Doc Translate

• Verdict: Pass
• Confidence: Medium
• Analyzed: Apr 24, 2026, 4:28 AM
• Findings: 0
• Version: 0.1.0

Overview

The skill's code and instructions match its stated purpose (translating DOCX/PPTX/XLSX/PDF) and do not request unrelated credentials, but there are a few operational inconsistencies and missing dependency declarations you should be aware of before installing.

This skill appears to do what it says: it processes Office files locally by extracting XML/text, applying mapping-based replacements, and rebuilding archives. Before installing or running it: (1) Confirm required runtime dependencies (pdfplumber, python-docx, reportlab/pypdf2 as needed, and LibreOffice/soffice if you want PDF conversion) and install them in a controlled environment. (2) If you plan to use the Feishu download/upload snippets from SKILL.md, verify how your platform supplies Feishu tokens or message/file tokens — the skill does not request these credentials, so uploading/downloading will rely on your agent/platform integration. (3) Do not run this on highly sensitive documents unless you trust the execution environment — the scripts operate on local files and create intermediates in temp directories. (4) Review the translation mapping tables for proprietary/trademarked terms and medical/technical terms (the SKILL.md explicitly instructs preserving such terms). (5) If you need network-based translation (e.g., external AI APIs), note these scripts currently use only mapping rules and local libraries; no remote API calls are present. Overall the package is coherent and low-risk, but ensure dependencies and Feishu integration are handled explicitly and run it in an isolated environment if documents contain sensitive data.