Traditional Chinese Dictionary

Query Traditional Chinese dictionaries from Ministry of Education (MOE) Taiwan. Supports looking up word definitions from the "國語辭典簡編本" (Concised Mandarin Di...

This skill appears coherent and uses reasonable safeguards (TLS, zip-slip checks, isolated storage). Before installing: 1) Inspect the full script files in the package (the provided excerpts are truncated in places) to confirm there are no hidden endpoints or unexpected behavior. 2) Run in a Python virtual environment and install dependencies with pip. 3) If you enable automatic updates (cron), choose a conservative interval and monitor downloaded files. 4) Verify the MOE URLs are the official domain (language.moe.gov.tw) and, if you want extra assurance, compare the bundled code to the upstream GitHub repo referenced in the README. 5) Because the package source in the registry is 'unknown' (no homepage), if you require higher assurance, ask the publisher for provenance or use the code only after manual review.

Type: OpenClaw Skill Name: tc-dict Version: 1.0.1 This skill is classified as benign. It transparently downloads dictionary data from a specified external source (MOE Taiwan) and stores it locally. The code demonstrates good security practices, including explicit Zip-Slip protection in `scripts/download_dictionary.py` to prevent directory traversal attacks during extraction, and uses TLS verification for all HTTPS connections. File operations are confined to a user-isolated directory (`~/.openclaw/dictionaries/`). There is no evidence of intentional malicious behavior, data exfiltration, or prompt injection attempts against the agent in the code or documentation. The primary remaining risk is a supply chain compromise of the MOE download server, which is an external factor, and the skill's internal security measures mitigate common attack vectors associated with file downloads.