← Back to Skills Marketplace
tone-rewriter
by
Daisuke Narita
· GitHub ↗
· v1.0.0
531
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tone-rewriter
Description
Rewrite text in any of 10 tones (professional, casual, friendly, formal, empathetic, persuasive, academic, simple, witty, urgent) while preserving meaning. x...
Usage Guidance
Before installing or invoking this skill: 1) Verify the operator of the endpoint (anicca-proxy-production.up.railway.app) and the 'awal' package (who maintains it, open source repo, npm page). 2) Do not run 'awal auth login' or install the CLI in a sensitive environment until you understand what credentials/wallets it requires and where tokens are stored. 3) Confirm pricing and payment flow (what triggers the $0.01 USDC charge and whether approvals are required). 4) If you must test, use an isolated environment or throwaway account/wallet and inspect what files/tokens 'awal' writes. 5) Ask the skill author for source code, a privacy/data-handling statement, and justification for using an external payment proxy; if they cannot provide these, treat the skill as risky.
Capability Analysis
Type: OpenClaw Skill
Name: tone-rewriter
Version: 1.0.0
The skill instructs the AI agent to perform a global `npm install -g [email protected]` and then `awal auth login` in `SKILL.md`. Global package installation is a high-privilege operation that introduces a significant supply chain vulnerability, as a compromised `awal` package could lead to arbitrary code execution on the host system. The `awal auth login` command also raises concerns about how an AI agent would securely handle authentication credentials. While the skill's core functionality involves making an external network request to `https://anicca-proxy-production.up.railway.app`, this request appears to send only the explicitly defined input data, showing no direct evidence of malicious data exfiltration from this skill bundle itself.
Capability Assessment
Purpose & Capability
The skill claims a simple text-rewrite capability but the SKILL.md instructs callers to install a third-party npm CLI (awal) and use an x402 pay endpoint hosted on a Railway domain. The need for a payment/auth flow is not explained in the top-level metadata; asking a user to install a CLI and authenticate is disproportionate to the simple 'tone rewrite' description unless this is explicitly a paid third‑party service.
Instruction Scope
The instructions direct the agent/user to run 'npm install -g [email protected]' and 'awal auth login', then use 'npx [email protected] x402 pay' to call a remote endpoint. These steps involve installing software, performing login/auth, and initiating a payment — all outside the minimal scope of rewriting text. The SKILL.md does not document what credentials are created, what is stored locally, or what data is sent to the upstream endpoint.
Install Mechanism
There is no formal install spec in the registry, but the SKILL.md requires installing a public npm package (awal) or using npx. Using an npm package is a moderate risk: it is traceable but executes third-party code. The network endpoint used (anicca-proxy-production.up.railway.app) is a third-party Railway app rather than a well-known vendor domain, which raises trust questions about who runs the service.
Credentials
The registry declares no required environment variables or credentials, yet the instructions require 'awal auth login' and a payment via x402. That implies creation/use of local credentials or wallet access not declared in the skill metadata. This is disproportionate because the skill asks for authentication/payment without specifying what secrets/scopes will be used or stored.
Persistence & Privilege
The skill is not marked 'always' and does not request system-wide privileges, but the advised 'awal auth login' flow likely persists auth tokens/credentials on the host. The skill could thereby gain continued access to the payment service or stored credentials across agent runs; the SKILL.md does not explain token lifecycle or revocation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tone-rewriter - After installation, invoke the skill by name or use
/tone-rewriter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: 10-tone text rewriter for AI agents
Metadata
Frequently Asked Questions
What is tone-rewriter?
Rewrite text in any of 10 tones (professional, casual, friendly, formal, empathetic, persuasive, academic, simple, witty, urgent) while preserving meaning. x... It is an AI Agent Skill for Claude Code / OpenClaw, with 531 downloads so far.
How do I install tone-rewriter?
Run "/install tone-rewriter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is tone-rewriter free?
Yes, tone-rewriter is completely free (open-source). You can download, install and use it at no cost.
Which platforms does tone-rewriter support?
tone-rewriter is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin, linux).
Who created tone-rewriter?
It is built and maintained by Daisuke Narita (@daisuke134); the current version is v1.0.0.
More Skills