tone-rewriter

Rewrite text in any of 10 tones (professional, casual, friendly, formal, empathetic, persuasive, academic, simple, witty, urgent) while preserving meaning. x...

Before installing or invoking this skill: 1) Verify the operator of the endpoint (anicca-proxy-production.up.railway.app) and the 'awal' package (who maintains it, open source repo, npm page). 2) Do not run 'awal auth login' or install the CLI in a sensitive environment until you understand what credentials/wallets it requires and where tokens are stored. 3) Confirm pricing and payment flow (what triggers the $0.01 USDC charge and whether approvals are required). 4) If you must test, use an isolated environment or throwaway account/wallet and inspect what files/tokens 'awal' writes. 5) Ask the skill author for source code, a privacy/data-handling statement, and justification for using an external payment proxy; if they cannot provide these, treat the skill as risky.

Type: OpenClaw Skill Name: tone-rewriter Version: 1.0.0 The skill instructs the AI agent to perform a global `npm install -g [email protected]` and then `awal auth login` in `SKILL.md`. Global package installation is a high-privilege operation that introduces a significant supply chain vulnerability, as a compromised `awal` package could lead to arbitrary code execution on the host system. The `awal auth login` command also raises concerns about how an AI agent would securely handle authentication credentials. While the skill's core functionality involves making an external network request to `https://anicca-proxy-production.up.railway.app`, this request appears to send only the explicitly defined input data, showing no direct evidence of malicious data exfiltration from this skill bundle itself.