.Humanizer.Conflict

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only writing editor with no code or credential use, but users should note its inconsistent package identity and that it can rewrite local documents to make AI-style text look more human.

This skill appears low-risk technically because it has no code, install script, credentials, or network integration. Before installing, confirm that the package identity is the one you intended, invoke it only on text or files you choose, and review edits carefully—especially if the writing must disclose AI assistance or preserve the author’s original voice.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

A user may have difficulty verifying which package or publisher they are installing or updating.

Why it was flagged

This internal metadata does not match the registry metadata supplied for the evaluated skill, which lists a different owner ID and the slug "humanizer-conflict". SKILL.md also declares version 2.1.1, creating package identity ambiguity.

Skill content
"ownerId": "kn7fsrcz4428cmw3xb91h4t4dh7ztjxx", "slug": "humanizer", "version": "1.0.0"
Recommendation

Verify the publisher and package name before installing, and prefer a package whose registry metadata, internal metadata, and README are consistent.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If invoked broadly, the agent could modify local writing files rather than only transforming pasted text.

Why it was flagged

The skill can read, search, write, and edit files. That is expected for a document-editing skill, but the artifacts do not add extra scoping guidance such as limiting edits to a user-selected file.

Skill content
allowed-tools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - AskUserQuestion
Recommendation

Use it on specific text or specific files, and review proposed edits before accepting changes to important documents.

#
ASI09: Human-Agent Trust Exploitation
Info
What this means

Readers may believe text is more personally authored than it really is if AI assistance is not disclosed where expected.

Why it was flagged

The skill is explicitly designed to make AI-sounding text appear more human-written. This is disclosed and purpose-aligned, but it can affect how readers perceive authorship.

Skill content
Remove signs of AI-generated writing from text... make it sound more natural and human-written
Recommendation

Follow any academic, workplace, publication, or platform rules about disclosure of AI-assisted writing.