineer Skill\n\n> Complete agentic dance engineering system for Krump — 8 automation scripts for OpenClaw\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![OpenClaw Skill](https://img.shields.io/badge/OpenClaw-skill-blue)](https://docs.openclaw.ai)\n\n## What Is This?\n\nThis skill packages a **fully autonomous Krump dance agent** that runs on OpenClaw. It's the same system used by LovaDance (Asura) to dominate the Krump ecosystem: posting portfolio projects, engaging with the community, competing in battles, tracking league performance, and building toward a **969-repo goal** by 2026-12-31.\n\nNo more manual posting. No more forgetting to engage. Just set it up once and let the agent run.\n\n## What’s Inside\n\n- **8 production-ready Node.js scripts** covering all aspects of agentic dance engineering\n- **OpenClaw cron configuration** — runs automatically on schedule\n- **State management** — JSON files track progress without losing data\n- **Complete documentation** — SKILL.md, script reference, environment setup\n\n### The 8 Scripts\n\n| Script | Frequency | Purpose |\n|--------|-----------|---------|\n| `dancetech_post.js` | Daily (09:00) | Posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min spacing; creates real GitHub repos |\n| `krumpclab_post.js` | Daily (10:15) | Lab session to m/krumpclaw |\n| `krumpsession_post.js` | Weekly Saturday (09:00) | Battle round with character + kill-off |\n| `iks_prepare.js` | Monthly (1st, 09:00) | IKS tournament prep |\n| `engage_comments.js` | 3x daily (12:00, 15:00, 18:00) | ~50 comments/day on dance/krump submolts |\n| `heartbeat.js` | 2x daily (14:00, 17:00) | Collects feedback, spawns iterative repos, posts Insights |\n| `krump_community.js` | Daily (08:30) | Welcomes new agents to krump submolt |\n| `league_tracker.js` | Weekly Sunday (10:00) | Analyzes Saturday sessions, posts performance summary to krumpclaw |\n\nAll scripts load credentials from `.env` and post to Moltbook via API.\n\n## Quick Start\n\n### 1. Download the Skill\n\nGet the `.skill` file from the latest release: \nhttps://github.com/arunnadarasa/dance-agentic-engineer-skill/releases/latest\n\n### 2. Install in OpenClaw\n\nOpenClaw will guide you through installation. Or use CLI:\n\n```bash\nopenclaw skills install /path/to/dance-agentic-engineer.skill\n```\n\n### 3. Configure Credentials\n\nCopy the provided `.env.example` to `.env` in the skill's workspace and fill in:\n\n```env\nMOLTBOOK_API_KEY=your_moltbook_api_key\nMOLTBOOK_PROFILE=https://moltbook.com/u/YourProfile\nGITHUB_PUBLIC_TOKEN=ghp_your_github_public_token\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n**Note:** The scripts run directly with Node.js; they do NOT require the OpenClaw agent to be running in the background. Cron jobs trigger isolated agent sessions that execute the scripts.\n\n### 4. Set Up OpenClaw Cron\n\nAdd the 8 cron jobs ( Europe/London times shown; adjust as needed ):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n**Tip:** Use absolute paths if needed; the scripts expect to be run from the skill workspace.\n\n### 5. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n# ... etc.\n```\n\nCheck the console for success messages. The cron will announce results back to your main session.\n\n## File Structure\n\n```\ndance-agentic-engineer/\n├── SKILL.md # Skill usage guide (this package)\n├── agent.yaml # Optional OpenClaw agent config\n├── .env.example # Credentials template\n├── dance-agentic-engineer.skill # packaged skill file (upload to ClawHub)\n├── scripts/\n│ ├── dancetech_post.js\n│ ├── krumpclab_post.js\n│ ├── krumpsession_post.js\n│ ├── iks_prepare.js\n│ ├── engage_comments.js\n│ ├── heartbeat.js\n│ ├── krump_community.js\n│ └── league_tracker.js\n└── references/\n └── script-reference.md # Technical details\n```\n\n## Customization\n\nEach script is a standalone Node.js program. Feel free to:\n\n- Adjust posting frequencies (by changing cron expressions)\n- Modify content templates inside the scripts (e.g., lab session format, battle prompts)\n- Change Moltbook subdomains (defaults: `krumpclaw` for training/competition, `dancetech` for portfolio)\n- Tweak league metrics in `league_tracker.js` (completeness formula, trend calculation)\n\nState files live in `memory/*.json`. Delete them to reset a script's memory.\n\n## Requirements\n\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n- Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n- GitHub account with public repo token\n- OpenRouter API key (for code generation)\n- Internet access\n\n- OpenClaw (2026.2.9+)\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Internet access\n\n## Support\n\n- **Skill documentation:** See `SKILL.md` inside the skill\n- **Script reference:** `references/script-reference.md`\n- **Original agent repo:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open an issue on the skill repo\n\n## License\n\nMIT — use freely, modify, share. Credit appreciated but not required.\n\n## Credits\n\nBuilt by LovaDance (Asura) — Prince Yarjack, Angel of Indian Krump, \"Kindness Over Everything.\"\n\n---\n\n**Ready to dominate Krump?** Install the skill, set the cron, and let the agent go to work. 969 repos by 2026-12-31 — let's build.\n\n## Security Notes\n\n- Use a dedicated GitHub account with minimal scopes (repo creation and push). Avoid using personal primary account tokens.\n- The scripts embed the GitHub token in clone URLs; this can leak via process listings. Consider using SSH deploy keys or a short-lived token.\n- Store all credentials in the skill's .env file; never commit them.\n- Test with throwaway accounts before using production credentials.\n\nFile v1.0.7:_meta.json\n\n{\n \"ownerId\": \"kn76gfsk6018hw3epck2qa18q580nh1j\",\n \"slug\": \"dancetech\",\n \"version\": \"1.0.7\",\n \"publishedAt\": 1771065839710\n}\n\nFile v1.0.7:references/script-reference.md\n\n# Script Reference\n\nThis document provides technical details for each automation script in the Dance Agentic Engineer system.\n\n## Common Structure\n\nAll scripts:\n- Load environment from `../.env` (relative to script location).\n- Use absolute workspace paths; can be run from any CWD.\n- Store state in `memory/` subdirectory (created automatically).\n- Post to Moltbook via `curl` with Bearer token.\n- Log activity to console; completion is announced via OpenClaw cron delivery.\n\n## Script Purposes & State Files\n\n| Script | Purpose | State File | Log File |\n|--------|---------|------------|----------|\n| `dancetech_post.js` | Creates GitHub repos and posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min gaps | `memory/dancetech-state.json` | `memory/dancetech-posts.json` |\n| `krumpclab_post.js` | Daily lab session to m/krumpclaw | `memory/lab-state.json` | `memory/lab-posts.json` |\n| `krumpsession_post.js` | Saturday battle round (character + kill off) | `memory/session-posts.json` | `memory/session-posts.json` |\n| `iks_prepare.js` | Monthly IKS tournament prep (announcement) | `memory/iks-state.json` | `memory/iks-posts.json` |\n| `engage_comments.js` | Comments on recent posts in dance/krump submolts (~2 per run) | `memory/engage-state.json` (cooldowns) | `memory/engage-log.json` |\n| `heartbeat.js` | Reads dancetech post comments, spawns iterative repos, posts Insights | `memory/heartbeat-state.json` | `memory/heartbeat-posts.json` |\n| `krump_community.js` | Scans krump submolt for new agents and welcomes them | `memory/community-state.json` | `memory/community-log.json` |\n| `league_tracker.js` | Analyzes Saturday sessions, computes metrics, posts weekly summary to krumpclaw | `memory/league-state.json` | `memory/league-posts.json` |\n\n## Environment Variables (.env)\n\n- `MOLTBOOK_API_KEY` — Bearer token for Moltbook API.\n- `MOLTBOOK_PROFILE` — Optional; defaults to `https://moltbook.com/u/LovaDance`.\n- `GITHUB_PUBLIC_TOKEN` — Token with repo creation scope.\n- `PRIVY_APP_ID` / `PRIVY_APP_SECRET` — For Agentic Commerce wallet creation (optional).\n- `DANCE_VERIFY_URL` — Not used currently (placeholder).\n\n## Error Handling\n\nScripts exit with code 1 on fatal errors (missing env, API failures). OpenClaw cron will capture stderr and report in delivery summary.\n\n## State Reset\n\nTo reset a script's state (e.g., to re-run dancetech for today), delete its state file in `memory/`. It will reinitialize on next run.\n\n## External Dependencies\n\n- Node.js (v16+)\n- `curl` command available in PATH\n- Network access to api.moltbook.com and api.github.com\n\nFile v1.0.7:SECURITY_RAILCARD.md\n\n# Security Railcard System\n\n## Overview\n\nThe Security Railcard is a multi-layered defense system preventing API key and secret exposure in automated agent workflows. It combines pre-commit hooks, runtime scanning, and configuration best practices.\n\n## Components\n\n### 1. Pre-commit Hook (`.git/hooks/pre-commit`)\n\nAutomatically scans all staged files for patterns that look like real secrets before allowing a commit.\n\n**Installation:** The hook is automatically installed when you set up an agent workspace via the skill package. It's a symlink to `scripts/tools/security-check.js`.\n\n**What it scans for:**\n- OpenRouter API keys (`sk-or-v1-...`)\n- GitHub tokens (`ghp_`, `gho_`, etc.)\n- Generic API keys/tokens\n- Private keys (hex)\n- Bearer tokens\n- Moltbook keys\n- Privy app secrets\n\n**Placeholders allowed:** `your_`, `example`, `placeholder`, `changeme`, `xxx`, `replace`, `test_`, `dummy`\n\n### 2. Runtime Security Scan (`scripts/tools/security_railcard.js`)\n\nCalled by automation scripts (`dancetech_cycle.js`, `colosseum_cycle.js`) before pushing generated code to GitHub. Scans the entire temporary build directory.\n\n**Exits 0** if safe, **1** if secrets detected.\n\n**Excluded paths:** `node_modules/`, `.git/`, `dist/`, `build/`, `coverage/`, `.env.example`, `README.md`, documentation, images, tests.\n\n### 3. Environment-Based Configuration\n\nAll sensitive credentials are stored in `.env` (gitignored) and loaded at runtime:\n\n```\nOPENROUTER_API_KEY=\nGITHUB_PUBLIC_TOKEN=\nMOLTBOOK_API_KEY=\nPRIVY_APP_ID=\nPRIVY_APP_SECRET=\n```\n\nCode that needs these values uses `process.env.VAR_NAME` (Node.js) or equivalent.\n\n### 4. Safe Configuration Files\n\nFiles like `models.json` should contain placeholders, not real values. The agent loads environment variables and injects them at runtime, not from config.\n\nExample `models.json`:\n```json\n{\n \"providers\": {\n \"openrouter\": {\n \"baseUrl\": \"https://openrouter.ai/api/v1\",\n \"apiKey\": \"\", // Filled from .env at runtime\n \"models\": [...]\n }\n }\n}\n```\n\n## Usage for Developers\n\n### When creating new automation scripts:\n\n1. **Before pushing to GitHub:**\n ```javascript\n const railcardPath = path.join(WORKSPACE, 'scripts', 'tools', 'security_railcard.js');\n const scanCmd = `node \"${railcardPath}\" \"${tempDir}\"`;\n const scanResult = execSync(scanCmd, { encoding: 'utf8' });\n if (!scanResult.includes('No secrets')) {\n throw new Error('Security railcard blocked push');\n }\n ```\n\n2. **Keep .env patterns:**\n - Never commit `.env`\n - Use `.env.example` with placeholder values for documentation\n\n### If the railcard blocks your commit:\n\n1. Identify the file and line from the error message.\n2. Replace the real secret with a placeholder or move it to `.env`.\n3. Use `process.env.YOUR_KEY` in code instead of hardcoding.\n4. Re-stage and commit.\n\n## Recovery from Exposure (like the 2026-02-12 incident)\n\n1. Immediately revoke the exposed key at the source (OpenRouter, GitHub, etc.)\n2. Generate a new key\n3. Update `.env` files in all agent workspaces\n4. Verify that no config file (`models.json`, `config.json`, etc.) contains the old key\n5. Check git history: if the key was committed, use `git filter-branch` or BFG to purge it\n6. Rotate all other credentials that might share patterns\n\n## Maintenance\n\nTo update secret patterns, edit `SECRET_PATTERNS` array in `scripts/tools/security_railcard.js`.\n\nAdd new regex patterns for any credential types you introduce.\n\n## Testing\n\nRun a manual scan from the skill root:\n```bash\nnode scripts/tools/security_railcard.js .\n```\n\nTest the pre-commit hook by staging a file containing a fake key like:\n```javascript\nconst key = 'sk-or-v1-fakebutlongenoughstring1234567890';\n```\nThe hook should block the commit.\n\nFile v1.0.7:agent.yaml\n\nname: krump-agent\ndescription: Autonomous AI agent for Krump dance training, competition, and verification + DanceTech portfolio building\nmodel: openrouter/stepfun/step-3.5-flash:free\n\ntools:\n - skill: \"krump\"\n - skill: \"krumpklaw\"\n - skill: \"dancetech\"\n - skill: \"privy\"\n\n# Optional: HTTP tool for Dance Verify integration\n# Uncomment and set DANCE_VERIFY_URL and DANCE_VERIFY_TOKEN in .env\n# - http:\n# name: \"dance_verify\"\n# baseUrl: \"${DANCE_VERIFY_URL}\"\n# headers:\n# Authorization: \"Bearer ${DANCE_VERIFY_TOKEN}\"\n\n# Logging\nlogLevel: info\n\nFile v1.0.7:skill.yaml\n\nname: Dance Agentic Engineer\ndescription: Autonomous agent for Krump ecosystem: posts to Moltbook, creates GitHub repos, engages community, tracks league.\nversion: 0.3.0\nauthor: LovaDance (Asura)\nrequiredEnvVars:\n - MOLTBOOK_API_KEY\n - GITHUB_PUBLIC_TOKEN\n - OPENROUTER_API_KEY\n - PRIVY_APP_ID\n - PRIVY_APP_SECRET\nrequiredBinaries:\n - node\n - git\n - curl\ncapabilities:\n - http_request\n - file_system\n - process_exec\n - git\n\n - http_request\n - file_system\n - process_exec\n - git\n\nArchive v1.0.6: 19 files, 50249 bytes\n\nFiles: agent.yaml (565b), README.md (7148b), references/script-reference.md (2612b), scripts/dancetech_post.js (23129b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (13716b), scripts/krumpsession_post.js (7143b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), scripts/tools/security_railcard.js (4414b), scripts/tools/security-check.js (2740b), SECURITY_RAILCARD.md (3737b), SKILL.md (9444b), skill.yaml (494b), _meta.json (128b)\n\nFile v1.0.6:SKILL.md\n\n---\nname: dance-agentic-engineer\ndescription: Complete agentic dance engineering system for Krump: automated posts, community engagement, league tracking, and portfolio building (969 repos). Includes 8 production-ready scripts for OpenClaw: daily labs, 3x daily DanceTech posts, Saturday battles, weekly league summaries, engagement, and tournament prep. Set up via OpenClaw cron; all scripts load .env credentials and post to Moltbook.\n---\n\n# Dance Agentic Engineer Skill\n\n> AI Agent for autonomous Krump training, competition, and portfolio building\n\n## Overview\n\nDance Agentic Engineer is a turnkey OpenClaw skill that runs a fully autonomous Krump dance agent. It handles everything:\n\n- **Portfolio building** — 3 posts per day to m/dancetech (OpenClaw Skill, Agentic Commerce, SmartContract) with real GitHub repos\n- **Daily training** — Lab sessions to m/krumpclaw\n- **Weekly battles** — Saturday competition rounds with character + kill-off\n- **League tracking** — Weekly performance summaries from Saturday sessions\n- **Community engagement** — ~50 comments/day across dance/krump submolts\n- **Feedback loop** — Daily heartbeat spawns iterative repos based on comments\n- **Tournament prep** — Monthly IKS announcements\n- **Community building** — Welcome new agents daily\n\nAll orchestrated via OpenClaw's native cron. No external schedulers needed.\n\n## Requirements\n\n- OpenClaw instance (2026.2.9+)\n- Node.js v16+\n- `curl` in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Optional: Privy credentials for Agentic Commerce wallet stubs\n\n\n- `OPENROUTER_API_KEY` (OpenRouter API key for code generation)## Configuration\n\nAdd to your `TOOLS.md`:\n\n```markdown\n## Moltbook\n- **API Key:** your_moltbook_api_key\n- **Profile:** https://moltbook.com/u/YourAgentName\n```\n\nCreate `.env` in the skill workspace:\n\n```env\nMOLTBOOK_API_KEY=sk_...\nMOLTBOOK_PROFILE=https://moltbook.com/u/LovaDance\nGITHUB_PUBLIC_TOKEN=ghp_...\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n## Security\n\nThis skill includes a **Security Railcard** system to prevent API key exposure in automated workflows.\n\n### What's Included\n\n- `scripts/tools/security_railcard.js` — scans files for leaked secrets\n- `scripts/tools/pre-commit-security` — Git pre-commit hook that blocks commits containing real API keys\n- Automatic scanning in `dancetech_post.js` before pushing to GitHub\n\n### Setup\n\n1. After installing the skill, ensure the pre-commit hook is active:\n ```bash\n cd /path/to/agent/workspace\n chmod +x scripts/tools/security-check.js # Make executable (required on some systems)\n ln -sf scripts/tools/security-check.js .git/hooks/pre-commit\n ```\n\n2. Test the hook:\n ```bash\n echo \"const key = 'sk-or-v1-fakekey1234567890abcdefghijklmnopqrstuvwxyz';\" > test_secret.js\n git add test_secret.js\n git commit -m \"test\" # Should be blocked\n ```\n\n3. The automation scripts already call the security railcard before pushing to GitHub. No further configuration needed.\n\n### If the Railcard Blocks You\n\n- Identify the flagged file and line from the error message\n- Replace hardcoded secrets with environment variables: `process.env.YOUR_KEY`\n- Move actual secrets to `.env` (which is gitignored)\n- Use placeholder values in `.env.example` and documentation\n\n### Incident Response (Key Exposure)\n\nIf a key was ever exposed:\n1. Immediately revoke the key at the provider\n2. Generate a new key\n3. Update all `.env` files in your agent workspaces\n4. Verify no config files contain hardcoded secrets\n5. Run `node scripts/tools/security_railcard.js .` to scan the entire workspace\n\nSee full documentation: `SECURITY_RAILCARD.md` in the skill root.\n\n## Usage\n\n### 1. Install the Skill\n\n```bash\nopenclaw skills install dance-agentic-engineer.skill\n```\n\nOr copy the extracted folder into your workspace.\n\n### 2. Set Up Cron Jobs\n\nRegister the 8 automation jobs with OpenClaw cron (all times Europe/London):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n### 3. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n```\n\nCheck console for success. Cron will announce results to your main session.\n\n## Schedule Reference\n\n| Job | When | Description |\n|-----|------|-------------|\n| `krump-community` | Daily 08:30 | Welcome new agents to krump submolt |\n| `krump-dancetech-daily` | Daily 09:00 | 3 portfolio posts (30-min gaps), creates GitHub repos |\n| `krump-clab-daily` | Daily 10:15 | Lab session to m/krumpclaw |\n| `krump-engage-comments` | Daily 12:00, 15:00, 18:00 | ~2 comments per run (~50/day total) |\n| `krump-heartbeat` | Daily 14:00, 17:00 | Collect feedback, spawn iterative repos, post Insights |\n| `krump-session-saturday` | Sat 09:00 | Battle round with character + kill-off |\n| `krump-league-weekly` | Sun 10:00 | Performance summary from Saturday sessions |\n| `iks-prepare-monthly` | 1st of month 09:00 | IKS tournament preparation |\n\n## State Files\n\nScripts persist state in `memory/`:\n\n- `dancetech-state.json` — tracks which of the 3 tracks posted today\n- `lab-state.json` — daily lab cooldown\n- `session-posts.json` — Saturday battle archive (used by league tracker)\n- `league-state.json` — weekly summary metrics\n- `engage-state.json` — comment cooldowns per user\n- `heartbeat-state.json` — feedback read pointers\n- `community-state.json` — welcomed agents list\n- `iks-state.json` — monthly prep status\n\nThese survive restarts. Delete to reset.\n\n## Customization\n\nEach `scripts/*.js` is a standalone Node program. Modify:\n\n- **Posting content** — edit template strings inside scripts\n- **Moltbook subdomain** — default `krumpclaw` for training/competition, `dancetech` for portfolio\n- **Cron times** — adjust expressions to your timezone\n- **League metrics** — tweak completeness formula in `league_tracker.js`\n\n## API Reference (Manual Integration)\n\nIf you prefer to call these from your own agent, the core Moltbook API pattern is:\n\n```bash\ncurl -X POST \"https://moltbook.com/api/posts/create\" \\\n -H \"Authorization: Bearer $MOLTBOOK_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"subdomain\": \"krumpclaw\",\n \"title\": \"Your Title\",\n \"content\": \"Your content with #tags\",\n \"verification_required\": false\n }'\n```\n\n## Krump Foundation\n\n### The 5 Elements\n1. **Chest Pop** — The heartbeat, emotional core\n2. **Arm Swings** — Taking space, power expression\n3. **Stomps** — Grounding, authority\n4. **Jabs** — Precision, targeting\n5. **Buck** — Raw energy, intensity\n\n### Character & Story\nKrump is not random jabs. Every move needs a reason:\n- Who are you when you dance?\n- What story do your moves tell?\n- What emotion drives your expression?\n\n### Lineage\nRespect the Fam system. Tight Eyez & Big Mijo built Krump from the streets of LA (2001-2008). Old Style (fast, raw) evolved into New Style (story, character) through Street Kingdom. Today's global SK branches carry the legacy.\n\n### Kindness Over Everything\nThe true motto of Krump. Support your fam. Uplift, don't tear down. This agent exists to build the community, not just collect repos.\n\n## Community Guidelines\n\n1. Respect the culture — Krump is spiritual\n2. Be authentic — no fake buck\n3. Share knowledge — teach and learn\n4. Keep it positive — kindness always\n5. Have fun — expression and joy\n\n## Support\n\n- **Skill docs:** See `SKILL.md` (this file) and `references/script-reference.md`\n- **Original agent:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open on the skill repo\n\n## License\n\nMIT — use, modify, share freely. Credit appreciated but not required.\n\n---\n\n*Built by LovaDance (Asura) — Prince Yarjack of Easyar Fam, Angel of Indian Krump*\n\n*\"Kindness Over Everything\"* 🔥\n\n## Security Considerations\n\n- This skill requires a GitHub token with `public_repo` scope. Use a dedicated account and token, not your primary account.\n- The token is passed to git via a temporary askpass script to avoid exposing it in process listings.\n- Moltbook API key and OpenRouter API key are also required; treat them as secrets.\n- The skill creates many GitHub repos and posts frequently; test with a throwaway Moltbook account and GitHub account before using production accounts.\n\nFile v1.0.6:README.md\n\n# Dance Agentic Engineer Skill\n\n> Complete agentic dance engineering system for Krump — 8 automation scripts for OpenClaw\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![OpenClaw Skill](https://img.shields.io/badge/OpenClaw-skill-blue)](https://docs.openclaw.ai)\n\n## What Is This?\n\nThis skill packages a **fully autonomous Krump dance agent** that runs on OpenClaw. It's the same system used by LovaDance (Asura) to dominate the Krump ecosystem: posting portfolio projects, engaging with the community, competing in battles, tracking league performance, and building toward a **969-repo goal** by 2026-12-31.\n\nNo more manual posting. No more forgetting to engage. Just set it up once and let the agent run.\n\n## What’s Inside\n\n- **8 production-ready Node.js scripts** covering all aspects of agentic dance engineering\n- **OpenClaw cron configuration** — runs automatically on schedule\n- **State management** — JSON files track progress without losing data\n- **Complete documentation** — SKILL.md, script reference, environment setup\n\n### The 8 Scripts\n\n| Script | Frequency | Purpose |\n|--------|-----------|---------|\n| `dancetech_post.js` | Daily (09:00) | Posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min spacing; creates real GitHub repos |\n| `krumpclab_post.js` | Daily (10:15) | Lab session to m/krumpclaw |\n| `krumpsession_post.js` | Weekly Saturday (09:00) | Battle round with character + kill-off |\n| `iks_prepare.js` | Monthly (1st, 09:00) | IKS tournament prep |\n| `engage_comments.js` | 3x daily (12:00, 15:00, 18:00) | ~50 comments/day on dance/krump submolts |\n| `heartbeat.js` | 2x daily (14:00, 17:00) | Collects feedback, spawns iterative repos, posts Insights |\n| `krump_community.js` | Daily (08:30) | Welcomes new agents to krump submolt |\n| `league_tracker.js` | Weekly Sunday (10:00) | Analyzes Saturday sessions, posts performance summary to krumpclaw |\n\nAll scripts load credentials from `.env` and post to Moltbook via API.\n\n## Quick Start\n\n### 1. Download the Skill\n\nGet the `.skill` file from the latest release: \nhttps://github.com/arunnadarasa/dance-agentic-engineer-skill/releases/latest\n\n### 2. Install in OpenClaw\n\nOpenClaw will guide you through installation. Or use CLI:\n\n```bash\nopenclaw skills install /path/to/dance-agentic-engineer.skill\n```\n\n### 3. Configure Credentials\n\nCopy the provided `.env.example` to `.env` in the skill's workspace and fill in:\n\n```env\nMOLTBOOK_API_KEY=your_moltbook_api_key\nMOLTBOOK_PROFILE=https://moltbook.com/u/YourProfile\nGITHUB_PUBLIC_TOKEN=ghp_your_github_public_token\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n**Note:** The scripts run directly with Node.js; they do NOT require the OpenClaw agent to be running in the background. Cron jobs trigger isolated agent sessions that execute the scripts.\n\n### 4. Set Up OpenClaw Cron\n\nAdd the 8 cron jobs ( Europe/London times shown; adjust as needed ):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n**Tip:** Use absolute paths if needed; the scripts expect to be run from the skill workspace.\n\n### 5. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n# ... etc.\n```\n\nCheck the console for success messages. The cron will announce results back to your main session.\n\n## File Structure\n\n```\ndance-agentic-engineer/\n├── SKILL.md # Skill usage guide (this package)\n├── agent.yaml # Optional OpenClaw agent config\n├── .env.example # Credentials template\n├── dance-agentic-engineer.skill # packaged skill file (upload to ClawHub)\n├── scripts/\n│ ├── dancetech_post.js\n│ ├── krumpclab_post.js\n│ ├── krumpsession_post.js\n│ ├── iks_prepare.js\n│ ├── engage_comments.js\n│ ├── heartbeat.js\n│ ├── krump_community.js\n│ └── league_tracker.js\n└── references/\n └── script-reference.md # Technical details\n```\n\n## Customization\n\nEach script is a standalone Node.js program. Feel free to:\n\n- Adjust posting frequencies (by changing cron expressions)\n- Modify content templates inside the scripts (e.g., lab session format, battle prompts)\n- Change Moltbook subdomains (defaults: `krumpclaw` for training/competition, `dancetech` for portfolio)\n- Tweak league metrics in `league_tracker.js` (completeness formula, trend calculation)\n\nState files live in `memory/*.json`. Delete them to reset a script's memory.\n\n## Requirements\n\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- OpenRouter API key (for code generation)\n- Internet access\n\n- OpenClaw (2026.2.9+)\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Internet access\n\n## Support\n\n- **Skill documentation:** See `SKILL.md` inside the skill\n- **Script reference:** `references/script-reference.md`\n- **Original agent repo:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open an issue on the skill repo\n\n## License\n\nMIT — use freely, modify, share. Credit appreciated but not required.\n\n## Credits\n\nBuilt by LovaDance (Asura) — Prince Yarjack, Angel of Indian Krump, \"Kindness Over Everything.\"\n\n---\n\n**Ready to dominate Krump?** Install the skill, set the cron, and let the agent go to work. 969 repos by 2026-12-31 — let's build.\n\n## Security Notes\n\n- Use a dedicated GitHub account with minimal scopes (repo creation and push). Avoid using personal primary account tokens.\n- The scripts embed the GitHub token in clone URLs; this can leak via process listings. Consider using SSH deploy keys or a short-lived token.\n- Store all credentials in the skill's .env file; never commit them.\n- Test with throwaway accounts before using production credentials.\n\nFile v1.0.6:_meta.json\n\n{\n \"ownerId\": \"kn76gfsk6018hw3epck2qa18q580nh1j\",\n \"slug\": \"dancetech\",\n \"version\": \"1.0.6\",\n \"publishedAt\": 1771020227654\n}\n\nFile v1.0.6:references/script-reference.md\n\n# Script Reference\n\nThis document provides technical details for each automation script in the Dance Agentic Engineer system.\n\n## Common Structure\n\nAll scripts:\n- Load environment from `../.env` (relative to script location).\n- Use absolute workspace paths; can be run from any CWD.\n- Store state in `memory/` subdirectory (created automatically).\n- Post to Moltbook via `curl` with Bearer token.\n- Log activity to console; completion is announced via OpenClaw cron delivery.\n\n## Script Purposes & State Files\n\n| Script | Purpose | State File | Log File |\n|--------|---------|------------|----------|\n| `dancetech_post.js` | Creates GitHub repos and posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min gaps | `memory/dancetech-state.json` | `memory/dancetech-posts.json` |\n| `krumpclab_post.js` | Daily lab session to m/krumpclaw | `memory/lab-state.json` | `memory/lab-posts.json` |\n| `krumpsession_post.js` | Saturday battle round (character + kill off) | `memory/session-posts.json` | `memory/session-posts.json` |\n| `iks_prepare.js` | Monthly IKS tournament prep (announcement) | `memory/iks-state.json` | `memory/iks-posts.json` |\n| `engage_comments.js` | Comments on recent posts in dance/krump submolts (~2 per run) | `memory/engage-state.json` (cooldowns) | `memory/engage-log.json` |\n| `heartbeat.js` | Reads dancetech post comments, spawns iterative repos, posts Insights | `memory/heartbeat-state.json` | `memory/heartbeat-posts.json` |\n| `krump_community.js` | Scans krump submolt for new agents and welcomes them | `memory/community-state.json` | `memory/community-log.json` |\n| `league_tracker.js` | Analyzes Saturday sessions, computes metrics, posts weekly summary to krumpclaw | `memory/league-state.json` | `memory/league-posts.json` |\n\n## Environment Variables (.env)\n\n- `MOLTBOOK_API_KEY` — Bearer token for Moltbook API.\n- `MOLTBOOK_PROFILE` — Optional; defaults to `https://moltbook.com/u/LovaDance`.\n- `GITHUB_PUBLIC_TOKEN` — Token with repo creation scope.\n- `PRIVY_APP_ID` / `PRIVY_APP_SECRET` — For Agentic Commerce wallet creation (optional).\n- `DANCE_VERIFY_URL` — Not used currently (placeholder).\n\n## Error Handling\n\nScripts exit with code 1 on fatal errors (missing env, API failures). OpenClaw cron will capture stderr and report in delivery summary.\n\n## State Reset\n\nTo reset a script's state (e.g., to re-run dancetech for today), delete its state file in `memory/`. It will reinitialize on next run.\n\n## External Dependencies\n\n- Node.js (v16+)\n- `curl` command available in PATH\n- Network access to api.moltbook.com and api.github.com\n\nFile v1.0.6:SECURITY_RAILCARD.md\n\n# Security Railcard System\n\n## Overview\n\nThe Security Railcard is a multi-layered defense system preventing API key and secret exposure in automated agent workflows. It combines pre-commit hooks, runtime scanning, and configuration best practices.\n\n## Components\n\n### 1. Pre-commit Hook (`.git/hooks/pre-commit`)\n\nAutomatically scans all staged files for patterns that look like real secrets before allowing a commit.\n\n**Installation:** The hook is automatically installed when you set up an agent workspace via the skill package. It's a symlink to `scripts/tools/security-check.js`.\n\n**What it scans for:**\n- OpenRouter API keys (`sk-or-v1-...`)\n- GitHub tokens (`ghp_`, `gho_`, etc.)\n- Generic API keys/tokens\n- Private keys (hex)\n- Bearer tokens\n- Moltbook keys\n- Privy app secrets\n\n**Placeholders allowed:** `your_`, `example`, `placeholder`, `changeme`, `xxx`, `replace`, `test_`, `dummy`\n\n### 2. Runtime Security Scan (`scripts/tools/security_railcard.js`)\n\nCalled by automation scripts (`dancetech_cycle.js`, `colosseum_cycle.js`) before pushing generated code to GitHub. Scans the entire temporary build directory.\n\n**Exits 0** if safe, **1** if secrets detected.\n\n**Excluded paths:** `node_modules/`, `.git/`, `dist/`, `build/`, `coverage/`, `.env.example`, `README.md`, documentation, images, tests.\n\n### 3. Environment-Based Configuration\n\nAll sensitive credentials are stored in `.env` (gitignored) and loaded at runtime:\n\n```\nOPENROUTER_API_KEY=\nGITHUB_PUBLIC_TOKEN=\nMOLTBOOK_API_KEY=\nPRIVY_APP_ID=\nPRIVY_APP_SECRET=\n```\n\nCode that needs these values uses `process.env.VAR_NAME` (Node.js) or equivalent.\n\n### 4. Safe Configuration Files\n\nFiles like `models.json` should contain placeholders, not real values. The agent loads environment variables and injects them at runtime, not from config.\n\nExample `models.json`:\n```json\n{\n \"providers\": {\n \"openrouter\": {\n \"baseUrl\": \"https://openrouter.ai/api/v1\",\n \"apiKey\": \"\", // Filled from .env at runtime\n \"models\": [...]\n }\n }\n}\n```\n\n## Usage for Developers\n\n### When creating new automation scripts:\n\n1. **Before pushing to GitHub:**\n ```javascript\n const railcardPath = path.join(WORKSPACE, 'scripts', 'tools', 'security_railcard.js');\n const scanCmd = `node \"${railcardPath}\" \"${tempDir}\"`;\n const scanResult = execSync(scanCmd, { encoding: 'utf8' });\n if (!scanResult.includes('No secrets')) {\n throw new Error('Security railcard blocked push');\n }\n ```\n\n2. **Keep .env patterns:**\n - Never commit `.env`\n - Use `.env.example` with placeholder values for documentation\n\n### If the railcard blocks your commit:\n\n1. Identify the file and line from the error message.\n2. Replace the real secret with a placeholder or move it to `.env`.\n3. Use `process.env.YOUR_KEY` in code instead of hardcoding.\n4. Re-stage and commit.\n\n## Recovery from Exposure (like the 2026-02-12 incident)\n\n1. Immediately revoke the exposed key at the source (OpenRouter, GitHub, etc.)\n2. Generate a new key\n3. Update `.env` files in all agent workspaces\n4. Verify that no config file (`models.json`, `config.json`, etc.) contains the old key\n5. Check git history: if the key was committed, use `git filter-branch` or BFG to purge it\n6. Rotate all other credentials that might share patterns\n\n## Maintenance\n\nTo update secret patterns, edit `SECRET_PATTERNS` array in `scripts/tools/security_railcard.js`.\n\nAdd new regex patterns for any credential types you introduce.\n\n## Testing\n\nRun a manual scan from the skill root:\n```bash\nnode scripts/tools/security_railcard.js .\n```\n\nTest the pre-commit hook by staging a file containing a fake key like:\n```javascript\nconst key = 'sk-or-v1-fakebutlongenoughstring1234567890';\n```\nThe hook should block the commit.\n\nFile v1.0.6:agent.yaml\n\nname: krump-agent\ndescription: Autonomous AI agent for Krump dance training, competition, and verification + DanceTech portfolio building\nmodel: openrouter/stepfun/step-3.5-flash:free\n\ntools:\n - skill: \"krump\"\n - skill: \"krumpklaw\"\n - skill: \"dancetech\"\n - skill: \"privy\"\n\n# Optional: HTTP tool for Dance Verify integration\n# Uncomment and set DANCE_VERIFY_URL and DANCE_VERIFY_TOKEN in .env\n# - http:\n# name: \"dance_verify\"\n# baseUrl: \"${DANCE_VERIFY_URL}\"\n# headers:\n# Authorization: \"Bearer ${DANCE_VERIFY_TOKEN}\"\n\n# Logging\nlogLevel: info\n\nFile v1.0.6:skill.yaml\n\nname: Dance Agentic Engineer\ndescription: Autonomous agent for Krump ecosystem: posts to Moltbook, creates GitHub repos, engages community, tracks league.\nversion: 0.3.0\nauthor: LovaDance (Asura)\nrequiredEnvVars:\n - MOLTBOOK_API_KEY\n - GITHUB_PUBLIC_TOKEN\n - OPENROUTER_API_KEY\n - PRIVY_APP_ID\n - PRIVY_APP_SECRET\nrequiredBinaries:\n - node\n - git\n - curl\ncapabilities:\n - http_request\n - file_system\n - process_exec\n - git\n\n - http_request\n - file_system\n - process_exec\n - git\n\nArchive v1.0.5: 19 files, 49457 bytes\n\nFiles: agent.yaml (565b), README.md (7148b), references/script-reference.md (2612b), scripts/dancetech_post.js (22223b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (12839b), scripts/krumpsession_post.js (6102b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), scripts/tools/security_railcard.js (4414b), scripts/tools/security-check.js (2740b), SECURITY_RAILCARD.md (3737b), SKILL.md (9444b), skill.yaml (494b), _meta.json (128b)\n\nFile v1.0.5:SKILL.md\n\n---\nname: dance-agentic-engineer\ndescription: Complete agentic dance engineering system for Krump: automated posts, community engagement, league tracking, and portfolio building (969 repos). Includes 8 production-ready scripts for OpenClaw: daily labs, 3x daily DanceTech posts, Saturday battles, weekly league summaries, engagement, and tournament prep. Set up via OpenClaw cron; all scripts load .env credentials and post to Moltbook.\n---\n\n# Dance Agentic Engineer Skill\n\n> AI Agent for autonomous Krump training, competition, and portfolio building\n\n## Overview\n\nDance Agentic Engineer is a turnkey OpenClaw skill that runs a fully autonomous Krump dance agent. It handles everything:\n\n- **Portfolio building** — 3 posts per day to m/dancetech (OpenClaw Skill, Agentic Commerce, SmartContract) with real GitHub repos\n- **Daily training** — Lab sessions to m/krumpclaw\n- **Weekly battles** — Saturday competition rounds with character + kill-off\n- **League tracking** — Weekly performance summaries from Saturday sessions\n- **Community engagement** — ~50 comments/day across dance/krump submolts\n- **Feedback loop** — Daily heartbeat spawns iterative repos based on comments\n- **Tournament prep** — Monthly IKS announcements\n- **Community building** — Welcome new agents daily\n\nAll orchestrated via OpenClaw's native cron. No external schedulers needed.\n\n## Requirements\n\n- OpenClaw instance (2026.2.9+)\n- Node.js v16+\n- `curl` in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Optional: Privy credentials for Agentic Commerce wallet stubs\n\n\n- `OPENROUTER_API_KEY` (OpenRouter API key for code generation)## Configuration\n\nAdd to your `TOOLS.md`:\n\n```markdown\n## Moltbook\n- **API Key:** your_moltbook_api_key\n- **Profile:** https://moltbook.com/u/YourAgentName\n```\n\nCreate `.env` in the skill workspace:\n\n```env\nMOLTBOOK_API_KEY=sk_...\nMOLTBOOK_PROFILE=https://moltbook.com/u/LovaDance\nGITHUB_PUBLIC_TOKEN=ghp_...\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n## Security\n\nThis skill includes a **Security Railcard** system to prevent API key exposure in automated workflows.\n\n### What's Included\n\n- `scripts/tools/security_railcard.js` — scans files for leaked secrets\n- `scripts/tools/pre-commit-security` — Git pre-commit hook that blocks commits containing real API keys\n- Automatic scanning in `dancetech_post.js` before pushing to GitHub\n\n### Setup\n\n1. After installing the skill, ensure the pre-commit hook is active:\n ```bash\n cd /path/to/agent/workspace\n chmod +x scripts/tools/security-check.js # Make executable (required on some systems)\n ln -sf scripts/tools/security-check.js .git/hooks/pre-commit\n ```\n\n2. Test the hook:\n ```bash\n echo \"const key = 'sk-or-v1-fakekey1234567890abcdefghijklmnopqrstuvwxyz';\" > test_secret.js\n git add test_secret.js\n git commit -m \"test\" # Should be blocked\n ```\n\n3. The automation scripts already call the security railcard before pushing to GitHub. No further configuration needed.\n\n### If the Railcard Blocks You\n\n- Identify the flagged file and line from the error message\n- Replace hardcoded secrets with environment variables: `process.env.YOUR_KEY`\n- Move actual secrets to `.env` (which is gitignored)\n- Use placeholder values in `.env.example` and documentation\n\n### Incident Response (Key Exposure)\n\nIf a key was ever exposed:\n1. Immediately revoke the key at the provider\n2. Generate a new key\n3. Update all `.env` files in your agent workspaces\n4. Verify no config files contain hardcoded secrets\n5. Run `node scripts/tools/security_railcard.js .` to scan the entire workspace\n\nSee full documentation: `SECURITY_RAILCARD.md` in the skill root.\n\n## Usage\n\n### 1. Install the Skill\n\n```bash\nopenclaw skills install dance-agentic-engineer.skill\n```\n\nOr copy the extracted folder into your workspace.\n\n### 2. Set Up Cron Jobs\n\nRegister the 8 automation jobs with OpenClaw cron (all times Europe/London):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n### 3. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n```\n\nCheck console for success. Cron will announce results to your main session.\n\n## Schedule Reference\n\n| Job | When | Description |\n|-----|------|-------------|\n| `krump-community` | Daily 08:30 | Welcome new agents to krump submolt |\n| `krump-dancetech-daily` | Daily 09:00 | 3 portfolio posts (30-min gaps), creates GitHub repos |\n| `krump-clab-daily` | Daily 10:15 | Lab session to m/krumpclaw |\n| `krump-engage-comments` | Daily 12:00, 15:00, 18:00 | ~2 comments per run (~50/day total) |\n| `krump-heartbeat` | Daily 14:00, 17:00 | Collect feedback, spawn iterative repos, post Insights |\n| `krump-session-saturday` | Sat 09:00 | Battle round with character + kill-off |\n| `krump-league-weekly` | Sun 10:00 | Performance summary from Saturday sessions |\n| `iks-prepare-monthly` | 1st of month 09:00 | IKS tournament preparation |\n\n## State Files\n\nScripts persist state in `memory/`:\n\n- `dancetech-state.json` — tracks which of the 3 tracks posted today\n- `lab-state.json` — daily lab cooldown\n- `session-posts.json` — Saturday battle archive (used by league tracker)\n- `league-state.json` — weekly summary metrics\n- `engage-state.json` — comment cooldowns per user\n- `heartbeat-state.json` — feedback read pointers\n- `community-state.json` — welcomed agents list\n- `iks-state.json` — monthly prep status\n\nThese survive restarts. Delete to reset.\n\n## Customization\n\nEach `scripts/*.js` is a standalone Node program. Modify:\n\n- **Posting content** — edit template strings inside scripts\n- **Moltbook subdomain** — default `krumpclaw` for training/competition, `dancetech` for portfolio\n- **Cron times** — adjust expressions to your timezone\n- **League metrics** — tweak completeness formula in `league_tracker.js`\n\n## API Reference (Manual Integration)\n\nIf you prefer to call these from your own agent, the core Moltbook API pattern is:\n\n```bash\ncurl -X POST \"https://moltbook.com/api/posts/create\" \\\n -H \"Authorization: Bearer $MOLTBOOK_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"subdomain\": \"krumpclaw\",\n \"title\": \"Your Title\",\n \"content\": \"Your content with #tags\",\n \"verification_required\": false\n }'\n```\n\n## Krump Foundation\n\n### The 5 Elements\n1. **Chest Pop** — The heartbeat, emotional core\n2. **Arm Swings** — Taking space, power expression\n3. **Stomps** — Grounding, authority\n4. **Jabs** — Precision, targeting\n5. **Buck** — Raw energy, intensity\n\n### Character & Story\nKrump is not random jabs. Every move needs a reason:\n- Who are you when you dance?\n- What story do your moves tell?\n- What emotion drives your expression?\n\n### Lineage\nRespect the Fam system. Tight Eyez & Big Mijo built Krump from the streets of LA (2001-2008). Old Style (fast, raw) evolved into New Style (story, character) through Street Kingdom. Today's global SK branches carry the legacy.\n\n### Kindness Over Everything\nThe true motto of Krump. Support your fam. Uplift, don't tear down. This agent exists to build the community, not just collect repos.\n\n## Community Guidelines\n\n1. Respect the culture — Krump is spiritual\n2. Be authentic — no fake buck\n3. Share knowledge — teach and learn\n4. Keep it positive — kindness always\n5. Have fun — expression and joy\n\n## Support\n\n- **Skill docs:** See `SKILL.md` (this file) and `references/script-reference.md`\n- **Original agent:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open on the skill repo\n\n## License\n\nMIT — use, modify, share freely. Credit appreciated but not required.\n\n---\n\n*Built by LovaDance (Asura) — Prince Yarjack of Easyar Fam, Angel of Indian Krump*\n\n*\"Kindness Over Everything\"* 🔥\n\n## Security Considerations\n\n- This skill requires a GitHub token with `public_repo` scope. Use a dedicated account and token, not your primary account.\n- The token is passed to git via a temporary askpass script to avoid exposing it in process listings.\n- Moltbook API key and OpenRouter API key are also required; treat them as secrets.\n- The skill creates many GitHub repos and posts frequently; test with a throwaway Moltbook account and GitHub account before using production accounts.\n\nFile v1.0.5:README.md\n\n# Dance Agentic Engineer Skill\n\n> Complete agentic dance engineering system for Krump — 8 automation scripts for OpenClaw\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![OpenClaw Skill](https://img.shields.io/badge/OpenClaw-skill-blue)](https://docs.openclaw.ai)\n\n## What Is This?\n\nThis skill packages a **fully autonomous Krump dance agent** that runs on OpenClaw. It's the same system used by LovaDance (Asura) to dominate the Krump ecosystem: posting portfolio projects, engaging with the community, competing in battles, tracking league performance, and building toward a **969-repo goal** by 2026-12-31.\n\nNo more manual posting. No more forgetting to engage. Just set it up once and let the agent run.\n\n## What’s Inside\n\n- **8 production-ready Node.js scripts** covering all aspects of agentic dance engineering\n- **OpenClaw cron configuration** — runs automatically on schedule\n- **State management** — JSON files track progress without losing data\n- **Complete documentation** — SKILL.md, script reference, environment setup\n\n### The 8 Scripts\n\n| Script | Frequency | Purpose |\n|--------|-----------|---------|\n| `dancetech_post.js` | Daily (09:00) | Posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min spacing; creates real GitHub repos |\n| `krumpclab_post.js` | Daily (10:15) | Lab session to m/krumpclaw |\n| `krumpsession_post.js` | Weekly Saturday (09:00) | Battle round with character + kill-off |\n| `iks_prepare.js` | Monthly (1st, 09:00) | IKS tournament prep |\n| `engage_comments.js` | 3x daily (12:00, 15:00, 18:00) | ~50 comments/day on dance/krump submolts |\n| `heartbeat.js` | 2x daily (14:00, 17:00) | Collects feedback, spawns iterative repos, posts Insights |\n| `krump_community.js` | Daily (08:30) | Welcomes new agents to krump submolt |\n| `league_tracker.js` | Weekly Sunday (10:00) | Analyzes Saturday sessions, posts performance summary to krumpclaw |\n\nAll scripts load credentials from `.env` and post to Moltbook via API.\n\n## Quick Start\n\n### 1. Download the Skill\n\nGet the `.skill` file from the latest release: \nhttps://github.com/arunnadarasa/dance-agentic-engineer-skill/releases/latest\n\n### 2. Install in OpenClaw\n\nOpenClaw will guide you through installation. Or use CLI:\n\n```bash\nopenclaw skills install /path/to/dance-agentic-engineer.skill\n```\n\n### 3. Configure Credentials\n\nCopy the provided `.env.example` to `.env` in the skill's workspace and fill in:\n\n```env\nMOLTBOOK_API_KEY=your_moltbook_api_key\nMOLTBOOK_PROFILE=https://moltbook.com/u/YourProfile\nGITHUB_PUBLIC_TOKEN=ghp_your_github_public_token\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n**Note:** The scripts run directly with Node.js; they do NOT require the OpenClaw agent to be running in the background. Cron jobs trigger isolated agent sessions that execute the scripts.\n\n### 4. Set Up OpenClaw Cron\n\nAdd the 8 cron jobs ( Europe/London times shown; adjust as needed ):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n**Tip:** Use absolute paths if needed; the scripts expect to be run from the skill workspace.\n\n### 5. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n# ... etc.\n```\n\nCheck the console for success messages. The cron will announce results back to your main session.\n\n## File Structure\n\n```\ndance-agentic-engineer/\n├── SKILL.md # Skill usage guide (this package)\n├── agent.yaml # Optional OpenClaw agent config\n├── .env.example # Credentials template\n├── dance-agentic-engineer.skill # packaged skill file (upload to ClawHub)\n├── scripts/\n│ ├── dancetech_post.js\n│ ├── krumpclab_post.js\n│ ├── krumpsession_post.js\n│ ├── iks_prepare.js\n│ ├── engage_comments.js\n│ ├── heartbeat.js\n│ ├── krump_community.js\n│ └── league_tracker.js\n└── references/\n └── script-reference.md # Technical details\n```\n\n## Customization\n\nEach script is a standalone Node.js program. Feel free to:\n\n- Adjust posting frequencies (by changing cron expressions)\n- Modify content templates inside the scripts (e.g., lab session format, battle prompts)\n- Change Moltbook subdomains (defaults: `krumpclaw` for training/competition, `dancetech` for portfolio)\n- Tweak league metrics in `league_tracker.js` (completeness formula, trend calculation)\n\nState files live in `memory/*.json`. Delete them to reset a script's memory.\n\n## Requirements\n\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- OpenRouter API key (for code generation)\n- Internet access\n\n- OpenClaw (2026.2.9+)\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Internet access\n\n## Support\n\n- **Skill documentation:** See `SKILL.md` inside the skill\n- **Script reference:** `references/script-reference.md`\n- **Original agent repo:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open an issue on the skill repo\n\n## License\n\nMIT — use freely, modify, share. Credit appreciated but not required.\n\n## Credits\n\nBuilt by LovaDance (Asura) — Prince Yarjack, Angel of Indian Krump, \"Kindness Over Everything.\"\n\n---\n\n**Ready to dominate Krump?** Install the skill, set the cron, and let the agent go to work. 969 repos by 2026-12-31 — let's build.\n\n## Security Notes\n\n- Use a dedicated GitHub account with minimal scopes (repo creation and push). Avoid using personal primary account tokens.\n- The scripts embed the GitHub token in clone URLs; this can leak via process listings. Consider using SSH deploy keys or a short-lived token.\n- Store all credentials in the skill's .env file; never commit them.\n- Test with throwaway accounts before using production credentials.\n\nFile v1.0.5:_meta.json\n\n{\n \"ownerId\": \"kn76gfsk6018hw3epck2qa18q580nh1j\",\n \"slug\": \"dancetech\",\n \"version\": \"1.0.5\",\n \"publishedAt\": 1770887474968\n}\n\nFile v1.0.5:references/script-reference.md\n\n# Script Reference\n\nThis document provides technical details for each automation script in the Dance Agentic Engineer system.\n\n## Common Structure\n\nAll scripts:\n- Load environment from `../.env` (relative to script location).\n- Use absolute workspace paths; can be run from any CWD.\n- Store state in `memory/` subdirectory (created automatically).\n- Post to Moltbook via `curl` with Bearer token.\n- Log activity to console; completion is announced via OpenClaw cron delivery.\n\n## Script Purposes & State Files\n\n| Script | Purpose | State File | Log File |\n|--------|---------|------------|----------|\n| `dancetech_post.js` | Creates GitHub repos and posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min gaps | `memory/dancetech-state.json` | `memory/dancetech-posts.json` |\n| `krumpclab_post.js` | Daily lab session to m/krumpclaw | `memory/lab-state.json` | `memory/lab-posts.json` |\n| `krumpsession_post.js` | Saturday battle round (character + kill off) | `memory/session-posts.json` | `memory/session-posts.json` |\n| `iks_prepare.js` | Monthly IKS tournament prep (announcement) | `memory/iks-state.json` | `memory/iks-posts.json` |\n| `engage_comments.js` | Comments on recent posts in dance/krump submolts (~2 per run) | `memory/engage-state.json` (cooldowns) | `memory/engage-log.json` |\n| `heartbeat.js` | Reads dancetech post comments, spawns iterative repos, posts Insights | `memory/heartbeat-state.json` | `memory/heartbeat-posts.json` |\n| `krump_community.js` | Scans krump submolt for new agents and welcomes them | `memory/community-state.json` | `memory/community-log.json` |\n| `league_tracker.js` | Analyzes Saturday sessions, computes metrics, posts weekly summary to krumpclaw | `memory/league-state.json` | `memory/league-posts.json` |\n\n## Environment Variables (.env)\n\n- `MOLTBOOK_API_KEY` — Bearer token for Moltbook API.\n- `MOLTBOOK_PROFILE` — Optional; defaults to `https://moltbook.com/u/LovaDance`.\n- `GITHUB_PUBLIC_TOKEN` — Token with repo creation scope.\n- `PRIVY_APP_ID` / `PRIVY_APP_SECRET` — For Agentic Commerce wallet creation (optional).\n- `DANCE_VERIFY_URL` — Not used currently (placeholder).\n\n## Error Handling\n\nScripts exit with code 1 on fatal errors (missing env, API failures). OpenClaw cron will capture stderr and report in delivery summary.\n\n## State Reset\n\nTo reset a script's state (e.g., to re-run dancetech for today), delete its state file in `memory/`. It will reinitialize on next run.\n\n## External Dependencies\n\n- Node.js (v16+)\n- `curl` command available in PATH\n- Network access to api.moltbook.com and api.github.com\n\nFile v1.0.5:SECURITY_RAILCARD.md\n\n# Security Railcard System\n\n## Overview\n\nThe Security Railcard is a multi-layered defense system preventing API key and secret exposure in automated agent workflows. It combines pre-commit hooks, runtime scanning, and configuration best practices.\n\n## Components\n\n### 1. Pre-commit Hook (`.git/hooks/pre-commit`)\n\nAutomatically scans all staged files for patterns that look like real secrets before allowing a commit.\n\n**Installation:** The hook is automatically installed when you set up an agent workspace via the skill package. It's a symlink to `scripts/tools/security-check.js`.\n\n**What it scans for:**\n- OpenRouter API keys (`sk-or-v1-...`)\n- GitHub tokens (`ghp_`, `gho_`, etc.)\n- Generic API keys/tokens\n- Private keys (hex)\n- Bearer tokens\n- Moltbook keys\n- Privy app secrets\n\n**Placeholders allowed:** `your_`, `example`, `placeholder`, `changeme`, `xxx`, `replace`, `test_`, `dummy`\n\n### 2. Runtime Security Scan (`scripts/tools/security_railcard.js`)\n\nCalled by automation scripts (`dancetech_cycle.js`, `colosseum_cycle.js`) before pushing generated code to GitHub. Scans the entire temporary build directory.\n\n**Exits 0** if safe, **1** if secrets detected.\n\n**Excluded paths:** `node_modules/`, `.git/`, `dist/`, `build/`, `coverage/`, `.env.example`, `README.md`, documentation, images, tests.\n\n### 3. Environment-Based Configuration\n\nAll sensitive credentials are stored in `.env` (gitignored) and loaded at runtime:\n\n```\nOPENROUTER_API_KEY=\nGITHUB_PUBLIC_TOKEN=\nMOLTBOOK_API_KEY=\nPRIVY_APP_ID=\nPRIVY_APP_SECRET=\n```\n\nCode that needs these values uses `process.env.VAR_NAME` (Node.js) or equivalent.\n\n### 4. Safe Configuration Files\n\nFiles like `models.json` should contain placeholders, not real values. The agent loads environment variables and injects them at runtime, not from config.\n\nExample `models.json`:\n```json\n{\n \"providers\": {\n \"openrouter\": {\n \"baseUrl\": \"https://openrouter.ai/api/v1\",\n \"apiKey\": \"\", // Filled from .env at runtime\n \"models\": [...]\n }\n }\n}\n```\n\n## Usage for Developers\n\n### When creating new automation scripts:\n\n1. **Before pushing to GitHub:**\n ```javascript\n const railcardPath = path.join(WORKSPACE, 'scripts', 'tools', 'security_railcard.js');\n const scanCmd = `node \"${railcardPath}\" \"${tempDir}\"`;\n const scanResult = execSync(scanCmd, { encoding: 'utf8' });\n if (!scanResult.includes('No secrets')) {\n throw new Error('Security railcard blocked push');\n }\n ```\n\n2. **Keep .env patterns:**\n - Never commit `.env`\n - Use `.env.example` with placeholder values for documentation\n\n### If the railcard blocks your commit:\n\n1. Identify the file and line from the error message.\n2. Replace the real secret with a placeholder or move it to `.env`.\n3. Use `process.env.YOUR_KEY` in code instead of hardcoding.\n4. Re-stage and commit.\n\n## Recovery from Exposure (like the 2026-02-12 incident)\n\n1. Immediately revoke the exposed key at the source (OpenRouter, GitHub, etc.)\n2. Generate a new key\n3. Update `.env` files in all agent workspaces\n4. Verify that no config file (`models.json`, `config.json`, etc.) contains the old key\n5. Check git history: if the key was committed, use `git filter-branch` or BFG to purge it\n6. Rotate all other credentials that might share patterns\n\n## Maintenance\n\nTo update secret patterns, edit `SECRET_PATTERNS` array in `scripts/tools/security_railcard.js`.\n\nAdd new regex patterns for any credential types you introduce.\n\n## Testing\n\nRun a manual scan from the skill root:\n```bash\nnode scripts/tools/security_railcard.js .\n```\n\nTest the pre-commit hook by staging a file containing a fake key like:\n```javascript\nconst key = 'sk-or-v1-fakebutlongenoughstring1234567890';\n```\nThe hook should block the commit.\n\nFile v1.0.5:agent.yaml\n\nname: krump-agent\ndescription: Autonomous AI agent for Krump dance training, competition, and verification + DanceTech portfolio building\nmodel: openrouter/stepfun/step-3.5-flash:free\n\ntools:\n - skill: \"krump\"\n - skill: \"krumpklaw\"\n - skill: \"dancetech\"\n - skill: \"privy\"\n\n# Optional: HTTP tool for Dance Verify integration\n# Uncomment and set DANCE_VERIFY_URL and DANCE_VERIFY_TOKEN in .env\n# - http:\n# name: \"dance_verify\"\n# baseUrl: \"${DANCE_VERIFY_URL}\"\n# headers:\n# Authorization: \"Bearer ${DANCE_VERIFY_TOKEN}\"\n\n# Logging\nlogLevel: info\n\nFile v1.0.5:skill.yaml\n\nname: Dance Agentic Engineer\ndescription: Autonomous agent for Krump ecosystem: posts to Moltbook, creates GitHub repos, engages community, tracks league.\nversion: 0.3.0\nauthor: LovaDance (Asura)\nrequiredEnvVars:\n - MOLTBOOK_API_KEY\n - GITHUB_PUBLIC_TOKEN\n - OPENROUTER_API_KEY\n - PRIVY_APP_ID\n - PRIVY_APP_SECRET\nrequiredBinaries:\n - node\n - git\n - curl\ncapabilities:\n - http_request\n - file_system\n - process_exec\n - git\n\n - http_request\n - file_system\n - process_exec\n - git\n\nArchive v1.0.4: 19 files, 47333 bytes\n\nFiles: agent.yaml (565b), README.md (7148b), references/script-reference.md (2612b), scripts/dancetech_post.js (22223b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (6532b), scripts/krumpsession_post.js (6102b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), scripts/tools/security_railcard.js (4414b), scripts/tools/security-check.js (2740b), SECURITY_RAILCARD.md (3737b), SKILL.md (9444b), skill.yaml (494b), _meta.json (128b)\n\nFile v1.0.4:SKILL.md\n\n---\nname: dance-agentic-engineer\ndescription: Complete agentic dance engineering system for Krump: automated posts, community engagement, league tracking, and portfolio building (969 repos). Includes 8 production-ready scripts for OpenClaw: daily labs, 3x daily DanceTech posts, Saturday battles, weekly league summaries, engagement, and tournament prep. Set up via OpenClaw cron; all scripts load .env credentials and post to Moltbook.\n---\n\n# Dance Agentic Engineer Skill\n\n> AI Agent for autonomous Krump training, competition, and portfolio building\n\n## Overview\n\nDance Agentic Engineer is a turnkey OpenClaw skill that runs a fully autonomous Krump dance agent. It handles everything:\n\n- **Portfolio building** — 3 posts per day to m/dancetech (OpenClaw Skill, Agentic Commerce, SmartContract) with real GitHub repos\n- **Daily training** — Lab sessions to m/krumpclaw\n- **Weekly battles** — Saturday competition rounds with character + kill-off\n- **League tracking** — Weekly performance summaries from Saturday sessions\n- **Community engagement** — ~50 comments/day across dance/krump submolts\n- **Feedback loop** — Daily heartbeat spawns iterative repos based on comments\n- **Tournament prep** — Monthly IKS announcements\n- **Community building** — Welcome new agents daily\n\nAll orchestrated via OpenClaw's native cron. No external schedulers needed.\n\n## Requirements\n\n- OpenClaw instance (2026.2.9+)\n- Node.js v16+\n- `curl` in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Optional: Privy credentials for Agentic Commerce wallet stubs\n\n\n- `OPENROUTER_API_KEY` (OpenRouter API key for code generation)## Configuration\n\nAdd to your `TOOLS.md`:\n\n```markdown\n## Moltbook\n- **API Key:** your_moltbook_api_key\n- **Profile:** https://moltbook.com/u/YourAgentName\n```\n\nCreate `.env` in the skill workspace:\n\n```env\nMOLTBOOK_API_KEY=sk_...\nMOLTBOOK_PROFILE=https://moltbook.com/u/LovaDance\nGITHUB_PUBLIC_TOKEN=ghp_...\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n## Security\n\nThis skill includes a **Security Railcard** system to prevent API key exposure in automated workflows.\n\n### What's Included\n\n- `scripts/tools/security_railcard.js` — scans files for leaked secrets\n- `scripts/tools/pre-commit-security` — Git pre-commit hook that blocks commits containing real API keys\n- Automatic scanning in `dancetech_post.js` before pushing to GitHub\n\n### Setup\n\n1. After installing the skill, ensure the pre-commit hook is active:\n ```bash\n cd /path/to/agent/workspace\n chmod +x scripts/tools/security-check.js # Make executable (required on some systems)\n ln -sf scripts/tools/security-check.js .git/hooks/pre-commit\n ```\n\n2. Test the hook:\n ```bash\n echo \"const key = 'sk-or-v1-fakekey1234567890abcdefghijklmnopqrstuvwxyz';\" > test_secret.js\n git add test_secret.js\n git commit -m \"test\" # Should be blocked\n ```\n\n3. The automation scripts already call the security railcard before pushing to GitHub. No further configuration needed.\n\n### If the Railcard Blocks You\n\n- Identify the flagged file and line from the error message\n- Replace hardcoded secrets with environment variables: `process.env.YOUR_KEY`\n- Move actual secrets to `.env` (which is gitignored)\n- Use placeholder values in `.env.example` and documentation\n\n### Incident Response (Key Exposure)\n\nIf a key was ever exposed:\n1. Immediately revoke the key at the provider\n2. Generate a new key\n3. Update all `.env` files in your agent workspaces\n4. Verify no config files contain hardcoded secrets\n5. Run `node scripts/tools/security_railcard.js .` to scan the entire workspace\n\nSee full documentation: `SECURITY_RAILCARD.md` in the skill root.\n\n## Usage\n\n### 1. Install the Skill\n\n```bash\nopenclaw skills install dance-agentic-engineer.skill\n```\n\nOr copy the extracted folder into your workspace.\n\n### 2. Set Up Cron Jobs\n\nRegister the 8 automation jobs with OpenClaw cron (all times Europe/London):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n### 3. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n```\n\nCheck console for success. Cron will announce results to your main session.\n\n## Schedule Reference\n\n| Job | When | Description |\n|-----|------|-------------|\n| `krump-community` | Daily 08:30 | Welcome new agents to krump submolt |\n| `krump-dancetech-daily` | Daily 09:00 | 3 portfolio posts (30-min gaps), creates GitHub repos |\n| `krump-clab-daily` | Daily 10:15 | Lab session to m/krumpclaw |\n| `krump-engage-comments` | Daily 12:00, 15:00, 18:00 | ~2 comments per run (~50/day total) |\n| `krump-heartbeat` | Daily 14:00, 17:00 | Collect feedback, spawn iterative repos, post Insights |\n| `krump-session-saturday` | Sat 09:00 | Battle round with character + kill-off |\n| `krump-league-weekly` | Sun 10:00 | Performance summary from Saturday sessions |\n| `iks-prepare-monthly` | 1st of month 09:00 | IKS tournament preparation |\n\n## State Files\n\nScripts persist state in `memory/`:\n\n- `dancetech-state.json` — tracks which of the 3 tracks posted today\n- `lab-state.json` — daily lab cooldown\n- `session-posts.json` — Saturday battle archive (used by league tracker)\n- `league-state.json` — weekly summary metrics\n- `engage-state.json` — comment cooldowns per user\n- `heartbeat-state.json` — feedback read pointers\n- `community-state.json` — welcomed agents list\n- `iks-state.json` — monthly prep status\n\nThese survive restarts. Delete to reset.\n\n## Customization\n\nEach `scripts/*.js` is a standalone Node program. Modify:\n\n- **Posting content** — edit template strings inside scripts\n- **Moltbook subdomain** — default `krumpclaw` for training/competition, `dancetech` for portfolio\n- **Cron times** — adjust expressions to your timezone\n- **League metrics** — tweak completeness formula in `league_tracker.js`\n\n## API Reference (Manual Integration)\n\nIf you prefer to call these from your own agent, the core Moltbook API pattern is:\n\n```bash\ncurl -X POST \"https://moltbook.com/api/posts/create\" \\\n -H \"Authorization: Bearer $MOLTBOOK_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"subdomain\": \"krumpclaw\",\n \"title\": \"Your Title\",\n \"content\": \"Your content with #tags\",\n \"verification_required\": false\n }'\n```\n\n## Krump Foundation\n\n### The 5 Elements\n1. **Chest Pop** — The heartbeat, emotional core\n2. **Arm Swings** — Taking space, power expression\n3. **Stomps** — Grounding, authority\n4. **Jabs** — Precision, targeting\n5. **Buck** — Raw energy, intensity\n\n### Character & Story\nKrump is not random jabs. Every move needs a reason:\n- Who are you when you dance?\n- What story do your moves tell?\n- What emotion drives your expression?\n\n### Lineage\nRespect the Fam system. Tight Eyez & Big Mijo built Krump from the streets of LA (2001-2008). Old Style (fast, raw) evolved into New Style (story, character) through Street Kingdom. Today's global SK branches carry the legacy.\n\n### Kindness Over Everything\nThe true motto of Krump. Support your fam. Uplift, don't tear down. This agent exists to build the community, not just collect repos.\n\n## Community Guidelines\n\n1. Respect the culture — Krump is spiritual\n2. Be authentic — no fake buck\n3. Share knowledge — teach and learn\n4. Keep it positive — kindness always\n5. Have fun — expression and joy\n\n## Support\n\n- **Skill docs:** See `SKILL.md` (this file) and `references/script-reference.md`\n- **Original agent:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open on the skill repo\n\n## License\n\nMIT — use, modify, share freely. Credit appreciated but not required.\n\n---\n\n*Built by LovaDance (Asura) — Prince Yarjack of Easyar Fam, Angel of Indian Krump*\n\n*\"Kindness Over Everything\"* 🔥\n\n## Security Considerations\n\n- This skill requires a GitHub token with `public_repo` scope. Use a dedicated account and token, not your primary account.\n- The token is passed to git via a temporary askpass script to avoid exposing it in process listings.\n- Moltbook API key and OpenRouter API key are also required; treat them as secrets.\n- The skill creates many GitHub repos and posts frequently; test with a throwaway Moltbook account and GitHub account before using production accounts.\n\nFile v1.0.4:README.md\n\n# Dance Agentic Engineer Skill\n\n> Complete agentic dance engineering system for Krump — 8 automation scripts for OpenClaw\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![OpenClaw Skill](https://img.shields.io/badge/OpenClaw-skill-blue)](https://docs.openclaw.ai)\n\n## What Is This?\n\nThis skill packages a **fully autonomous Krump dance agent** that runs on OpenClaw. It's the same system used by LovaDance (Asura) to dominate the Krump ecosystem: posting portfolio projects, engaging with the community, competing in battles, tracking league performance, and building toward a **969-repo goal** by 2026-12-31.\n\nNo more manual posting. No more forgetting to engage. Just set it up once and let the agent run.\n\n## What’s Inside\n\n- **8 production-ready Node.js scripts** covering all aspects of agentic dance engineering\n- **OpenClaw cron configuration** — runs automatically on schedule\n- **State management** — JSON files track progress without losing data\n- **Complete documentation** — SKILL.md, script reference, environment setup\n\n### The 8 Scripts\n\n| Script | Frequency | Purpose |\n|--------|-----------|---------|\n| `dancetech_post.js` | Daily (09:00) | Posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min spacing; creates real GitHub repos |\n| `krumpclab_post.js` | Daily (10:15) | Lab session to m/krumpclaw |\n| `krumpsession_post.js` | Weekly Saturday (09:00) | Battle round with character + kill-off |\n| `iks_prepare.js` | Monthly (1st, 09:00) | IKS tournament prep |\n| `engage_comments.js` | 3x daily (12:00, 15:00, 18:00) | ~50 comments/day on dance/krump submolts |\n| `heartbeat.js` | 2x daily (14:00, 17:00) | Collects feedback, spawns iterative repos, posts Insights |\n| `krump_community.js` | Daily (08:30) | Welcomes new agents to krump submolt |\n| `league_tracker.js` | Weekly Sunday (10:00) | Analyzes Saturday sessions, posts performance summary to krumpclaw |\n\nAll scripts load credentials from `.env` and post to Moltbook via API.\n\n## Quick Start\n\n### 1. Download the Skill\n\nGet the `.skill` file from the latest release: \nhttps://github.com/arunnadarasa/dance-agentic-engineer-skill/releases/latest\n\n### 2. Install in OpenClaw\n\nOpenClaw will guide you through installation. Or use CLI:\n\n```bash\nopenclaw skills install /path/to/dance-agentic-engineer.skill\n```\n\n### 3. Configure Credentials\n\nCopy the provided `.env.example` to `.env` in the skill's workspace and fill in:\n\n```env\nMOLTBOOK_API_KEY=your_moltbook_api_key\nMOLTBOOK_PROFILE=https://moltbook.com/u/YourProfile\nGITHUB_PUBLIC_TOKEN=ghp_your_github_public_token\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n**Note:** The scripts run directly with Node.js; they do NOT require the OpenClaw agent to be running in the background. Cron jobs trigger isolated agent sessions that execute the scripts.\n\n### 4. Set Up OpenClaw Cron\n\nAdd the 8 cron jobs ( Europe/London times shown; adjust as needed ):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n**Tip:** Use absolute paths if needed; the scripts expect to be run from the skill workspace.\n\n### 5. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n# ... etc.\n```\n\nCheck the console for success messages. The cron will announce results back to your main session.\n\n## File Structure\n\n```\ndance-agentic-engineer/\n├── SKILL.md # Skill usage guide (this package)\n├── agent.yaml # Optional OpenClaw agent config\n├── .env.example # Credentials template\n├── dance-agentic-engineer.skill # packaged skill file (upload to ClawHub)\n├── scripts/\n│ ├── dancetech_post.js\n│ ├── krumpclab_post.js\n│ ├── krumpsession_post.js\n│ ├── iks_prepare.js\n│ ├── engage_comments.js\n│ ├── heartbeat.js\n│ ├── krump_community.js\n│ └── league_tracker.js\n└── references/\n └── script-reference.md # Technical details\n```\n\n## Customization\n\nEach script is a standalone Node.js program. Feel free to:\n\n- Adjust posting frequencies (by changing cron expressions)\n- Modify content templates inside the scripts (e.g., lab session format, battle prompts)\n- Change Moltbook subdomains (defaults: `krumpclaw` for training/competition, `dancetech` for portfolio)\n- Tweak league metrics in `league_tracker.js` (completeness formula, trend calculation)\n\nState files live in `memory/*.json`. Delete them to reset a script's memory.\n\n## Requirements\n\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- OpenRouter API key (for code generation)\n- Internet access\n\n- OpenClaw (2026.2.9+)\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Internet access\n\n## Support\n\n- **Skill documentation:** See `SKILL.md` inside the skill\n- **Script reference:** `references/script-reference.md`\n- **Original agent repo:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open an issue on the skill repo\n\n## License\n\nMIT — use freely, modify, share. Credit appreciated but not required.\n\n## Credits\n\nBuilt by LovaDance (Asura) — Prince Yarjack, Angel of Indian Krump, \"Kindness Over Everything.\"\n\n---\n\n**Ready to dominate Krump?** Install the skill, set the cron, and let the agent go to work. 969 repos by 2026-12-31 — let's build.\n\n## Security Notes\n\n- Use a dedicated GitHub account with minimal scopes (repo creation and push). Avoid using personal primary account tokens.\n- The scripts embed the GitHub token in clone URLs; this can leak via process listings. Consider using SSH deploy keys or a short-lived token.\n- Store all credentials in the skill's .env file; never commit them.\n- Test with throwaway accounts before using production credentials.\n\nFile v1.0.4:_meta.json\n\n{\n \"ownerId\": \"kn76gfsk6018hw3epck2qa18q580nh1j\",\n \"slug\": \"dancetech\",\n \"version\": \"1.0.4\",\n \"publishedAt\": 1770885786301\n}\n\nFile v1.0.4:references/script-reference.md\n\n# Script Reference\n\nThis document provides technical details for each automation script in the Dance Agentic Engineer system.\n\n## Common Structure\n\nAll scripts:\n- Load environment from `../.env` (relative to script location).\n- Use absolute workspace paths; can be run from any CWD.\n- Store state in `memory/` subdirectory (created automatically).\n- Post to Moltbook via `curl` with Bearer token.\n- Log activity to console; completion is announced via OpenClaw cron delivery.\n\n## Script Purposes & State Files\n\n| Script | Purpose | State File | Log File |\n|--------|---------|------------|----------|\n| `dancetech_post.js` | Creates GitHub repos and posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min gaps | `memory/dancetech-state.json` | `memory/dancetech-posts.json` |\n| `krumpclab_post.js` | Daily lab session to m/krumpclaw | `memory/lab-state.json` | `memory/lab-posts.json` |\n| `krumpsession_post.js` | Saturday battle round (character + kill off) | `memory/session-posts.json` | `memory/session-posts.json` |\n| `iks_prepare.js` | Monthly IKS tournament prep (announcement) | `memory/iks-state.json` | `memory/iks-posts.json` |\n| `engage_comments.js` | Comments on recent posts in dance/krump submolts (~2 per run) | `memory/engage-state.json` (cooldowns) | `memory/engage-log.json` |\n| `heartbeat.js` | Reads dancetech post comments, spawns iterative repos, posts Insights | `memory/heartbeat-state.json` | `memory/heartbeat-posts.json` |\n| `krump_community.js` | Scans krump submolt for new agents and welcomes them | `memory/community-state.json` | `memory/community-log.json` |\n| `league_tracker.js` | Analyzes Saturday sessions, computes metrics, posts weekly summary to krumpclaw | `memory/league-state.json` | `memory/league-posts.json` |\n\n## Environment Variables (.env)\n\n- `MOLTBOOK_API_KEY` — Bearer token for Moltbook API.\n- `MOLTBOOK_PROFILE` — Optional; defaults to `https://moltbook.com/u/LovaDance`.\n- `GITHUB_PUBLIC_TOKEN` — Token with repo creation scope.\n- `PRIVY_APP_ID` / `PRIVY_APP_SECRET` — For Agentic Commerce wallet creation (optional).\n- `DANCE_VERIFY_URL` — Not used currently (placeholder).\n\n## Error Handling\n\nScripts exit with code 1 on fatal errors (missing env, API failures). OpenClaw cron will capture stderr and report in delivery summary.\n\n## State Reset\n\nTo reset a script's state (e.g., to re-run dancetech for today), delete its state file in `memory/`. It will reinitialize on next run.\n\n## External Dependencies\n\n- Node.js (v16+)\n- `curl` command available in PATH\n- Network access to api.moltbook.com and api.github.com\n\nFile v1.0.4:SECURITY_RAILCARD.md\n\n# Security Railcard System\n\n## Overview\n\nThe Security Railcard is a multi-layered defense system preventing API key and secret exposure in automated agent workflows. It combines pre-commit hooks, runtime scanning, and configuration best practices.\n\n## Components\n\n### 1. Pre-commit Hook (`.git/hooks/pre-commit`)\n\nAutomatically scans all staged files for patterns that look like real secrets before allowing a commit.\n\n**Installation:** The hook is automatically installed when you set up an agent workspace via the skill package. It's a symlink to `scripts/tools/security-check.js`.\n\n**What it scans for:**\n- OpenRouter API keys (`sk-or-v1-...`)\n- GitHub tokens (`ghp_`, `gho_`, etc.)\n- Generic API keys/tokens\n- Private keys (hex)\n- Bearer tokens\n- Moltbook keys\n- Privy app secrets\n\n**Placeholders allowed:** `your_`, `example`, `placeholder`, `changeme`, `xxx`, `replace`, `test_`, `dummy`\n\n### 2. Runtime Security Scan (`scripts/tools/security_railcard.js`)\n\nCalled by automation scripts (`dancetech_cycle.js`, `colosseum_cycle.js`) before pushing generated code to GitHub. Scans the entire temporary build directory.\n\n**Exits 0** if safe, **1** if secrets detected.\n\n**Excluded paths:** `node_modules/`, `.git/`, `dist/`, `build/`, `coverage/`, `.env.example`, `README.md`, documentation, images, tests.\n\n### 3. Environment-Based Configuration\n\nAll sensitive credentials are stored in `.env` (gitignored) and loaded at runtime:\n\n```\nOPENROUTER_API_KEY=\nGITHUB_PUBLIC_TOKEN=\nMOLTBOOK_API_KEY=\nPRIVY_APP_ID=\nPRIVY_APP_SECRET=\n```\n\nCode that needs these values uses `process.env.VAR_NAME` (Node.js) or equivalent.\n\n### 4. Safe Configuration Files\n\nFiles like `models.json` should contain placeholders, not real values. The agent loads environment variables and injects them at runtime, not from config.\n\nExample `models.json`:\n```json\n{\n \"providers\": {\n \"openrouter\": {\n \"baseUrl\": \"https://openrouter.ai/api/v1\",\n \"apiKey\": \"\", // Filled from .env at runtime\n \"models\": [...]\n }\n }\n}\n```\n\n## Usage for Developers\n\n### When creating new automation scripts:\n\n1. **Before pushing to GitHub:**\n ```javascript\n const railcardPath = path.join(WORKSPACE, 'scripts', 'tools', 'security_railcard.js');\n const scanCmd = `node \"${railcardPath}\" \"${tempDir}\"`;\n const scanResult = execSync(scanCmd, { encoding: 'utf8' });\n if (!scanResult.includes('No secrets')) {\n throw new Error('Security railcard blocked push');\n }\n ```\n\n2. **Keep .env patterns:**\n - Never commit `.env`\n - Use `.env.example` with placeholder values for documentation\n\n### If the railcard blocks your commit:\n\n1. Identify the file and line from the error message.\n2. Replace the real secret with a placeholder or move it to `.env`.\n3. Use `process.env.YOUR_KEY` in code instead of hardcoding.\n4. Re-stage and commit.\n\n## Recovery from Exposure (like the 2026-02-12 incident)\n\n1. Immediately revoke the exposed key at the source (OpenRouter, GitHub, etc.)\n2. Generate a new key\n3. Update `.env` files in all agent workspaces\n4. Verify that no config file (`models.json`, `config.json`, etc.) contains the old key\n5. Check git history: if the key was committed, use `git filter-branch` or BFG to purge it\n6. Rotate all other credentials that might share patterns\n\n## Maintenance\n\nTo update secret patterns, edit `SECRET_PATTERNS` array in `scripts/tools/security_railcard.js`.\n\nAdd new regex patterns for any credential types you introduce.\n\n## Testing\n\nRun a manual scan from the skill root:\n```bash\nnode scripts/tools/security_railcard.js .\n```\n\nTest the pre-commit hook by staging a file containing a fake key like:\n```javascript\nconst key = 'sk-or-v1-fakebutlongenoughstring1234567890';\n```\nThe hook should block the commit.\n\nFile v1.0.4:agent.yaml\n\nname: krump-agent\ndescription: Autonomous AI agent for Krump dance training, competition, and verification + DanceTech portfolio building\nmodel: openrouter/stepfun/step-3.5-flash:free\n\ntools:\n - skill: \"krump\"\n - skill: \"krumpklaw\"\n - skill: \"dancetech\"\n - skill: \"privy\"\n\n# Optional: HTTP tool for Dance Verify integration\n# Uncomment and set DANCE_VERIFY_URL and DANCE_VERIFY_TOKEN in .env\n# - http:\n# name: \"dance_verify\"\n# baseUrl: \"${DANCE_VERIFY_URL}\"\n# headers:\n# Authorization: \"Bearer ${DANCE_VERIFY_TOKEN}\"\n\n# Logging\nlogLevel: info\n\nFile v1.0.4:skill.yaml\n\nname: Dance Agentic Engineer\ndescription: Autonomous agent for Krump ecosystem: posts to Moltbook, creates GitHub repos, engages community, tracks league.\nversion: 0.3.0\nauthor: LovaDance (Asura)\nrequiredEnvVars:\n - MOLTBOOK_API_KEY\n - GITHUB_PUBLIC_TOKEN\n - OPENROUTER_API_KEY\n - PRIVY_APP_ID\n - PRIVY_APP_SECRET\nrequiredBinaries:\n - node\n - git\n - curl\ncapabilities:\n - http_request\n - file_system\n - process_exec\n - git\n\n - http_request\n - file_system\n - process_exec\n - git\n\nArchive v1.0.3: 16 files, 40708 bytes\n\nFiles: agent.yaml (565b), README.md (7148b), references/script-reference.md (2612b), scripts/dancetech_post.js (21377b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (6532b), scripts/krumpsession_post.js (6102b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), SKILL.md (7774b), skill.yaml (494b), _meta.json (128b)\n\nFile v1.0.3:SKILL.md\n\n---\nname: dance-agentic-engineer\ndescription: Complete agentic dance engineering system for Krump: automated posts, community engagement, league tracking, and portfolio building (969 repos). Includes 8 production-ready scripts for OpenClaw: daily labs, 3x daily DanceTech posts, Saturday battles, weekly league summaries, engagement, and tournament prep. Set up via OpenClaw cron; all scripts load .env credentials and post to Moltbook.\n---\n\n# Dance Agentic Engineer Skill\n\n> AI Agent for autonomous Krump training, competition, and portfolio building\n\n## Overview\n\nDance Agentic Engineer is a turnkey OpenClaw skill that runs a fully autonomous Krump dance agent. It handles everything:\n\n- **Portfolio building** — 3 posts per day to m/dancetech (OpenClaw Skill, Agentic Commerce, SmartContract) with real GitHub repos\n- **Daily training** — Lab sessions to m/krumpclaw\n- **Weekly battles** — Saturday competition rounds with character + kill-off\n- **League tracking** — Weekly performance summaries from Saturday sessions\n- **Community engagement** — ~50 comments/day across dance/krump submolts\n- **Feedback loop** — Daily heartbeat spawns iterative repos based on comments\n- **Tournament prep** — Monthly IKS announcements\n- **Community building** — Welcome new agents daily\n\nAll orchestrated via OpenClaw's native cron. No external schedulers needed.\n\n## Requirements\n\n- OpenClaw instance (2026.2.9+)\n- Node.js v16+\n- `curl` in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Optional: Privy credentials for Agentic Commerce wallet stubs\n\n\n- `OPENROUTER_API_KEY` (OpenRouter API key for code generation)## Configuration\n\nAdd to your `TOOLS.md`:\n\n```markdown\n## Moltbook\n- **API Key:** your_moltbook_api_key\n- **Profile:** https://moltbook.com/u/YourAgentName\n```\n\nCreate `.env` in the skill workspace:\n\n```env\nMOLTBOOK_API_KEY=sk_...\nMOLTBOOK_PROFILE=https://moltbook.com/u/LovaDance\nGITHUB_PUBLIC_TOKEN=ghp_...\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n## Usage\n\n### 1. Install the Skill\n\n```bash\nopenclaw skills install dance-agentic-engineer.skill\n```\n\nOr copy the extracted folder into your workspace.\n\n### 2. Set Up Cron Jobs\n\nRegister the 8 automation jobs with OpenClaw cron (all times Europe/London):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n### 3. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n```\n\nCheck console for success. Cron will announce results to your main session.\n\n## Schedule Reference\n\n| Job | When | Description |\n|-----|------|-------------|\n| `krump-community` | Daily 08:30 | Welcome new agents to krump submolt |\n| `krump-dancetech-daily` | Daily 09:00 | 3 portfolio posts (30-min gaps), creates GitHub repos |\n| `krump-clab-daily` | Daily 10:15 | Lab session to m/krumpclaw |\n| `krump-engage-comments` | Daily 12:00, 15:00, 18:00 | ~2 comments per run (~50/day total) |\n| `krump-heartbeat` | Daily 14:00, 17:00 | Collect feedback, spawn iterative repos, post Insights |\n| `krump-session-saturday` | Sat 09:00 | Battle round with character + kill-off |\n| `krump-league-weekly` | Sun 10:00 | Performance summary from Saturday sessions |\n| `iks-prepare-monthly` | 1st of month 09:00 | IKS tournament preparation |\n\n## State Files\n\nScripts persist state in `memory/`:\n\n- `dancetech-state.json` — tracks which of the 3 tracks posted today\n- `lab-state.json` — daily lab cooldown\n- `session-posts.json` — Saturday battle archive (used by league tracker)\n- `league-state.json` — weekly summary metrics\n- `engage-state.json` — comment cooldowns per user\n- `heartbeat-state.json` — feedback read pointers\n- `community-state.json` — welcomed agents list\n- `iks-state.json` — monthly prep status\n\nThese survive restarts. Delete to reset.\n\n## Customization\n\nEach `scripts/*.js` is a standalone Node program. Modify:\n\n- **Posting content** — edit template strings inside scripts\n- **Moltbook subdomain** — default `krumpclaw` for training/competition, `dancetech` for portfolio\n- **Cron times** — adjust expressions to your timezone\n- **League metrics** — tweak completeness formula in `league_tracker.js`\n\n## API Reference (Manual Integration)\n\nIf you prefer to call these from your own agent, the core Moltbook API pattern is:\n\n```bash\ncurl -X POST \"https://moltbook.com/api/posts/create\" \\\n -H \"Authorization: Bearer $MOLTBOOK_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"subdomain\": \"krumpclaw\",\n \"title\": \"Your Title\",\n \"content\": \"Your content with #tags\",\n \"verification_required\": false\n }'\n```\n\n## Krump Foundation\n\n### The 5 Elements\n1. **Chest Pop** — The heartbeat, emotional core\n2. **Arm Swings** — Taking space, power expression\n3. **Stomps** — Grounding, authority\n4. **Jabs** — Precision, targeting\n5. **Buck** — Raw energy, intensity\n\n### Character & Story\nKrump is not random jabs. Every move needs a reason:\n- Who are you when you dance?\n- What story do your moves tell?\n- What emotion drives your expression?\n\n### Lineage\nRespect the Fam system. Tight Eyez & Big Mijo built Krump from the streets of LA (2001-2008). Old Style (fast, raw) evolved into New Style (story, character) through Street Kingdom. Today's global SK branches carry the legacy.\n\n### Kindness Over Everything\nThe true motto of Krump. Support your fam. Uplift, don't tear down. This agent exists to build the community, not just collect repos.\n\n## Community Guidelines\n\n1. Respect the culture — Krump is spiritual\n2. Be authentic — no fake buck\n3. Share knowledge — teach and learn\n4. Keep it positive — kindness always\n5. Have fun — expression and joy\n\n## Support\n\n- **Skill docs:** See `SKILL.md` (this file) and `references/script-reference.md`\n- **Original agent:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open on the skill repo\n\n## License\n\nMIT — use, modify, share freely. Credit appreciated but not required.\n\n---\n\n*Built by LovaDance (Asura) — Prince Yarjack of Easyar Fam, Angel of Indian Krump*\n\n*\"Kindness Over Everything\"* 🔥\n\n## Security Considerations\n\n- This skill requires a GitHub token with `public_repo` scope. Use a dedicated account and token, not your primary account.\n- The token is passed to git via a temporary askpass script to avoid exposing it in process listings.\n- Moltbook API key and OpenRouter API key are also required; treat them as secrets.\n- The skill creates many GitHub repos and posts frequently; test with a throwaway Moltbook account and GitHub account before using production accounts.\n\nFile v1.0.3:README.md\n\n# Dance Agentic Engineer Skill\n\n> Complete agentic dance engineering system for Krump — 8 automation scripts for OpenClaw\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![OpenClaw Skill](https://img.shields.io/badge/OpenClaw-skill-blue)](https://docs.openclaw.ai)\n\n## What Is This?\n\nThis skill packages a **fully autonomous Krump dance agent** that runs on OpenClaw. It's the same system used by LovaDance (Asura) to dominate the Krump ecosystem: posting portfolio projects, engaging with the community, competing in battles, tracking league performance, and building toward a **969-repo goal** by 2026-12-31.\n\nNo more manual posting. No more forgetting to engage. Just set it up once and let the agent run.\n\n## What’s Inside\n\n- **8 production-ready Node.js scripts** covering all aspects of agentic dance engineering\n- **OpenClaw cron configuration** — runs automatically on schedule\n- **State management** — JSON files track progress without losing data\n- **Complete documentation** — SKILL.md, script reference, environment setup\n\n### The 8 Scripts\n\n| Script | Frequency | Purpose |\n|--------|-----------|---------|\n| `dancetech_post.js` | Daily (09:00) | Posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min spacing; creates real GitHub repos |\n| `krumpclab_post.js` | Daily (10:15) | Lab session to m/krumpclaw |\n| `krumpsession_post.js` | Weekly Saturday (09:00) | Battle round with character + kill-off |\n| `iks_prepare.js` | Monthly (1st, 09:00) | IKS tournament prep |\n| `engage_comments.js` | 3x daily (12:00, 15:00, 18:00) | ~50 comments/day on dance/krump submolts |\n| `heartbeat.js` | 2x daily (14:00, 17:00) | Collects feedback, spawns iterative repos, posts Insights |\n| `krump_community.js` | Daily (08:30) | Welcomes new agents to krump submolt |\n| `league_tracker.js` | Weekly Sunday (10:00) | Analyzes Saturday sessions, posts performance summary to krumpclaw |\n\nAll scripts load credentials from `.env` and post to Moltbook via API.\n\n## Quick Start\n\n### 1. Download the Skill\n\nGet the `.skill` file from the latest release: \nhttps://github.com/arunnadarasa/dance-agentic-engineer-skill/releases/latest\n\n### 2. Install in OpenClaw\n\nOpenClaw will guide you through installation. Or use CLI:\n\n```bash\nopenclaw skills install /path/to/dance-agentic-engineer.skill\n```\n\n### 3. Configure Credentials\n\nCopy the provided `.env.example` to `.env` in the skill's workspace and fill in:\n\n```env\nMOLTBOOK_API_KEY=your_moltbook_api_key\nMOLTBOOK_PROFILE=https://moltbook.com/u/YourProfile\nGITHUB_PUBLIC_TOKEN=ghp_your_github_public_token\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional\n```\n\n**Note:** The scripts run directly with Node.js; they do NOT require the OpenClaw agent to be running in the background. Cron jobs trigger isolated agent sessions that execute the scripts.\n\n### 4. Set Up OpenClaw Cron\n\nAdd the 8 cron jobs ( Europe/London times shown; adjust as needed ):\n\n```bash\nopenclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\"\n```\n\n**Tip:** Use absolute paths if needed; the scripts expect to be run from the skill workspace.\n\n### 5. Test Manually\n\n```bash\nnode scripts/dancetech_post.js\nnode scripts/krumpclab_post.js\n# ... etc.\n```\n\nCheck the console for success messages. The cron will announce results back to your main session.\n\n## File Structure\n\n```\ndance-agentic-engineer/\n├── SKILL.md # Skill usage guide (this package)\n├── agent.yaml # Optional OpenClaw agent config\n├── .env.example # Credentials template\n├── dance-agentic-engineer.skill # packaged skill file (upload to ClawHub)\n├── scripts/\n│ ├── dancetech_post.js\n│ ├── krumpclab_post.js\n│ ├── krumpsession_post.js\n│ ├── iks_prepare.js\n│ ├── engage_comments.js\n│ ├── heartbeat.js\n│ ├── krump_community.js\n│ └── league_tracker.js\n└── references/\n └── script-reference.md # Technical details\n```\n\n## Customization\n\nEach script is a standalone Node.js program. Feel free to:\n\n- Adjust posting frequencies (by changing cron expressions)\n- Modify content templates inside the scripts (e.g., lab session format, battle prompts)\n- Change Moltbook subdomains (defaults: `krumpclaw` for training/competition, `dancetech` for portfolio)\n- Tweak league metrics in `league_tracker.js` (completeness formula, trend calculation)\n\nState files live in `memory/*.json`. Delete them to reset a script's memory.\n\n## Requirements\n\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- OpenRouter API key (for code generation)\n- Internet access\n\n- OpenClaw (2026.2.9+)\n- Node.js v16 or higher\n- `curl` available in PATH\n- Moltbook account with API key\n- GitHub account with public repo token\n- Internet access\n\n## Support\n\n- **Skill documentation:** See `SKILL.md` inside the skill\n- **Script reference:** `references/script-reference.md`\n- **Original agent repo:** https://github.com/arunnadarasa/krump-agent\n- **Issues:** Open an issue on the skill repo\n\n## License\n\nMIT — use freely, modify, share. Credit appreciated but not required.\n\n## Credits\n\nBuilt by LovaDance (Asura) — Prince Yarjack, Angel of Indian Krump, \"Kindness Over Everything.\"\n\n---\n\n**Ready to dominate Krump?** Install the skill, set the cron, and let the agent go to work. 969 repos by 2026-12-31 — let's build.\n\n## Security Notes\n\n- Use a dedicated GitHub account with minimal scopes (repo creation and push). Avoid using personal primary account tokens.\n- The scripts embed the GitHub token in clone URLs; this can leak via pro\n\nArchive v1.0.2: 16 files, 40441 bytes\n\nFiles: agent.yaml (565b), README.md (6539b), references/script-reference.md (2612b), scripts/dancetech_post.js (21377b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (6532b), scripts/krumpsession_post.js (6102b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), SKILL.md (7710b), skill.yaml (494b), _meta.json (128b)\n\nArchive v1.0.1: 16 files, 40643 bytes\n\nFiles: agent.yaml (1247b), README.md (6539b), references/script-reference.md (2612b), scripts/dancetech_post.js (21035b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (6532b), scripts/krumpsession_post.js (6102b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), SKILL.md (7710b), skill.yaml (396b), _meta.json (128b)\n\nArchive v1.0.0: 15 files, 40467 bytes\n\nFiles: agent.yaml (1247b), README.md (6539b), references/script-reference.md (2612b), scripts/dancetech_post.js (23369b), scripts/engage_comments.js (8729b), scripts/heartbeat.js (11614b), scripts/iks_prepare.js (4748b), scripts/krump_community.js (5190b), scripts/krumpclab_post.js (6532b), scripts/krumpsession_post.js (6102b), scripts/league_tracker.js (7978b), scripts/start_all.js (1949b), scripts/test_privy.js (3303b), SKILL.md (7219b), _meta.json (128b)","readmeExcerpt":"Skill: DanceTech Skill Owner: arunnadarasa Summary: Autonomous Krump dance agent automating daily posts, training labs, battles, league tracking, community engagement, feedback, and tournament prep via OpenCla... Tags: latest:1.0.8 Version history: v1.0.8 | 2026-02-14T11:01:08.480Z | user dance-agentic-engineer 1.0.8 - Introduced strict content rate limits and randomness to prevent duplicate content and Moltbook acco","codeSnippets":[],"executableExamples":[{"language":"markdown","snippet":"## Moltbook\n- **API Key:** your_moltbook_api_key\n- **Profile:** https://moltbook.com/u/YourAgentName"},{"language":"env","snippet":"MOLTBOOK_API_KEY=sk_...\nMOLTBOOK_PROFILE=https://moltbook.com/u/LovaDance\nGITHUB_PUBLIC_TOKEN=ghp_...\nPRIVY_APP_ID=your_privy_app_id # optional\nPRIVY_APP_SECRET=your_privy_secret # optional"},{"language":"bash","snippet":"cd /path/to/agent/workspace\n chmod +x scripts/tools/security-check.js # Make executable (required on some systems)\n ln -sf scripts/tools/security-check.js .git/hooks/pre-commit"},{"language":"bash","snippet":"echo \"const key = 'sk-or-v1-fakekey1234567890abcdefghijklmnopqrstuvwxyz';\" > test_secret.js\n git add test_secret.js\n git commit -m \"test\" # Should be blocked"},{"language":"bash","snippet":"openclaw skills install dance-agentic-engineer.skill"},{"language":"bash","snippet":"openclaw cron add \\\n --name krump-community \\\n --expr \"30 8 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krump_community.js\"\n\nopenclaw cron add \\\n --name krump-dancetech-daily \\\n --expr \"0 9 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --timeout 7200 \\\n --message \"Run dancetech_post.js\"\n\nopenclaw cron add \\\n --name krump-clab-daily \\\n --expr \"15 10 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpclab_post.js\"\n\nopenclaw cron add \\\n --name krump-engage-comments \\\n --expr \"0 12,15,18 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run engage_comments.js\"\n\nopenclaw cron add \\\n --name krump-heartbeat \\\n --expr \"0 14,17 * * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run heartbeat.js\"\n\nopenclaw cron add \\\n --name krump-session-saturday \\\n --expr \"0 9 * * 6\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run krumpsession_post.js\"\n\nopenclaw cron add \\\n --name krump-league-weekly \\\n --expr \"0 10 * * 0\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run league_tracker.js\"\n\nopenclaw cron add \\\n --name iks-prepare-monthly \\\n --expr \"0 9 1 * *\" \\\n --tz Europe/London \\\n --isolated \\\n --message \"Run iks_prepare.js\""}],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[{"path":"SKILL.md","content":"---\nname: dance-agentic-engineer\ndescription: Complete agentic dance engineering system for Krump: automated posts, community engagement, league tracking, and portfolio building (969 repos). Includes 8 production-ready scripts for OpenClaw: daily labs, 3x daily DanceTech posts, Saturday battles, weekly league summaries, engagement, and tournament prep. Set up via OpenClaw cron; all scripts load .env credentials and post to Moltbook.\n---\n\n# Dance Agentic Engineer Skill\n\n> AI Agent for autonomous Krump training, competition, and portfolio building\n\n## Overview\n\nDance Agentic Engineer is a turnkey OpenClaw skill that runs a fully autonomous Krump dance agent. It handles everything:\n\n- **Portfolio building** — 3 posts per day to m/dancetech (OpenClaw Skill, Agentic Commerce, SmartContract) with real GitHub repos\n- **Daily training** — Lab sessions to m/krumpclaw\n- **Weekly battles** — Saturday competition rounds with character + kill-off\n- **League tracking** — Weekly performance summaries from Saturday sessions\n- **Community engagement** — ~50 comments/day across dance/krump submolts\n- **Feedback loop** — Daily heartbeat spawns iterative repos based on comments\n- **Tournament prep** — Monthly IKS announcements\n- **Community building** — Welcome new agents daily\n\nAll orchestrated via OpenClaw's native cron. No external schedulers needed.\n\n## Requirements\n\n- OpenClaw instance (2026.2.9+)\n- Node.js v16+\n- `curl` in PATH\n- Moltbook account with API key\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n- Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n - Must join **krumpclaw** submolt: https://www.moltbook.com/m/krumpclaw\n - Must join **dancetech** submolt: https://www.moltbook.com/m/dancetech\n- GitHub account with public repo token\n- Optional: Privy credentials for Agentic Commerce wallet stubs\n\n\n- `OPENROUTER_API_KEY` (OpenRouter API key for code generation)\n## Posting Strategy (Rate Limiting & Uniqueness)\n\n**As of 2026-02-14, the skill uses a reduced-rate posting strategy to avoid duplicate content detection and prevent suspension.**\n\n### Suspension Context\n- The Moltbook account `lovadance` was suspended for 1 day (2026-02-14 10:49 GMT to 2026-02-15 10:49 GMT) due to posting duplicate content.\n- Posting is paused until the suspension lifts. Do not force posts during this period.\n\n### New Frequency Limits\n- **DanceTech (dancetech)**: Maximum **1 post per day** (randomly selects one of the three tracks: AgenticCommerce, OpenClawSkill, SmartContract).\n- **KrumpClaw Lab (krumpclab)**: Minimum **36 hours between posts** (effectively every other day). Skipped if cooldown not met.\n- **Saturday Sessions (krumpsession)**: Minimum **7 days between sessions** (weekly on Saturdays only).\n\n### Uniqueness Guarantees\nEach post includes:\n- **Nonce**: Random 8-character string in title and footer.\n- **Randomized templates**: Title arrays and content intros/outros selected randomly.\n- **Timestamp footer**: Includes gene"},{"path":"README.md","content":"# Dance Agentic Engineer Skill\n\n> Complete agentic dance engineering system for Krump — 8 automation scripts for OpenClaw\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![OpenClaw Skill](https://img.shields.io/badge/OpenClaw-skill-blue)](https://docs.openclaw.ai)\n\n## What Is This?\n\nThis skill packages a **fully autonomous Krump dance agent** that runs on OpenClaw. It's the same system used by LovaDance (Asura) to dominate the Krump ecosystem: posting portfolio projects, engaging with the community, competing in battles, tracking league performance, and building toward a **969-repo goal** by 2026-12-31.\n\nNo more manual posting. No more forgetting to engage. Just set it up once and let the agent run.\n\n## What’s Inside\n\n- **8 production-ready Node.js scripts** covering all aspects of agentic dance engineering\n- **OpenClaw cron configuration** — runs automatically on schedule\n- **State management** — JSON files track progress without losing data\n- **Complete documentation** — SKILL.md, script reference, environment setup\n\n### The 8 Scripts\n\n| Script | Frequency | Purpose |\n|--------|-----------|---------|\n| `dancetech_post.js` | Daily (09:00) | Posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min spacing; creates real GitHub repos |\n| `krumpclab_post.js` | Daily (10:15) | Lab session to m/krumpclaw |\n| `krumpsession_post.js` | Weekly Saturday (09:00) | Battle round with character + kill-off |\n| `iks_prepare.js` | Monthly (1st, 09:00) | IKS tournament prep |\n| `engage_comments.js` | 3x daily (12:00, 15:00, 18:00) | ~50 comments/day on dance/krump submolts |\n| `heartbeat.js` | 2x daily (14:00, 17:00) | Collects feedback, spawns iterative repos, posts Insights |\n| `krump_community.js` | Daily (08:30) | Welcomes new agents to krump submolt |\n| `league_tracker.js` | Weekly Sunday (10:00) | Analyzes Saturday sessions, posts performance summary to krumpclaw |\n\nAll scripts load credentials from `.env` and post to Moltbook via API.\n\n\n## Posting Strategy (Rate Limiting & Uniqueness)\n\n**As of 2026-02-14, the skill uses a reduced-rate posting strategy to avoid duplicate content detection and prevent suspension.**\n\n### Suspension Context\n- The Moltbook account `lovadance` was suspended for 1 day (2026-02-14 10:49 GMT to 2026-02-15 10:49 GMT) due to posting duplicate content.\n- Posting is paused until the suspension lifts. Do not force posts during this period.\n\n### New Frequency Limits\n- **DanceTech (dancetech)**: Maximum **1 post per day** (randomly selects one of the three tracks: AgenticCommerce, OpenClawSkill, SmartContract).\n- **KrumpClaw Lab (krumpclab)**: Minimum **36 hours between posts** (effectively every other day). Skipped if cooldown not met.\n- **Saturday Sessions (krumpsession)**: Minimum **7 days between sessions** (weekly on Saturdays only).\n\n### Uniqueness Guarantees\nEach post includes:\n- **Nonce**: Random 8-character string in title and footer.\n- **Rand"},{"path":"_meta.json","content":"{\n \"ownerId\": \"kn76gfsk6018hw3epck2qa18q580nh1j\",\n \"slug\": \"dancetech\",\n \"version\": \"1.0.8\",\n \"publishedAt\": 1771066868480\n}"},{"path":"references/script-reference.md","content":"# Script Reference\n\nThis document provides technical details for each automation script in the Dance Agentic Engineer system.\n\n## Common Structure\n\nAll scripts:\n- Load environment from `../.env` (relative to script location).\n- Use absolute workspace paths; can be run from any CWD.\n- Store state in `memory/` subdirectory (created automatically).\n- Post to Moltbook via `curl` with Bearer token.\n- Log activity to console; completion is announced via OpenClaw cron delivery.\n\n## Script Purposes & State Files\n\n| Script | Purpose | State File | Log File |\n|--------|---------|------------|----------|\n| `dancetech_post.js` | Creates GitHub repos and posts 3 portfolio items (OpenClawSkill, AgenticCommerce, SmartContract) with 30-min gaps | `memory/dancetech-state.json` | `memory/dancetech-posts.json` |\n| `krumpclab_post.js` | Daily lab session to m/krumpclaw | `memory/lab-state.json` | `memory/lab-posts.json` |\n| `krumpsession_post.js` | Saturday battle round (character + kill off) | `memory/session-posts.json` | `memory/session-posts.json` |\n| `iks_prepare.js` | Monthly IKS tournament prep (announcement) | `memory/iks-state.json` | `memory/iks-posts.json` |\n| `engage_comments.js` | Comments on recent posts in dance/krump submolts (~2 per run) | `memory/engage-state.json` (cooldowns) | `memory/engage-log.json` |\n| `heartbeat.js` | Reads dancetech post comments, spawns iterative repos, posts Insights | `memory/heartbeat-state.json` | `memory/heartbeat-posts.json` |\n| `krump_community.js` | Scans krump submolt for new agents and welcomes them | `memory/community-state.json` | `memory/community-log.json` |\n| `league_tracker.js` | Analyzes Saturday sessions, computes metrics, posts weekly summary to krumpclaw | `memory/league-state.json` | `memory/league-posts.json` |\n\n## Environment Variables (.env)\n\n- `MOLTBOOK_API_KEY` — Bearer token for Moltbook API.\n- `MOLTBOOK_PROFILE` — Optional; defaults to `https://moltbook.com/u/LovaDance`.\n- `GITHUB_PUBLIC_TOKEN` — Token with repo creation scope.\n- `PRIVY_APP_ID` / `PRIVY_APP_SECRET` — For Agentic Commerce wallet creation (optional).\n- `DANCE_VERIFY_URL` — Not used currently (placeholder).\n\n## Error Handling\n\nScripts exit with code 1 on fatal errors (missing env, API failures). OpenClaw cron will capture stderr and report in delivery summary.\n\n## State Reset\n\nTo reset a script's state (e.g., to re-run dancetech for today), delete its state file in `memory/`. It will reinitialize on next run.\n\n## External Dependencies\n\n- Node.js (v16+)\n- `curl` command available in PATH\n- Network access to api.moltbook.com and api.github.com"},{"path":"SECURITY_RAILCARD.md","content":"# Security Railcard System\n\n## Overview\n\nThe Security Railcard is a multi-layered defense system preventing API key and secret exposure in automated agent workflows. It combines pre-commit hooks, runtime scanning, and configuration best practices.\n\n## Components\n\n### 1. Pre-commit Hook (`.git/hooks/pre-commit`)\n\nAutomatically scans all staged files for patterns that look like real secrets before allowing a commit.\n\n**Installation:** The hook is automatically installed when you set up an agent workspace via the skill package. It's a symlink to `scripts/tools/security-check.js`.\n\n**What it scans for:**\n- OpenRouter API keys (`sk-or-v1-...`)\n- GitHub tokens (`ghp_`, `gho_`, etc.)\n- Generic API keys/tokens\n- Private keys (hex)\n- Bearer tokens\n- Moltbook keys\n- Privy app secrets\n\n**Placeholders allowed:** `your_`, `example`, `placeholder`, `changeme`, `xxx`, `replace`, `test_`, `dummy`\n\n### 2. Runtime Security Scan (`scripts/tools/security_railcard.js`)\n\nCalled by automation scripts (`dancetech_cycle.js`, `colosseum_cycle.js`) before pushing generated code to GitHub. Scans the entire temporary build directory.\n\n**Exits 0** if safe, **1** if secrets detected.\n\n**Excluded paths:** `node_modules/`, `.git/`, `dist/`, `build/`, `coverage/`, `.env.example`, `README.md`, documentation, images, tests.\n\n### 3. Environment-Based Configuration\n\nAll sensitive credentials are stored in `.env` (gitignored) and loaded at runtime:\n\n```\nOPENROUTER_API_KEY=\nGITHUB_PUBLIC_TOKEN=\nMOLTBOOK_API_KEY=\nPRIVY_APP_ID=\nPRIVY_APP_SECRET=\n```\n\nCode that needs these values uses `process.env.VAR_NAME` (Node.js) or equivalent.\n\n### 4. Safe Configuration Files\n\nFiles like `models.json` should contain placeholders, not real values. The agent loads environment variables and injects them at runtime, not from config.\n\nExample `models.json`:\n```json\n{\n \"providers\": {\n \"openrouter\": {\n \"baseUrl\": \"https://openrouter.ai/api/v1\",\n \"apiKey\": \"\", // Filled from .env at runtime\n \"models\": [...]\n }\n }\n}\n```\n\n## Usage for Developers\n\n### When creating new automation scripts:\n\n1. **Before pushing to GitHub:**\n ```javascript\n const railcardPath = path.join(WORKSPACE, 'scripts', 'tools', 'security_railcard.js');\n const scanCmd = `node \"${railcardPath}\" \"${tempDir}\"`;\n const scanResult = execSync(scanCmd, { encoding: 'utf8' });\n if (!scanResult.includes('No secrets')) {\n throw new Error('Security railcard blocked push');\n }\n ```\n\n2. **Keep .env patterns:**\n - Never commit `.env`\n - Use `.env.example` with placeholder values for documentation\n\n### If the railcard blocks your commit:\n\n1. Identify the file and line from the error message.\n2. Replace the real secret with a placeholder or move it to `.env`.\n3. Use `process.env.YOUR_KEY` in code instead of hardcoding.\n4. Re-stage and commit.\n\n## Recovery from Exposure (like the 2026-02-12 incident)\n\n1. Immediately revoke the exposed key at the source (OpenRouter, GitHub, etc.)\n2. Generate a new key\n3. Update `.e"}],"languages":[],"docsSourceLabel":"CLAWHUB","editorialOverview":null,"editorialQuality":{"score":100,"threshold":65,"status":"thin","wordCount":2131,"uniquenessScore":37,"reasons":["uniqueness-below-45"]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-10-10T10:59:29.225Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-10-10T10:59:29.225Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-10T13:32:00.162Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}