Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Markdown Ai Rewriter

v1.2.3

基于 markdown-ai-rewriter 的 Markdown AI 改写 Skill(保留结构、章节/全文模式、多模型)

1· 386·1 current·1 all-time
byPING SI@sipingme

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sipingme/markdown-ai-rewriter.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Markdown Ai Rewriter" (sipingme/markdown-ai-rewriter) from ClawHub.
Skill page: https://clawhub.ai/sipingme/markdown-ai-rewriter
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install sipingme/markdown-ai-rewriter

ClawHub CLI

Package manager switcher

npx clawhub@latest install markdown-ai-rewriter
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, README, SKILL.md, config.json and the included script consistently describe a Markdown rewriter that supports many LLM providers. Environment variables and network domains listed correspond to those providers and to the npm package; no unrelated credentials or unexpected system access are requested.
Instruction Scope
Runtime instructions and the wrapper script simply invoke the upstream CLI (via npx markdown-ai-rewrite) to rewrite Markdown files. The skill's documented file/network access (read *.md, write ~/.markdown-ai-rewriter/, call provider APIs) matches the stated purpose. There are no instructions to read unrelated system files or to exfiltrate data to unexpected endpoints.
Install Mechanism
There is no explicit install spec in the registry, but the runtime script uses npx to fetch and run markdown-ai-rewrite from npm. This is a normal pattern but means code will be fetched from the npm registry at runtime — verify you trust the npm package and its published version before running in sensitive environments.
Credentials
The SKILL.md documents many provider API keys (OpenAI, Anthropic, Gemini, etc.); this is proportionate for a multi-provider rewriter. No unrelated service keys are requested. Note: the skill mentions an optional SHARED_OPENAI_KEY and the tool may write config/quotas under ~/.markdown-ai-rewriter — review that directory if you are concerned about stored tokens or config leakage.
Persistence & Privilege
The skill is not 'always: true' in the registry flags (normal). config.json shows enabled/autoInvoke true for this skill, meaning it can be invoked by the agent when appropriate; autonomous invocation is expected for skills but you should be aware it may run the npx-backed CLI and make network calls using configured provider keys when triggered. The skill does not request system-wide config modification or other skills' credentials.
Assessment
This skill is coherent for its stated purpose, but take these precautions before installing: 1) Verify you trust the npm package (markdown-ai-rewriter) and its repository/version — npx will fetch code from the registry. 2) Only provide API keys for providers you intend to use; avoid using any shared/central key unless you trust the implementation. 3) Inspect or monitor the ~/.markdown-ai-rewriter directory after running the tool (it may store config/quotas). 4) If you deploy in a high-security environment, consider installing the npm package locally (not via npx) and auditing its code before use.
scripts/rewrite.js:14
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ehdh91vecbwmcvjepp977c584xjjn
386downloads
1stars
20versions
Updated 1w ago
v1.2.3
MIT-0

Markdown AI Rewriter Skill

本 Skill 对应 npm 包 markdown-ai-rewriter(当前对齐 v0.3.3):在 尽量保留标题、代码块、表格、图片等结构 的前提下,用大模型改写正文(润色、降重、换风格等)。

核心特点(先看这个)

一句话定位:这是一个面向生产场景的 Markdown 改写 Skill,重点是“改写质量 + 结构稳定 + 成本可控”。

  • 结构稳定优先:尽量保留标题层级、代码块、表格、图片位置,减少“改完排版坏掉”。
  • 双模式可切换section 适合中长文批量与控成本,full 适合短文叙事连贯。
  • 多模型一套命令:同一 CLI 只换 -p 和环境变量,就能切换 11 个 Provider。
  • 可落地到流水线:适合接在抓取、清洗、发布前的“内容标准化”环节。

最适合的使用场景

  • 你已经有 Markdown 初稿,要做润色/降重/统一风格;
  • 你在做批量内容处理,希望速度和费用可控;
  • 你需要兼顾国内外多个模型平台,在可用性和成本之间灵活切换。

与旧版差异(务必知晓)

项目当前版本
改写模式section(章节,默认)full(全文);已移除「按块/段落」模式。
模型OpenAIAnthropicAzure OpenAIGeminiDeepSeekOpenRouterQwenGLM豆包文心MiniMax
章节模式按标题分章并行改写;-c / --concurrency 对章节模式生效
CLI 版本号从安装的包的 package.json 读取,与 npm 版本一致。

安装

全局或项目内安装均可:

npm install -g markdown-ai-rewriter
# 或
npm install markdown-ai-rewriter

使用 OpenAIMiniMax 时,需安装 peer 依赖 openai

npm install openai

使用 Anthropic 时:

npm install @anthropic-ai/sdk

可执行命令:markdown-ai-rewritemd-rewrite


环境变量

变量用途
OPENAI_API_KEY--provider openai
ANTHROPIC_API_KEY--provider anthropic
AZURE_OPENAI_API_KEY--provider azure-openai
GEMINI_API_KEY--provider gemini
DEEPSEEK_API_KEY--provider deepseek
OPENROUTER_API_KEY--provider openrouter
QWEN_API_KEY--provider qwen
GLM_API_KEY--provider glm
DOUBAO_API_KEY--provider doubao
WENXIN_API_KEY--provider wenxin
MINIMAX_API_KEY--provider minimax
AZURE_OPENAI_ENDPOINTazure-openai 可选 endpoint(也可用 --base-url
MINIMAX_BASE_URL可选;默认 https://api.minimaxi.com/v1,可按 MiniMax 文档覆盖
SHARED_OPENAI_KEY可选;仅在 未传 apiKey 且代码里允许使用共享 Key 时由库内部使用(需配合 QuotaManager 等逻辑,见包内 README);常规 CLI 用法请直接设置上述各厂商 Key。

何时使用本 Skill

适合触发

  • 用户要「改写 / 润色 / 降重 / 换风格」已有 Markdown,且希望 保留文档结构
  • 提到「章节改写」「全文改写」「技术文档 / 博客 / 公众号稿」等;
  • 需要指定 casual / formal / technical / creative / custom 风格。

不适合

  • 从零「写一篇新文章」且输入不是 Markdown 改写流程;
  • 纯格式转换(如 MD→HTML);
  • 仅分析结构、不做改写。

触发关键词示例:「重写这篇 md」「改成正式一点」「全文连贯改写」「按章节改」「用 MiniMax / OpenAI / Claude」。


两种改写模式(CLI:--mode

模式说明典型场景
section(默认)按指定级别标题切分,分章调用模型;可带上下文章摘要;成本与速度较可控。中长文档、多章节技术文
full整篇一次请求(全文模式会对图片做占位符保护再还原);语气通常最连贯。短文、强叙事、整篇语气统一
  • --section-level 1|2|3:仅章节模式有效,表示按几级标题切分(默认 1 级 #)。
  • --mode full 时 token 消耗可能更大,适合长文时谨慎使用。

标准 CLI 示例

# 章节模式 + OpenAI(默认即 section,可省略 --mode)
export OPENAI_API_KEY="sk-..."
markdown-ai-rewrite rewrite \
  -i input.md \
  -o output.md \
  -p openai \
  -s casual \
  -c 3 \
  -v

# 全文模式
markdown-ai-rewrite rewrite -i input.md -o out.md -p openai --mode full -v

# 二级标题分章
markdown-ai-rewrite rewrite -i input.md -o out.md -p openai --section-level 2

# Anthropic
export ANTHROPIC_API_KEY="sk-ant-..."
markdown-ai-rewrite rewrite -i input.md -o out.md -p anthropic -s formal

# DeepSeek
export DEEPSEEK_API_KEY="..."
markdown-ai-rewrite rewrite -i input.md -o out.md -p deepseek

# Qwen
export QWEN_API_KEY="..."
markdown-ai-rewrite rewrite -i input.md -o out.md -p qwen

# Azure OpenAI
export AZURE_OPENAI_API_KEY="..."
export AZURE_OPENAI_ENDPOINT="https://your-resource.openai.azure.com"
markdown-ai-rewrite rewrite -i input.md -o out.md -p azure-openai -m gpt-4o-mini

# MiniMax(需 npm install openai)
export MINIMAX_API_KEY="..."
markdown-ai-rewrite rewrite -i input.md -o out.md -p minimax -m MiniMax-M2.1 -s casual

# 自定义提示(custom 风格)
markdown-ai-rewrite rewrite -i input.md -o out.md -p openai -s custom \
  --prompt "保持技术准确性,面向初级读者改写"

常用参数速查:-i/-o 输入输出,-p 厂商,-k 显式传 Key(也可全靠环境变量),-m 模型,--base-url(通用 endpoint 覆盖),-s 风格,-t 温度,--max-tokens--preserve-length-c 并发,--mode--section-level--minimax-base-url(兼容旧参数)。完整列表以 markdown-ai-rewrite rewrite --help 为准。


编程 API(TypeScript)

import { MarkdownRewriter } from 'markdown-ai-rewriter';

const rewriter = new MarkdownRewriter({
  provider: 'openai', // 'anthropic' | 'azure-openai' | 'gemini' | 'deepseek' | 'openrouter' | 'qwen' | 'glm' | 'doubao' | 'wenxin' | 'minimax' | 'custom'
  apiKey: process.env.OPENAI_API_KEY,
  model: 'gpt-4o-mini',
  mode: 'section',       // 或 'full'
  sectionLevel: 1,
  concurrency: 3,
  verbose: true,
  minimaxBaseUrl: process.env.MINIMAX_BASE_URL, // 仅 minimax 时可选
  options: {
    style: 'casual',
    temperature: 0.7,
    maxTokens: 2000,
  },
});

const result = await rewriter.rewrite(markdownString);
// result.rewritten, result.blocksProcessed, result.blocksRewritten

custom 提供方可使用 customProvider 注入,详见 npm 包 README。


输出与行为说明

  • 章节 / 全文 均基于当前实现的解析与重组逻辑;标题、代码块、表格等会尽量保留;图片在全文模式下通过占位符机制处理。
  • 列表、引用等是否逐条保留,与模型输出有关;若强约束,请在 --prompt 中明确要求。
  • 统计字段 blocksProcessed / blocksRewritten 在章节模式下对应章节单元等粒度,与旧版「按段落块计数」的日志不完全相同

常见问题

1. 提示缺少 API Key
请设置与 -p 一致的环境变量,或使用 -k 传入。

2. MiniMax 报错找不到模块
执行 npm install openai(MiniMax 使用 OpenAI 兼容客户端)。

3. 改写后结构不满意
尝试切换 --mode section / full、调整 --section-level、缩小 --max-tokens、或在 --prompt 中强调「保留所有 Markdown 列表与表格结构」。

4. 费用
以各云厂商定价为准;OpenAI 小模型、MiniMax 与 Anthropic 价差较大,README 中有量级参考。


与其他工具串联(示例)

convert-url --url "https://example.com/article" --output article.md

markdown-ai-rewrite rewrite -i article.md -o article-rewritten.md -p openai -s casual

发布等步骤按你的流水线工具执行即可。


维护说明

项目
对齐包版本0.3.3
仓库https://github.com/sipingme/markdown-ai-rewriter
npmhttps://www.npmjs.com/package/markdown-ai-rewriter
许可证MIT
维护者Ping Si sipingme@gmail.com

相关项目

Comments

Loading comments...