当用户想要**纠正中文文本错误**、**修改拼写错别字**、**修正语法**、**调整标点**、**润色中文句子**、**检查形近字错误**时自动触发。 使用 pycorrector + MacBERT 专业模型进行高精度中文纠错，准确率远高于普通 LLM 直接提示。 支持直接输入一段文字、长文本，或提供文本文件...

This skill appears to implement genuine Chinese text-correction functionality, but it has several surprising and potentially risky behaviors you should weigh before installing: - It will perform network downloads from Hugging Face, PyPI and PyTorch servers and may download hundreds of MBs (model weights, wheels). - The code (ensure_package.py) force-reinstalls setuptools in the current Python interpreter as soon as it is imported — that happens before the venv is created and can change your system or user Python environment unexpectedly. - The skill creates a virtual environment outside the skill folder (VENV_DIR up the tree), writes models and logs to disk, and restarts the script under that venv. - If you point the skill at a directory it will recursively process many file types including .py, .json, .js, .css — this can corrupt code or configuration files. The README/SKILL.md emphasize .txt, but the implementation includes many code file extensions. Recommendations before using/installing: - Run the skill in an isolated environment (dedicated VM/container) or inspect/modify the code to avoid global pip changes. In particular, move the setuptools-reinstall call into the venv flow or remove it. - Limit which file extensions it processes (edit get_text_files to restrict to .txt/.md if you only want text). - Verify and, if desired, change VENV_DIR to a safe location inside a sandbox rather than the parent of the skill root. - Backup any directories you plan to process, and test with a small sample first. - If you need stricter control, remove or gate automatic network downloads (snapshot_download) and perform model downloads manually into the expected models directory. If you want, I can provide a suggested patch to (a) stop setuptools being reinstalled on import, (b) restrict processed extensions to safe text files, and (c) keep the venv inside the skill directory or prompt before creating it.

Type: OpenClaw Skill Name: llm-text-correct Version: 1.2.4 The skill implements extensive automated environment setup and package management logic in 'env_manager.py' and 'ensure_package.py', which use subprocess to create virtual environments, force-reinstall specific versions of 'setuptools', and install various dependencies from PyPI. It also performs automated downloads of large model artifacts from Hugging Face using 'snapshot_download' in 'correct_text.py'. While these behaviors are functionally aligned with the stated purpose of high-performance Chinese text correction, the broad use of shell execution and remote artifact fetching constitutes a high-risk attack surface.