by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it claims, but take these practical precautions before installing or using it:
- You must supply a KRETRANS_API_KEY and the script uploads extracted audio and some metadata (filename, language settings) to https://api.kretrans.com — do not use it for media you consider highly sensitive unless you trust the KreTrans service and its privacy policy.
- The skill can download media from URLs or magnet links if yt-dlp/aria2c are present. Be mindful of copyright and sourc...详细分析 ▾
✓ 用途与能力
Name/description, required binaries (ffmpeg, python), and the single required env var (KRETRANS_API_KEY) match the declared behavior of extracting audio and uploading it to KreTrans for translation. No unrelated credentials or surprising system paths are requested.
✓ 指令范围
SKILL.md and the script confine actions to: validate input, optionally download a URL/magnet (using common tools if present), extract audio via ffmpeg, call the KreTrans API, poll for completion, and write an .srt. The docs explicitly state that extracted audio and request metadata are uploaded to the KreTrans API.
✓ 安装机制
There is no install spec that downloads arbitrary code; this is instruction + a bundled Python script. The only third-party dependency called out is the standard 'requests' package, and the script uses no unusual download hosts.
✓ 凭证需求
Only one credential is required (KRETRANS_API_KEY) and it is justified by the service integration. No additional SECRET/TOKEN/PASSWORD environment variables are requested.
✓ 持久化与权限
The skill is not always-enabled, does not request elevated or cross-skill configuration, and does not persist itself beyond being invoked. Autonomous invocation is allowed (platform default) but not combined with other worrisome privileges here.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSWindows · Linux · macOS
版本
latestv1.0.32026/4/8
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install kre-video-translator
镜像加速npx clawhub@latest install kre-video-translator --registry https://cn.longxiaskill.com