by 安全扫描
OpenClaw
可疑
medium confidence该软件包实现了所声称的希伯来文工具，且不涉及网络/凭据访问，但存在一致性问题（CLI/安装与 Python 导入不匹配，以及少量代码缺陷），使其不可靠，使用前需仔细检查。
评估建议
This 技能 应用ears to implement the clAImed Hebrew text utilities and does not 请求 凭证s or network 访问, but there are mismatches and minor code issues you should 添加ress before trusting it: (1) 技能.md shows a 命令行工具 'hebrew-工具s' and a Python 导入 'scripts.hebrew_工具s', yet the included file is 'scripts/hebrew-工具s.py' (hyphen). That 预防s 导入ing as a 模块 and means the 命令行工具 won't be on PATH unless you 安装/rename it. (2) The transliteration m应用ing has duplicate/conflicting entries (e.g., 'ת' 应用ears more than once) ...详细分析 ▾
ℹ 用途与能力
The name/description match the provided code: transliteration, gematria, nikud removal, letter naming, and number 格式化ting are implemented in the included Python file. However, the 技能.md expects a 命令行工具 named 'hebrew-工具s' and a Python 导入 path 'scripts.hebrew_工具s', while the provided file is named 'scripts/hebrew-工具s.py' (hyphen). That filename 预防s 导入ing as a Python 模块 and also there is no 安装 spec to expose a 'hebrew-工具s' command on PATH. These mismatches are coherence issues (likely typos or missing 安装 steps) but not direct evidence of malicious intent.
ℹ 指令范围
运行time instructions and examples are narrowly scoped to text processing and do not 请求 files, 环境 variables, or external 端点s. The code likewise performs only local string processing. The 技能.md's examples assume a 命令行工具 and Python API that are not actually 导入able/安装ed given the included filename, which is an inconsistency in 运行time expectations.
✓ 安装机制
There is no 安装 spec (instruction-only), which is low-risk. The package includes a single Python script; no 下载s, external packages, or 安装 hooks are specified. The mAIn concern is that the 技能.md assumes an 安装ed 命令行工具/模块 but no mechanism to 创建 one is provided.
✓ 凭证需求
No 环境 variables, 凭证s, or config paths are 请求ed. The code does not 访问 network, files beyond stdin/stdout, or 环境 variables, so 请求ed privileges are proportionate to the 状态d purpose.
✓ 持久化与权限
The 技能 does not 请求 always:true and does not modify 代理/系统 configurations. Autonomous invocation is allowed by default (平台 normal), but the 技能 itself does not 请求 elevated persistence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install hebrew-text-tools
镜像加速npx clawhub@latest install hebrew-text-tools --registry https://cn.longxiaskill.com 镜像可用
技能文档
---|------|------|
| hebrew-tools | 全部转换 | hebrew-tools "שלום" |
| hebrew-tools -t | 仅转写 | hebrew-tools -t "תורה" → "torah" |
| hebrew-tools -g | 仅数值 | hebrew-tools -g "חי" → 18 |
| hebrew-tools -n | 去元音 | hebrew-tools -n "בְּרֵאשִׁית" → "בראשית" |
| hebrew-tools -l | 字母名 | hebrew-tools -l "אב" → [Alef, Bet] |
| hebrew-tools -r | 反转 RTL | hebrew-tools -r "שלום" → "מולש" |
| hebrew-tools -N | 数字转字母 | hebrew-tools -N 26 → "כו" |
默认输出格式
``
original: שלום
has_hebrew: True
transliteration: shalom
no_nikud: שלום
gematria: 376
letter_names: [Shin, Lamed, Vav, Mem]
` 功能
转写
- 阿什肯纳兹发音风格
- 支持所有字母及词尾形式
- 区分 Shin/Sin 左右点
- 处理 Dagesh
数值
- 标准 Mispar Hechrachi 值
- 含词尾字母
- 有无元音均可
去元音
- 移除所有元音符号与吟诵标记
- 保留基础字母
- 处理复合字符
字母名
- 返回英文字母名
- 词尾形式标注（如“Mem Sofit”）
- 非希伯来字符原样保留
数字格式化
- 整数转字母（数值风格）
- 标准缩写（如 613→תרי"ג）
- 范围：1–999
Python API
`python
from scripts.hebrew_tools import transliterate, gematria, remove_nikud print(transliterate("תורה")) # "torah"
print(gematria("חי")) # 18
clean = remove_nikud("בְּרֵאשִׁית")
print(clean) # "בראשית"
``
限制
- 转写仅阿什肯纳兹风格，暂无塞法迪变体
- 数字格式化仅支持 1–999
- RTL 反转为基础级（按词，非字符）
暂无评论