Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

OpenClaw Kazakh IME

v1.3.0

为 OpenClaw 和网页提供哈萨克语输入法,支持英文、阿拉伯文和西里尔文三种输入模式及虚拟键盘切换。

0· 96·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ayden76/openclaw-kazakh-ime.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "OpenClaw Kazakh IME" (ayden76/openclaw-kazakh-ime) from ClawHub.
Skill page: https://clawhub.ai/ayden76/openclaw-kazakh-ime
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install openclaw-kazakh-ime

ClawHub CLI

Package manager switcher

npx clawhub@latest install openclaw-kazakh-ime
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (Kazakh IME) match the provided artifacts: SKILL.md documents keyboard modes, mappings, UI and install steps and the included JS implements DOM hooks, virtual keyboard, mappings and mutation observer. Requiring filesystem write access to the OpenClaw UI (to add the JS and edit index.html) is consistent with installing a client-side IME.
Instruction Scope
Runtime instructions are limited to copying a JS file into the OpenClaw control UI and adding a <script> tag; they do not request environment variables or remote endpoints. However, because the IME necessarily intercepts keyboard events in pages, it can read typed text in inputs/textarea (this is expected for an IME and not flagged in the skill, but is an inherent privacy risk). The install snippets use Windows/Administrator paths, which are platform-specific and assume file-system write access.
Install Mechanism
There is no automated install/spec that downloads remote code; installation is manual (copy file + edit HTML). No URLs for downloads or archive extraction are used in the install instructions, which reduces supply-chain risk.
Credentials
The skill declares no environment variables, no credentials, and no config paths. That is proportionate to a client-side IME which only needs to run in the browser page context.
Persistence & Privilege
The skill does not set always:true and allows normal autonomous invocation. The install instructions modify the application's HTML (index.html in OpenClaw control-ui), which grants the script persistent execution within that UI — this is typical for a UI plugin but does require filesystem write permissions and means the script will run in the app's context thereafter.
Assessment
This skill appears coherent for a browser-based IME, but installing a script into an app's UI gives it runtime access to typed input. Before installing: (1) review the full openclaw-kazakh-ime.js file for any network calls, eval/Function usage, obfuscated strings, or code that sends data off-host; (2) verify the GitHub repository and that the source matches the packaged JS; (3) back up the index.html you will edit and test the script in an isolated environment or non-production profile; (4) confirm the script does not attach to password inputs or other sensitive fields (and if needed, modify it to ignore input[type=password] and other sensitive selectors); (5) prefer installing via an official plugin mechanism or vetted distribution if available. If you want, I can scan the full JS for network/XHR/fetch usage and suspicious patterns or summarize any risky code paths.

Like a lobster shell, security has layers — review code before you run it.

imevk9772qh0t1pp3y9252eetgwjn584an50inputvk9772qh0t1pp3y9252eetgwjn584an50kazakhvk9772qh0t1pp3y9252eetgwjn584an50latestvk9772qh0t1pp3y9252eetgwjn584an50
96downloads
0stars
1versions
Updated 3w ago
v1.3.0
MIT-0

OpenClaw Kazakh IME - 哈萨克语输入法

版本: 1.3.0
创建日期: 2026-04-06
作者: OpenClaw Team
位置: skills/openclaw-kazakh-ime/


📋 技能描述

为 OpenClaw 和任何网页添加哈萨克语输入法支持,支持阿拉伯文西里尔文两种哈萨克文字书写系统。


🎯 触发条件

当用户提到以下内容时激活此技能:

  • "哈萨克语输入法"
  • "Kazakh IME"
  • "阿拉伯文输入"
  • "西里尔文输入"
  • "قا" / "қ" 输入
  • "在网页中输入哈萨克语"

🚀 核心功能

三种输入模式

  1. 英文模式 - 默认模式,正常英文输入
  2. 阿拉伯文模式 - 哈萨克语阿拉伯文字符输入 (قا)
  3. 西里尔文模式 - 哈萨克语西里尔文字符输入 (қ)

切换方式

  • 快捷键: Ctrl+Shift+K 循环切换三种模式
  • 状态按钮: 点击右下角状态按钮切换

虚拟键盘

  • 可拖动的虚拟键盘
  • 支持触屏设备
  • 一键显示/隐藏

📦 安装方法

1. 复制文件到目标位置

# 复制输入法脚本到 OpenClaw 控制 UI 目录
Copy-Item "C:\Users\Administrator\.openclaw\workspace\skills\openclaw-kazakh-ime\scripts\openclaw-kazakh-ime.js" `
  "C:\Users\Administrator\AppData\Roaming\npm\node_modules\openclaw\dist\control-ui\" -Force

2. 修改 index.html

</body> 标签之前添加:

<script src="./openclaw-kazakh-ime.js"></script>

完整示例:

<body>
  <openclaw-app></openclaw-app>
  <script src="./openclaw-kazakh-ime.js"></script>
</body>

3. 刷新页面

刷新浏览器,输入法自动生效。


🎹 键盘映射表

阿拉伯文模式 (قا)

英文键哈萨克字符英文键哈萨克字符
qچwۋ
eءrر
tتyي
uۇiڭ
oوpپ
aھsس
dدfا
gەhى
jقkك
lلzز
xشcع
vۆbب
nنmم

西里尔文模式 (қ)

英文键哈萨克字符英文键哈萨克字符
qқwў
eеrр
tтyу
uүiі
oоpп
aаsс
dдfф
gғhһ
jжkк
lлzз
xхcц
vвbб
nнmм

💡 使用示例

场景 1: 在 OpenClaw 聊天中输入哈萨克语

  1. Ctrl+Shift+K 切换到阿拉伯文模式
  2. 使用英文键盘输入,自动转换为哈萨克语
  3. 例如:输入 "salem" → 输出 "سەلەم"

场景 2: 切换西里尔文模式

  1. Ctrl+Shift+K 切换到西里尔文模式
  2. 输入 "salem" → 输出 "сәлем"

场景 3: 使用虚拟键盘

  1. 点击右下角 ⌨ 按钮显示虚拟键盘
  2. 拖动 ☰ 区域调整位置
  3. 点击按键直接输入

🔧 配置选项

字体设置

openclaw-kazakh-ime.js 文件开头修改:

const FONT_SETTINGS = {
    arabic: 'UKK TZK1, Microsoft Uighur, sans-serif',
    cyrillic: 'UKK TZK1, sans-serif',
    english: ''
};

推荐字体

  • UKK TZK1 - 哈萨克语专用字体(推荐)
  • Microsoft Uighur - 支持阿拉伯文

📁 文件结构

skills/openclaw-kazakh-ime/
├── SKILL.md              # 技能说明文件
├── scripts/
│   └── openclaw-kazakh-ime.js  # 输入法主文件
└── references/
    └── README.md         # 完整文档(可选)

⚠️ 注意事项

  1. 文件路径 - 确保 JS 文件路径正确
  2. 适用元素 - 仅对 input[type="text"]textarea 生效
  3. 字体支持 - 需安装哈萨克语字体(如 UKK TZK1)
  4. 浏览器 - 推荐 Chrome/Edge/Firefox

🔄 更新日志

v1.3.0 (2026-04-06)

  • ✅ 新增西里尔文模式
  • ✅ 循环模式切换
  • ✅ 虚拟键盘支持
  • ✅ 优化组合键处理

v1.2.0

  • ✅ 添加虚拟键盘

v1.1.0

  • ✅ 修复大写字母映射

v1.0.0

  • ✅ 初始版本(阿拉伯文模式)

📞 调用命令

# 安装输入法
"安装哈萨克语输入法"

# 查看使用方法
"哈萨克语输入法怎么用?"

# 切换输入模式
"切换到阿拉伯文模式"
"切换到西里尔文模式"

# 查看键盘映射
"显示哈萨克语键盘映射表"

🔗 相关链接


OpenClaw Kazakh IME - 为哈萨克语用户提供便捷的输入体验!💚

Comments

Loading comments...