by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
What to check before you install or run this skill:
1) Credentials & privacy: The SKILL.md/README expect a Claude/Anthropic API key (via --api-key or env var) and network access for translation. The registry metadata did not declare required env vars — inspect translator.py to confirm exact env var names (e.g., CLAUDE_API_KEY, ANTHROPIC_API_KEY) and endpoints. If you will translate sensitive or proprietary docs, prefer a local/offline translation mode or review terms of the external API provide...详细分析 ▾
ℹ 用途与能力
The included scripts (parser, detector, translator, glossary manager, validator) align with the skill's description of translating Markdown while preserving structure and applying glossaries. Functionality described matches the code artifacts and reference docs.
✓ 指令范围
Runtime instructions are focused on translating Markdown files, handling glossaries, and validating output. Commands reference only the provided scripts and supported features (single file, batch, glossary, validation). There are no instructions that request unrelated system data or to modify unrelated configs.
ℹ 安装机制
No install spec is provided (lowest install risk), but the package includes multiple Python scripts and documentation that expect Python packages (requests, pyyaml, markdown, and an LLM client). The README and SKILL.md assume these are preinstalled in the environment; that assumption should be verified in your runtime environment.
⚠ 凭证需求
SKILL.md and README reference a Claude/Anthropic API key and network access (e.g., --api-key or CLAUDE_API_KEY, and an 'anthropic' client in README) yet registry metadata lists no required environment variables or credentials. This mismatch is important because translation will send document text to an external API (privacy/data-exfiltration risk). Confirm exactly which env var names are read by the code and whether any other credentials are accessed.
✓ 持久化与权限
The skill does not request always:true, does not declare required config paths, and does not claim to modify other skills or system-wide settings. It appears to run as a normal, user-invocable tool.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/18
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install markdown-multilingual-translator
镜像加速npx clawhub@latest install markdown-multilingual-translator --registry https://cn.longxiaskill.com