feat: implement configurable Xingbang risk agent on mini-openclaw core

backend/tools/skills_scanner.py

@@ -5,6 +5,28 @@ from pathlib import Path
 import yaml
 
 
+def discover_skills(base_dir: Path) -> list[dict]:
+    """Read the native Skills catalog without changing its generated snapshot."""
+    root = (base_dir / "skills").resolve()
+    entries = []
+    for file in sorted(root.rglob("SKILL.md")):
+        resolved = file.resolve()
+        if not resolved.is_relative_to(root):
+            continue
+        try:
+            content = file.read_text(encoding="utf-8")
+            if not content.startswith("---"):
+                continue
+            parts = content.split("---", 2)
+            meta = yaml.safe_load(parts[1]) if len(parts) == 3 else None
+            if not isinstance(meta, dict):
+                continue
+            entries.append({"id":file.relative_to(root).as_posix(),"name":str(meta.get("name",file.parent.name)),"description":str(meta.get("description","")),"content":content})
+        except (OSError, ValueError, yaml.YAMLError):
+            continue
+    return entries
+
+
 def scan_skills(base_dir: Path) -> str:
     """Scan all SKILL.md files and generate SKILLS_SNAPSHOT.md."""
     skills_dir = base_dir / "skills"
@@ -13,24 +35,7 @@ def scan_skills(base_dir: Path) -> str:
     if not skills_dir.exists():
         skills_dir.mkdir(parents=True)
 
-    skills = []
-    for skill_md in sorted(skills_dir.rglob("SKILL.md")):
-        try:
-            content = skill_md.read_text(encoding="utf-8")
-            # Parse YAML frontmatter
-            if content.startswith("---"):
-                parts = content.split("---", 2)
-                if len(parts) >= 3:
-                    meta = yaml.safe_load(parts[1])
-                    if meta:
-                        rel_path = f"./backend/skills/{skill_md.parent.name}/SKILL.md"
-                        skills.append({
-                            "name": meta.get("name", skill_md.parent.name),
-                            "description": meta.get("description", ""),
-                            "location": rel_path,
-                        })
-        except Exception as e:
-            print(f"⚠️ Error scanning {skill_md}: {e}")
+    skills = [{**s, "location":f"./backend/skills/{s['id']}"} for s in discover_skills(base_dir)]
 
     # Build XML-style snapshot
     lines = ["<available_skills>"]