Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Image Translator

v1.0.0

Translate text or extract and translate text from images or image URLs using multiple engines including Baidu, Google, DeepL, and ChatGPT, supporting batch p...

2· 388·0 current·0 all-time
bypiclaza@leoking
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The scripts implement text and image translation as described (text POST to a translation API; image upload or URL-batch endpoints). However, SKILL.md advertises xiangjifanyi.com and openapi-doc.xiangjifanyi.com while the actual API endpoints used in code are api.tosoiot.com and api2.tosoiot.com — domain mismatch that could indicate outdated docs, a proxy service, or mislabeling. The skill does not request unrelated capabilities (no AWS, etc.).
Instruction Scope
Runtime instructions direct running the included Python scripts which: (a) POST text to https://api.tosoiot.com/task/v1/text/translate, and (b) upload local image files (via curl subprocess) to https://api2.tosoiot.com or POST URL batches to https://api.tosoiot.com. These actions will send entire image contents and text to external servers (expected for translation but privacy-sensitive). The scripts do not read arbitrary system config files or other environment variables.
Install Mechanism
No install spec is provided (instruction-only with included scripts). No downloads or archive extractions occur at install time; the files are plain Python scripts and a language reference file — low install risk.
Credentials
The skill does not declare required environment variables in the registry metadata, but SKILL.md and the scripts require API keys (TextTransKey, ImgTransKey, UserKey) as CLI arguments. Requiring service API keys is proportional, but the registry metadata not declaring them is an inconsistency and reduces transparency. No unrelated secrets are requested.
Persistence & Privilege
The skill does not request always: true and does not attempt to modify other skills or system-wide config. It runs only when invoked.
What to consider before installing
This skill will upload the text and image data you provide to external endpoints (api.tosoiot.com / api2.tosoiot.com) for translation — do not use it with sensitive images or confidential text unless you trust that service. Note the documentation in SKILL.md references xiangjifanyi.com while the scripts use tos oiot.com domains; verify which domain is authoritative (check TLS certs, service docs, or contact vendor). The scripts accept required keys as CLI arguments (not environment variables) — ensure you keep those keys secret and confirm the service's privacy/billing policies before sending lots of data. If you want stronger guarantees, prefer using the official vendor SDK/API endpoints you trust (e.g., Google/DeepL) or run local OCR/translation pipelines.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d4gexzhtj5bt0p1y3vaxbxn828ynv
388downloads
2stars
1versions
Updated 6h ago
v1.0.0
MIT-0

象寄翻译服务

象寄翻译服务提供高质量的文本翻译和图片翻译功能,支持多种翻译引擎,覆盖全球多种语言。

官方资源

功能特点

  • 文本翻译: 支持多语言文本翻译,可选择不同翻译引擎
  • 图片翻译: 智能识别图片中的文字并翻译,支持本地文件和URL两种方式
  • 批量处理: 支持批量翻译多张图片
  • 多种引擎: 支持阿里云、Google、百度、DeepL、ChatGPT 等多种翻译引擎

前置条件

使用前需要获取以下密钥:

密钥类型说明用途
TextTransKey文本翻译密钥文本翻译,在请求头 X-API-Key 中传递
ImgTransKey图片翻译服务标识码图片翻译,用于签名计算
UserKey用户密钥图片翻译,用于签名计算

获取密钥: 登录 象寄控制台 获取相关密钥。


文本翻译

使用 scripts/text_translate.py 进行文本翻译。

基本用法

python scripts/text_translate.py \
  --api-key YOUR_TEXT_TRANS_KEY \
  --texts "你好世界" \
  --source-language CHS \
  --target-language ENG

批量翻译

python scripts/text_translate.py \
  --api-key YOUR_TEXT_TRANS_KEY \
  --texts "你好世界" "今天天气很好" "欢迎使用象寄翻译" \
  --source-language CHS \
  --target-language ENG

指定翻译引擎

python scripts/text_translate.py \
  --api-key YOUR_TEXT_TRANS_KEY \
  --texts "Hello, how are you?" \
  --source-language ENG \
  --target-language CHS \
  --vendor DeepL

参数说明

参数必填说明
--api-key文本翻译密钥 (TextTransKey)
--texts要翻译的文本(可多个,空格分隔)
--source-language源语言代码
--target-language目标语言代码
--vendor翻译引擎,可选值见下表

支持的翻译引擎

Vendor说明
Aliyun阿里云翻译
GoogleGoogle 翻译
PapagoPapago 翻译(韩语优势)
Baidu百度翻译
DeepLDeepL 翻译(欧洲语言优势)
ChatgptChatGPT 翻译
GoogleLLMGoogle 大模型翻译

图片翻译

使用 scripts/image_translate.py 进行图片翻译,支持本地文件和 URL 两种方式。

本地文件翻译

翻译本地图片文件中的文字:

python scripts/image_translate.py \
  --img-key YOUR_IMG_TRANS_KEY \
  --user-key YOUR_USER_KEY \
  --file /path/to/image.png \
  --source-language JPN \
  --target-language ENG

URL 翻译(批量)

翻译网络图片(支持批量):

python scripts/image_translate.py \
  --img-key YOUR_IMG_TRANS_KEY \
  --user-key YOUR_USER_KEY \
  --urls "https://example.com/image1.jpg" "https://example.com/image2.jpg" \
  --source-language CHS \
  --target-language ENG

高质量翻译

使用 BestQuality 模式获得更高质量的翻译结果:

python scripts/image_translate.py \
  --img-key YOUR_IMG_TRANS_KEY \
  --user-key YOUR_USER_KEY \
  --file /path/to/image.png \
  --source-language JPN \
  --target-language ENG \
  --qos BestQuality

参数说明

参数必填说明
--img-key图片翻译服务标识码 (ImgTransKey)
--user-key用户密钥 (UserKey),用于签名
--file二选一本地图片文件路径
--urls二选一图片 URL 列表(可多个,空格分隔)
--source-language源语言代码
--target-language目标语言代码
--qos翻译质量:LowLatency(偏好速度)或 BestQuality(偏好质量)
--need-watermark是否添加水印:1=是,0=否(默认 1)
--need-rm-url是否返回去文字图片链接:1=是
--engine-type翻译引擎类型(5=ChatGPT)
--syncURL 翻译时:1=同步返回(默认),2=异步返回

签名计算

图片翻译接口需要签名验证,签名方法:

Sign = md5(CommitTime + "_" + UserKey + "_" + ImgTransKey).lower()

脚本会自动计算签名,只需提供 --user-key--img-key


支持的语言

常用语言代码

代码语言代码语言
CHS中文简体CHT中文繁体
ENG英语JPN日语
KOR韩语DEU德语
FRA法语ESP西班牙语
RUS俄语PT葡萄牙语
ITA意大利语TH泰语
VIN越南语ID印尼语

完整语言列表见 references/languages.md


API 端点

功能端点
文本翻译POST https://api.tosoiot.com/task/v1/text/translate
图片翻译(文件)POST https://api2.tosoiot.com/
图片翻译(URL 批量)POST https://api.tosoiot.com/

错误码

Code说明
200响应成功
101请求超时
102系统错误
104参数错误
105该语向不支持
107翻译错误
110账号没有开通服务
113账号服务没有开通或者欠费
120额度不足

使用示例

示例 1:翻译日文图片为英文

python scripts/image_translate.py \
  --img-key YOUR_IMG_KEY \
  --user-key YOUR_USER_KEY \
  --file /path/to/japanese_manga.png \
  --source-language JPN \
  --target-language ENG \
  --qos BestQuality

示例 2:翻译中文文本为日语

python scripts/text_translate.py \
  --api-key YOUR_API_KEY \
  --texts "你好,欢迎使用象寄翻译服务" \
  --source-language CHS \
  --target-language JPN \
  --vendor Chatgpt

示例 3:批量翻译电商图片

python scripts/image_translate.py \
  --img-key YOUR_IMG_KEY \
  --user-key YOUR_USER_KEY \
  --urls "https://example.com/product1.jpg" "https://example.com/product2.jpg" \
  --source-language CHS \
  --target-language ENG

示例 4:使用 DeepL 翻译欧洲语言

python scripts/text_translate.py \
  --api-key YOUR_API_KEY \
  --texts "Guten Tag, wie geht es Ihnen?" \
  --source-language DEU \
  --target-language FRA \
  --vendor DeepL

联系方式

如有问题或需要技术支持,请通过以下方式联系:

Comments

Loading comments...