← Back to Skills Marketplace
96
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install robust-text-auditor
Description
(已验证) 高可靠性文本审核器，结合本地规则、百度 API 和 AI 深度分析，提供三层合规性审查。
Usage Guidance
Before installing or running this skill, do the following checks: 1) Verify the missing orchestration script: SKILL.md references run.ps1 but the package contains only Python scripts; ask the author for the actual entrypoint and a clear invocation example. 2) Inspect baidu_api.py yourself: it sends data to official Baidu endpoints (aip.baidubce.com) — expected, but confirm you are comfortable sending audit text to that cloud. 3) Do NOT blindly paste your global credentials into ~/.openclaw/config.json — prefer creating a limited-scope Baidu key or using a per-skill config file. The skill metadata should declare the required config path and credential needs; request that from the publisher. 4) Ensure the skill’s output path and temporary files are acceptable (it writes prompt/output files in the skill directory). 5) If you will run this in automated/autonomous mode, remember the agent may invoke the skill and send text to Baidu without additional prompts — restrict usage to non-sensitive test data until you trust it. If the author cannot explain the run.ps1 discrepancy and update the metadata to declare the config requirement, treat the package as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: robust-text-auditor
Version: 1.0.1
The 'robust-text-auditor' skill is a legitimate tool designed for multi-layered text compliance auditing. It utilizes a local keyword scanner (local_scanner.py), integrates with official Baidu Cloud APIs for cloud-based censorship (baidu_api.py), and generates a structured prompt for further LLM analysis (create_final_prompt.py). The code follows standard practices for OpenClaw skills, such as reading credentials from the user's home directory (~/.openclaw/config.json) and communicating only with official endpoints (aip.baidubce.com). No evidence of data exfiltration, malicious execution, or prompt injection against the agent was found.
Capability Assessment
Purpose & Capability
The declared purpose (three-layer auditing using local rules, Baidu API, and AI) matches the included code: local_scanner.py (rules.json), baidu_api.py (calls Baidu endpoints), and create_final_prompt.py (builds the LLM prompt). However the SKILL metadata did not declare that Baidu credentials or a config path are required, even though the code clearly needs credentials in ~/.openclaw/config.json. That omission is inconsistent (not necessarily malicious) but important.
Instruction Scope
SKILL.md repeatedly instructs the agent to run a core run.ps1 orchestration script and to add Baidu credentials to ~/.openclaw/config.json. There is no run.ps1 included in the file manifest (only Python scripts). The instructions therefore do not match the shipped files and give ambiguous guidance about how the agent should invoke the skill. Also SKILL.md instructs the user to place credentials into a global config path (~/.openclaw/config.json) which the provided baidu_api.py will read; this is a sensitive operation and it was not declared in the skill metadata.
Install Mechanism
No install spec is provided (instruction-only), and all code shipped is plain Python source — there is no downloaded binary or external installer. This is lower risk than arbitrary downloads, but the repository includes executable scripts that will be run; the lack of an install step means the agent or user must execute them directly. The code imports requests (declared in SKILL.md requirements), which is reasonable for network calls.
Credentials
The skill requires Baidu API credentials, but the registry metadata lists no required env vars or config paths. The SKILL.md instructs the user to add baidu_api_key and baidu_secret_key to ~/.openclaw/config.json; baidu_api.py indeed reads that file. Requesting global config credentials is proportionate to calling Baidu's API, but the omission from metadata and the instruction to store credentials in a shared user config file is a security/privacy concern and should have been declared explicitly.
Persistence & Privilege
The skill does not request permanent inclusion (always:false) and does not declare any special system privileges. It will read the user's ~/.openclaw/config.json and write output files (create_final_prompt.py writes to an output path; SKILL.md says final_prompt.txt will be created in the skill directory). Reading a home-config file is a modest privilege — acceptable for a service needing API keys — but combined with the metadata omissions it raises caution.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install robust-text-auditor - After installation, invoke the skill by name or use
/robust-text-auditor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Updated SKILL.md with detailed usage instructions, prerequisites, and output information.
- Clarified the multi-layered auditing approach: local rule scanning, Baidu API review, and AI-based deep analysis.
- Specified required configuration of Baidu Cloud API credentials.
- Provided invocation examples for both file-based and string-based auditing.
- Described output format and expected workflow for integrating with language models.
Metadata
Frequently Asked Questions
What is 高可靠性文本审核器?
(已验证) 高可靠性文本审核器，结合本地规则、百度 API 和 AI 深度分析，提供三层合规性审查。 It is an AI Agent Skill for Claude Code / OpenClaw, with 96 downloads so far.
How do I install 高可靠性文本审核器?
Run "/install robust-text-auditor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 高可靠性文本审核器 free?
Yes, 高可靠性文本审核器 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 高可靠性文本审核器 support?
高可靠性文本审核器 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 高可靠性文本审核器?
It is built and maintained by an (@ahsbnb); the current version is v1.0.1.
More Skills