Markdown Ai Rewriter

基于 markdown-ai-rewriter 的 Markdown AI 改写 Skill（保留结构、章节/全文模式、多模型、图片生成、视频生成、音乐生成）

This skill is internally consistent with its stated purpose, but it runs a third‑party npm package inside the agent process and will use any provider API keys you give it. Before installing: 1) audit the upstream npm package ([email protected]) and its GitHub repo; 2) prefer installing in an isolated environment or VM; 3) avoid placing broad/long-lived credentials in shared env vars (use provider consoles to rotate/restrict keys and scopes); 4) do not enable or supply any shared platform keys unless you trust the provider; 5) verify network endpoints and the package version; and 6) if you need stronger isolation, run the CLI in a controlled subprocess/container rather than allowing an in-process dynamic import.

Type: OpenClaw Skill Name: markdown-ai-rewriter Version: 1.2.5 The skill is a wrapper for the legitimate 'markdown-ai-rewriter' npm package, providing tools for Markdown rewriting and AI media generation. The launcher script (scripts/run.js) is well-implemented with security in mind, using strict argument validation (length checks and control character filtering) and in-process dynamic imports rather than risky shell execution. The requested permissions and environment variables (API keys for various AI providers) are consistent with the stated functionality, and no evidence of malicious intent or data exfiltration was found.