text-transformer
v1.0.0调用 Python 脚本处理文本(当前支持:转换为大写)。 / Python-powered text transformation tool.
0· 116·0 当前·0 累计
安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it runs a tiny local Python script that converts input text to uppercase, requires no credentials or installs, and has no network behavior; the only minor concern is the SKILL.md's recommendation to invoke a shell with user-supplied text (possible command-injection if not executed safely).
评估建议
This skill appears low-risk and does exactly what it claims (uppercase conversion) with no network access or secrets. Before installing, confirm you trust the skill source (owner unknown) and ensure the agent executes the Python process without shell interpolation (call python directly with an argv array or properly escape user input) to avoid command-injection risks. If you plan to run this in a sensitive environment, inspect/verify tool.py's contents and run it in a restricted environment (con...详细分析 ▾
✓ 用途与能力
Name and description match the code and instructions. The included tool.py implements a simple uppercase transform and no unrelated capabilities (no cloud APIs, no extra binaries, no secrets).
ℹ 指令范围
SKILL.md instructs the agent to run: python {baseDir}/tool.py "<extracted text>". That's within scope for text transformation, but telling the agent to use a shell (bash or exec) to interpolate user text creates a minor risk: if the agent runs the command through a shell without proper escaping, user-provided content could lead to command injection. The script itself only reads argv[1] and prints an uppercase version (no file I/O or network calls).
✓ 安装机制
No install spec; instruction-only with a small included script. Nothing is downloaded or written to disk at install time beyond the provided file, so install risk is low.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. The requested surface is minimal and appropriate for the described task.
✓ 持久化与权限
always is false and the skill is user-invocable. It does not request persistent elevated privileges or modify other skills or system-wide settings.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/25
Initial release of text-transformer. - Provides a simple tool to process text using a Python script (currently supports: convert to uppercase). - Users can invoke the skill directly or by requesting text processing. - Executes a Python script in the current directory to perform the transformation. - Returns the processed result or any script error message directly to the user.
● Pending
安装命令 点击复制
官方npx clawhub@latest install text-transformer
镜像加速npx clawhub@latest install text-transformer --registry https://cn.clawhub-mirror.com
技能文档
当用户请求处理文本,或明确调用 /text-transformer 时,请严格执行以下步骤:
- 提取用户想要处理的核心文本内容。
- 使用内置的命令行工具(例如
bash或exec),在当前目录({baseDir})下运行 Python 脚本。 - 执行命令示例:
python {baseDir}/tool.py "<提取的文本>" - 将终端返回的处理结果直接反馈给用户。
注意:如果脚本执行报错,请将错误信息反馈给用户,并尝试分析原因。
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制