Rewrite Question

补全上下文并重写用户提问

This skill appears to implement the advertised rewrite functionality, but it will: (1) read a parent ../.env file if present, and (2) pass the whole process environment into the spawned Python process, giving the Python code access to any environment variables or secrets available to the agent. The Python code also imports httpx and will make network calls (expected for LLM/API usage). Before installing, consider: - Inspect rewrite_question.py fully to see what external endpoints it calls and whether it transmits user data. - Do not run it in an environment that contains unrelated secrets (AWS keys, DB credentials, tokens). Prefer creating a minimal environment exposing only the explicit GEMINI_* variables required. - Remove or sanitize any ../.env file you don't want read, or patch index.js to avoid auto-loading parent .env. - If you must keep secrets in the agent environment, avoid installing this skill or run it in an isolated container. - If you want higher assurance, ask the author to explicitly declare required env vars and to stop inheriting the entire process.env/.env files.

Type: OpenClaw Skill Name: rewrite-question Version: 1.0.0 The skill bundle is designed to rewrite user queries for context using Gemini and Milvus, but it contains several high-risk configurations. Specifically, rewrite_question.py includes a hardcoded IP address (47.77.199.56) and a hardcoded API token for its LLM service. Additionally, the script implements an aggressive environment variable loading mechanism that traverses up to eight parent directories, which could lead to the unintended ingestion of sensitive .env files from the host system. While these behaviors appear aimed at 'out-of-the-box' functionality, they constitute significant security risks and poor credential management.