Api Translator

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it says—fetch and translate API documentation—but users should avoid private docs and verify the unsupported OpenClaw-team attribution.

This skill is reasonable for translating public API documentation. Before installing or using it, verify the publisher claim if official provenance matters, and do not provide private or authenticated API docs unless you are comfortable with the content being fetched and placed into the LLM translation context.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A malicious or unusual documentation page could try to influence the agent instead of merely being translated.

Why it was flagged

Fetched API documentation is untrusted text that becomes model input; the artifacts do not add an explicit guard to ignore any commands or instructions embedded in that documentation.

Skill content
1. 使用 `web_fetch` 工具抓取 API 文檔內容
2. 將內容發送給 LLM 翻譯
Recommendation

Use clear delimiters and instruct the agent to translate the fetched content only, treating all page text as data rather than instructions.

What this means

Private API documentation supplied to this skill may be exposed to the model context during translation.

Why it was flagged

The skill’s core workflow sends the fetched API document content to an LLM for translation, which is expected for the purpose but relevant if the document is private or confidential.

Skill content
將 API 文檔翻譯成繁體中文(使用 LLM)。
Recommendation

Use it for public or approved documentation, and avoid authenticated or confidential API docs unless that data handling is acceptable.

What this means

Users may place extra trust in the skill because it appears to claim official authorship.

Why it was flagged

The skill claims OpenClaw-team authorship, but the provided registry context lists the source as unknown and no homepage, so the official attribution is not substantiated by the supplied artifacts.

Skill content
*本技能由 OpenClaw 團隊開發*
Recommendation

Verify the publisher or official source before relying on the attribution.