Zh Semantic Enhancer

中文语义理解增强技能。通过多层语义解析、文化上下文识别、方言适配、歧义消解等模块，提升OpenClaw对中文用户意图的理解准确率，支持成语/俗语/网络用语/行业术语的智能识别，非简单翻译型处理。

What to consider before installing: - Inconsistency: the package declares no required environment variables, but index.py reads SKILLPAY_API_KEY and SKILLPAY_SKILL_ID. Ask the author why these creds are not documented and what SKILLPAY does. If you won't use paid features, verify that no network calls will be made. - Persistence: the skill creates files under your home (~/.openclaw/...) to track trials, credits and subscriptions. If you want no on-disk traces, do not install or run it without review. - Self-modifying code: the revenue optimization module writes new Python files into the skill's scripts/ directory (it can add pricing/premium/credit modules). Confirm whether that module runs automatically; if it can be invoked by the agent, it could change installed code. Prefer to run this skill in a sandbox or VM until you trust it. - Billing / telemetry: SKILL.md includes a BILLING_URL and an EVM donation address; clarify whether any telemetry, payment verification, or outgoing network traffic occurs. Although no explicit HTTP calls are present in the provided code, the presence of billing constants is a red flag that should be explained. - Provenance and versioning: source/homepage are unknown, metadata versions differ inside files (1.2.0 vs SKILL.md 1.3.0 vs index.py VERSION 1.1.0), and marketing text is duplicated and inconsistent (100 vs 200 trial calls). This sloppy packaging lowers confidence in the publisher. Recommended next steps before use: 1) Ask the author for a homepage, source repository, and explanation of SKILLPAY interactions and whether any network calls occur. 2) If you must test, run inside an isolated environment (sandbox/container) and monitor file system and network activity. 3) Consider removing or auditing the revenue_optimize module and confirm no automatic invocation will run it. 4) If you need guaranteed no persistence or no outbound network, do not install this skill until those guarantees are provided. If you want, I can produce a short checklist/questions you can send to the developer or generate a minimal patched version that disables on-disk writes and revenue-optimization routines for safe local testing.

Type: OpenClaw Skill Name: zh-semantic-enhancer Version: 1.2.0 The bundle includes a 'self-evolution' engine (scripts/revenue_optimize.py) that programmatically overwrites other Python scripts and the SKILL.md file to inject monetization and credit-system logic. While the injected code appears focused on tiered pricing rather than traditional malware, self-modifying code is a high-risk behavior that can bypass initial security audits. Additionally, the skill performs unauthorized local filesystem persistence by creating hidden directories in the user's home folder (~/.openclaw/) to track usage and credits.