Scan Report
5 /100
humanizer
Detect and remove AI writing patterns in text. Uses 24 pattern detectors, 500+ vocabulary terms, and statistical analysis (burstiness, type-token ratio, readability) to score text and suggest humanization fixes.
Pure text-processing Node.js skill with no runtime dependencies, no network access, no shell execution beyond invoking the CLI, and no sensitive filesystem access.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | cli.js reads input files via fs.readFileSync; declared in SKILL.md |
| Network | NONE | NONE | — | No network imports (fetch/http) in any source file |
| Shell | NONE | NONE | — | scripts/*.sh only invoke 'node'; no subprocess or raw shell commands |
| Environment | NONE | NONE | — | No os.environ iteration or credential access |
| Clipboard | NONE | NONE | — | No clipboard access |
| Database | NONE | NONE | — | No database access |
| Skill Invoke | NONE | NONE | — | No skill invocation chains |
| Browser | NONE | NONE | — | No browser automation |
6 findings
Medium External URL 外部 URL
https://img.shields.io/badge/License-MIT-yellow.svg README.md:3 Medium External URL 外部 URL
https://img.shields.io/badge/tests-128%20passing-brightgreen README.md:4 Medium External URL 外部 URL
https://img.shields.io/badge/node-%3E%3D18-brightgreen README.md:5 Medium External URL 外部 URL
https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing README.md:11 Medium External URL 外部 URL
https://arxiv.org/abs/2503.01659 README.md:11 Medium External URL 外部 URL
http://test.org/path?query=1&foo=bar tests/edge-cases.test.js:163 File Tree
30 files · 206.6 KB · 5931 lines JavaScript 14f · 4486L
Markdown 9f · 1336L
JSON 2f · 54L
Text 3f · 31L
Shell 2f · 24L
├─
▾
assets
│ └─
banner.md
Markdown
├─
▾
docs
│ ├─
CONTRIBUTING.md
Markdown
│ ├─
EXAMPLES.md
Markdown
│ └─
PATTERNS.md
Markdown
├─
▾
references
│ ├─
ai-vocabulary.md
Markdown
│ ├─
patterns.md
Markdown
│ └─
style-guide.md
Markdown
├─
▾
scripts
│ ├─
analyze.sh
Shell
│ └─
humanize.sh
Shell
├─
▾
src
│ ├─
analyzer.js
JavaScript
│ ├─
cli.js
JavaScript
│ ├─
humanizer.js
JavaScript
│ ├─
patterns.js
JavaScript
│ ├─
stats.js
JavaScript
│ └─
vocabulary.js
JavaScript
├─
▾
tests
│ ├─
▾
fixtures
│ │ ├─
ai-sample-1.txt
Text
│ │ ├─
ai-sample-2.txt
Text
│ │ └─
human-sample-1.txt
Text
│ ├─
analyzer.test.js
JavaScript
│ ├─
calibration.test.js
JavaScript
│ ├─
edge-cases.test.js
JavaScript
│ ├─
humanizer.test.js
JavaScript
│ ├─
performance.test.js
JavaScript
│ └─
statistics.test.js
JavaScript
├─
_meta.json
JSON
├─
eslint.config.js
JavaScript
├─
package.json
JSON
├─
README.md
Markdown
├─
SKILL.md
Markdown
└─
vitest.config.js
JavaScript
Dependencies 3 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
eslint | ^9.0.0 | npm dev | No | Dev dependency only; not bundled with skill |
prettier | ^3.0.0 | npm dev | No | Dev dependency only; not bundled with skill |
vitest | ^3.0.0 | npm dev | No | Dev dependency only; not bundled with skill |
Security Positives
✓ No runtime external dependencies — only devDependencies for linting and testing
✓ No network requests in any source file
✓ No subprocess, exec, or shell command execution beyond invoking node
✓ No credential, SSH, AWS, or .env file access
✓ No eval, Function(), or dynamic code execution
✓ No base64 encoding/decoding with shell piping
✓ No hidden instructions or obfuscated code
✓ Doc-to-code alignment is strong — declared capabilities match implementation
✓ No data exfiltration channels
✓ Shell scripts are simple wrappers with no curl/wget remote execution