C — Moderate risk signals Graded October 16, 2026Several concerns worth a closer look before you install.Based on public adoption and transparency signals as of October 16, 2026. Our opinion, not a code audit or security guarantee.
AI agent skill · General
human-writing
让 AI 写的中文读起来像一个具体的人在说话。通用创作与改稿 Skill,开箱即用。
Bottom line: Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
- Popularity score
- 41/100
- Rank
- #307 of 500
- GitHub stars
- 4.1k
What it does
Makes AI-generated Chinese text read naturally as if written by a specific person, with a general-purpose writing and editing skill that works out of the box. Applies stylistic patterns and tone adjustments to make generated content feel more authentic and human-like.
Who it’s for
Teams building Chinese-language AI applications who need generated content to sound conversational and natural. Product managers and content creators using AI to draft or revise Chinese text at scale.
Copy-paste setup
Check these steps against the project’s own instructions before running anything.
Verify against the repo README at https://github.com/KKKKhazix/human-writing (opens external site) for the latest integration steps. Likely integrates as a Claude skill or prompt-based module; copy-paste configuration details from the repository's setup instructions.
Risks
- Limited adoption signals (0 weekly npm downloads) suggest minimal real-world validation and potential for undiscovered bugs or edge cases
- No clear credential or permission model documented; verify whether the skill processes sensitive text locally or sends data to external services
- Prompt injection risk if user input directly influences the 'person' persona being mimicked without sanitization
- Supply-chain risk from single maintainer; no clear maintenance roadmap or security update policy visible from signals
- Tone/persona injection could inadvertently bias AI outputs or misrepresent organizational voice if not carefully controlled
How to stay secure
Least-privilege permissions
- Only grant this skill access to non-sensitive content during testing. Never use it with customer data, financial information, or personal details.
- If the skill connects to external services, use dedicated API keys with minimal permissions—never share your main account credentials.
- Restrict who in your team can use this skill; limit to writers and content teams, not to anyone who needs general system access.
Network isolation
- Test the skill in a sandboxed environment (a separate, isolated workspace) before using it with real content to see where your data travels.
- If available, configure the skill to process text locally only—verify with the maintainer that content doesn't get sent to external servers without your explicit consent.
- Disable internet connectivity for the skill if your platform allows it, unless the skill genuinely requires cloud services to function.
Monitoring
- Log and review all outputs, especially if the skill is used across different teams or departments—watch for unexpected tone shifts or misrepresented organizational voice.
- Set up alerts if the skill processes unusually large batches of text or makes requests at odd hours, which could indicate misuse.
- Keep copies of input and output samples to audit whether the skill is behaving consistently and appropriately over time.
Red flags to watch for
- Zero updates or responses from the maintainer to bug reports or security questions—this suggests the skill may be abandoned and won't receive security patches.
- Requests from the skill for unusual permissions (like access to your file storage or email) that aren't needed for writing assistance.
- Inconsistent or suddenly changed outputs, or outputs that include information you didn't provide as input—this may signal prompt injection or data leakage.
Alternatives
- Built-in Claude prompt engineering for Chinese tone/style (no external dependency)
- OpenAI's GPT fine-tuning on custom Chinese writing samples
- Specialized Chinese NLP tools like Hugging Face's Chinese BERT models for style transfer
- Manual copyediting workflows with human-in-the-loop review for critical content