word-chinese-automation

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: word-chinese-automation Version: 1.0.0 The skill bundle is a legitimate Chinese Word document proofreading tool. It utilizes Python scripts (split_sentences.py, generate_report.py, and apply_corrections.py) and the standard python-docx library to automate punctuation, typo, and grammar checks. The code logic is transparent, lacks any network activity or shell execution, and the instructions in SKILL.md are strictly task-oriented without any evidence of malicious prompt injection or data exfiltration.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Incorrect or overbroad corrections could change wording throughout the generated modified document.

Why it was flagged

The script can apply replacements across the Word document and save a corrected copy; this is aligned with the proofreading purpose, but users should verify AI-created corrections before using the modified file.

Skill content
para.text = para.text.replace(original, corrected) ... output_path = str(input_file.parent / f"{input_file.stem}_修改{input_file.suffix}") ... doc.save(output_path)
Recommendation

Keep the original document, review the proofreading report and corrections JSON, and compare the generated modified copy before distributing or replacing any official file.

What this means

Sensitive text from the Word document may remain in local intermediate files or console logs after the proofreading run.

Why it was flagged

The splitter stores document text in an intermediate JSON file and prints extracted sentences to the console; this is expected for proofreading but duplicates potentially sensitive document content locally.

Skill content
"full_text": text, "sentence": sentence ... print(f"  {item['sentence']}") ... output_path = str(input_file.parent / f"{input_file.stem}_sentences.json")
Recommendation

Use this only on documents appropriate for local processing, and delete generated sentence/correction JSON files when they are no longer needed.

What this means

A user may need to install an undeclared Python package manually for the skill to work.

Why it was flagged

The code expects the python-docx package, while the registry lists no install spec or required binaries; this is a setup/provenance note rather than suspicious behavior.

Skill content
except ImportError:
    print("错误:需要安装 python-docx 库")
    print("运行: pip install python-docx")
Recommendation

Install python-docx only from a trusted package source and consider pinning a known-good version in local environments.