ClawHub

Moark Text Moderations

v1.0.0

Perform text review on user-specified input text that may be inappropriate or offensive.

⭐ 0· 73·1 current·2 all-time
by@fchange
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (text moderation) match the code and runtime instructions. The script calls a moderation endpoint at https://ai.gitee.com/v1 and uses model 'moark-text-moderation'. The single requested env var (GITEEAI_API_KEY) is appropriate for that purpose.
ℹ
Instruction Scope
SKILL.md instructions are narrowly scoped: install the 'openai' Python package and run the bundled script, then parse the output line starting with 'MODERATION_RESULT:'. Minor oddities: SKILL.md asks to display results using a markdown 'image syntax' snippet (`🛡️[Moderation Result]`) which is unusual but not a security issue. The instructions do print the submitted input text to stdout (expected for debugging) — avoid sending sensitive PII to this skill if you don't want it logged or transmitted.
✓
Install Mechanism
There is no install spec; this is instruction-only with a small bundled script. Dependencies are the standard 'openai' Python package (the script documents this), which is proportionate to the task.
✓
Credentials
Only GITEEAI_API_KEY is required and declared as primaryEnv. No unrelated credentials, config paths, or excessive environment access are requested.
✓
Persistence & Privilege
The skill does not request 'always: true', does not modify other skills or global agent settings, and does not demand persistent system-level privileges.
Assessment
This skill appears to do exactly what it says: call Gitee's moderation API with your GITEEAI_API_KEY and return the result. Before installing: (1) Only provide a Gitee AI API key you control — prefer a restricted or test key rather than a high-privilege production key. (2) Be aware the script prints the input text to stdout (so don't send highly sensitive PII). (3) The skill's source and homepage are unknown — if you need stronger assurance, review the script yourself (it's short) or obtain the skill from a known/trusted publisher. (4) The instructions ask you to pip install 'openai' and use the OpenAI-compatible client pointed at ai.gitee.com; this is normal for services exposing an OpenAI-compatible API but double-check network access policies if you're in a restricted environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk9798sywx5cg6na26c10t18w4183h9pe

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🛡️ Clawdis
EnvGITEEAI_API_KEY
Primary envGITEEAI_API_KEY

Comments