Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Humanizer Rewrite

v1.0.0

拟人化写作优化。当用户说"拟人优化"、"去AI味重写"、"让文章像人写的"、"拟人化改写"时触发。对文章进行三角迭代式拟人化改写,检测并消除12种AI写作高危特征,注入口语锚点、观点突袭、自我矛盾等拟人化技术。不适用于:仅检测AI味评分不改写(用 humanizer-zh)。

0· 153·1 current·1 all-time
by莫循@moxunjinmu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (拟人化改写) match the runtime instructions: generate iterative drafts, diagnose AI-like traits, and rewrite. Reading user-provided text or a user-supplied file path and producing a rewritten version is coherent with the stated purpose.
Instruction Scope
SKILL.md contains detailed, prescriptive runtime steps limited to text transformation and diagnosis. It explicitly instructs: if a user supplies a file path, read the file and, after iterations, overwrite the original file. That file I/O is reasonable for a rewrite tool but grants the skill permission to modify user files without an extra confirmation step.
Install Mechanism
Instruction-only skill with no install spec, no code files, and no declared binaries — lowest-risk install profile. Nothing is downloaded or written to disk by the skill itself (behavior depends on the host agent's file APIs).
Credentials
No environment variables, credentials, or config paths requested. The skill does not ask for unrelated secrets or external service keys; requested capabilities (reading/writing user-specified files) are proportional to the task.
Persistence & Privilege
always:false (good). However the skill instructs the agent to overwrite files provided by the user and to start the first iteration immediately when the user says '拟人优化' (no additional confirmation). If the agent can invoke skills autonomously, this combination increases the risk of unintended file modification—though it's not automatically malicious.
Assessment
This skill appears coherent for rewriting text to sound 'human', but pay attention to two practical risks: (1) If you provide a filesystem path the skill will read that file and, on completion, overwrite it without asking again — make backups or run it on a copy. (2) The skill has no source/homepage metadata; confirm you trust the owner before granting the agent permission to run it. If you want safer behavior, require the agent to ask for explicit confirmation before writing back, or restrict the skill to operate only on pasted text rather than file paths. If the agent is allowed autonomous invocation, consider limiting that capability or monitoring runs.

Like a lobster shell, security has layers — review code before you run it.

latestvk970zs25fg12ghkctweq6x68q5836ntf

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments