翻译SKILL.md文档

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill does what it claims: reads a user-specified SKILL.md, translates it to Chinese, and writes a translated copy in the same folder.

This appears safe for its stated purpose. Before using it, make sure the path points to the intended skill folder and that overwriting SKILL(1).md is acceptable.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If the user gives the wrong folder, the agent could read the wrong SKILL.md or overwrite an existing SKILL(1).md translation file.

Why it was flagged

The skill uses user-directed local file access and explicitly states it may overwrite an existing output file. This is expected for a translation/export tool, but users should confirm the path and filename.

Skill content

读取指定路径下的 SKILL.md 文件 ... 在相同目录下创建 SKILL(1).md 文件 ... 输出文件会覆盖同名的 SKILL(1).md 文件（如果存在）

Recommendation

Use the skill only with a verified skill folder and back up or rename any existing SKILL(1).md file if you need to preserve it.