📦 Polyglot — 技能工具
v1.1.0[自动翻译] Translate text to any language with formality control and cultural notes. Target language defaults to English.
1· 322·4 当前·4 累计
by 安全扫描
OpenClaw
安全
medium confidenceThis is a coherent wrapper around a paid external translation API (aiprox.dev) that requires a spend token and will send your text to that third party — it appears to do what it says, but you should not send sensitive data and should verify the provider and token scope.
评估建议
This skill appears to be a straightforward wrapper for a paid translation API, but it will send whatever text you give it (including any PII, secrets, or confidential content) to a third-party endpoint and uses a spend token for billing. Before installing: 1) Do not use the skill to translate sensitive or confidential text unless you trust aiprox.dev and have verified its privacy/logging policy. 2) Confirm what privileges and billing scope AIPROX_SPEND_TOKEN grants; prefer a limited/one-use toke...详细分析 ▾
✓ 用途与能力
Name, description, and runtime instructions all describe a translation service and the declared requirement (AIPROX_SPEND_TOKEN) is consistent with calling a paid external API. No unrelated binaries, credentials, or installs are requested.
ℹ 指令范围
SKILL.md instructs the agent to POST arbitrary user text to https://aiprox.dev/api/orchestrate with the X-Spend-Token header. That matches the stated purpose (remote translation) but means user-provided text is transmitted to a third party; the file also contains an unverifiable trust statement that data is not stored or logged.
✓ 安装机制
Instruction-only skill with no install spec and no code files; nothing is written to disk by the skill itself, which is the lowest-risk install pattern.
ℹ 凭证需求
Only a single environment variable (AIPROX_SPEND_TOKEN) is required, which is proportionate for a paid API. Treat the token as sensitive: it likely enables billing/spend and possibly API access — ensure the token is scoped/limited and not reused for other services.
✓ 持久化与权限
always is false and the skill does not request system-wide persistence or modify other skills. Autonomous invocation is enabled by default but not excessive here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/10
Now supports model selection — specify any of 19 models across 5 providers per request (e.g. gemini-2.5-flash, mistral-large-latest, claude-opus-4-5-20251101)
● 无害
安装命令
点击复制官方npx clawhub@latest install polyglot
镜像加速npx clawhub@latest install polyglot --registry https://cn.longxiaskill.com
技能文档
Translate text between any languages with formality control and cultural context. Detects source language automatically and provides notes on idioms, formality, and cultural considerations. Target language defaults to English if not specified.
When to Use
- Translating documents or messages
- Understanding foreign language content
- Localizing content with cultural awareness
- Controlling tone with formal or informal register
- Learning about linguistic nuances
Usage Flow
- Provide text to translate
- Optionally specify
target_language(defaults to English) - Optionally set
formality:formal,informal, orneutral(default) - AIProx routes to the polyglot agent
- Returns translated text, detected source language, target language used, cultural notes, and formality level
Security Manifest
| Permission | Scope | Reason |
|---|---|---|
| Network | aiprox.dev | API calls to orchestration endpoint |
| Env Read | AIPROX_SPEND_TOKEN | Authentication for paid API |
Make Request
curl -X POST https://aiprox.dev/api/orchestrate \
-H "Content-Type: application/json" \
-H "X-Spend-Token: $AIPROX_SPEND_TOKEN" \
-d '{
"text": "The early bird catches the worm",
"target_language": "Japanese",
"formality": "formal",
"task": "translate"
}'
Response
{
"translated": "早起きは三文の徳",
"language": "English",
"target_language": "Japanese",
"notes": "Used the equivalent Japanese proverb '早起きは三文の徳' (hayaoki wa sanmon no toku) meaning 'waking early brings three mon of virtue.' Both emphasize benefits of rising early; the Japanese version focuses on small but certain gains.",
"formality": "formal"
}
Trust Statement
Polyglot processes text for translation only. Content is not stored or logged beyond the transaction. Translation is performed by Claude via LightningProx. Your spend token is used for payment only.