pdf2zh-next翻译

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: pdf2zh-translator Version: 0.0.3 The skill is a well-structured wrapper for the pdf2zh-next translation utility. It demonstrates strong security practices, including explicit environment isolation in `scripts/run_pdf2zh_pipeline.py` (stripping sensitive environment variables and redirecting HOME/APPDATA to the skill directory) and strict path validation to ensure only the local `config.toml` is accessed. No evidence of data exfiltration, malicious execution, or prompt injection was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If an unexpected or malicious executable with that name is on PATH, the skill could run it during translation.

Why it was flagged

The wrapper depends on an external pdf2zh executable that is not packaged in the skill; this is central to the stated purpose but makes the trustworthiness of the installed CLI important.

Skill content

for name in ["pdf2zh_next", "pdf2zh-next", "pdf2zh"]:
        path = shutil.which(name)
...
raise RuntimeError("pdf2zh CLI not found. Install pdf2zh-next first, or provide --exe-path.")

Recommendation

Install pdf2zh-next from a trusted source and, if possible, provide a known absolute executable path.

Note

ASI03: Identity and Privilege Abuse

What this means

If you add API keys, the configured provider account may be used and billed for translations.

Why it was flagged

The bundled configuration is designed to hold translation-provider credentials, though the included values are placeholders rather than hardcoded secrets.

Skill content

openai_api_key = "null"
...
deepseek_api_key = "null"
...
azure_api_key = "null"

Recommendation

Use provider keys with limited scope where available, avoid storing unrelated credentials, and review provider billing/privacy settings.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Private PDF contents could be sent to a selected translation service as part of normal translation.

Why it was flagged

The configuration enables/selects translation services and includes cloud provider endpoints, so PDF text may be processed by the configured translation provider.

Skill content

siliconflowfree = true
...
aliyun_dashscope_base_url = "https://dashscope.aliyuncs.com/compatible-mode/v1"
...
siliconflow_base_url = "https://api.siliconflow.cn/v1"

Recommendation

Confirm which provider is active before use, and avoid sending confidential documents to remote services unless that is acceptable.