OEE Content Humanizer

Rewrites AI-generated text to remove robotic tone, adding natural cadence and channel-specific style for platforms like Twitter, LinkedIn, blogs, email, or T...

This skill appears to perform the advertised task (it sends your text to Anthropic/Claude and returns a rewritten version), but note two things before installing or using it: (1) the code requires ANTHROPIC_API_KEY even though the registry metadata says no env vars — treat that metadata as incorrect and don't paste secrets into the skill without confirming how you'll manage the API key; (2) your input text is transmitted to api.anthropic.com (so avoid sending PII, credentials, or confidential content unless you accept that exposure and trust Anthropic and the skill's unknown author). If you want extra caution, request the publisher to correct the metadata, verify the author/homepage, or run the script in an isolated environment and inspect network egress (or use a local model) before providing sensitive text.

Type: OpenClaw Skill Name: oee-content-humanizer Version: 1.0.0 The skill is suspicious due to a prompt injection vulnerability in `humanize.py`. User-provided text is directly embedded into the prompt sent to the Claude API without sanitization, allowing an attacker to potentially manipulate the LLM's behavior. While the script makes an expected network call to `api.anthropic.com` for its stated purpose, this vulnerability could lead to unintended LLM outputs or information disclosure. There is no evidence of intentional malicious behavior such as data exfiltration to unauthorized endpoints, persistence mechanisms, or direct shell injection.