Video Translator

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent video-translation integration that sends user-provided media to a declared remote service with an API key; no hidden, destructive, or purpose-mismatched behavior is evident.

Before installing, confirm you trust the luoji.cn/audiox-api-global.luoji.cn service, only upload videos or URLs you are permitted to share, and keep VIDEO_TRANSLATE_SERVICE_API_KEY private. The reviewed artifacts do not show hidden background execution, destructive actions, or unrelated data access.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The remote service can receive and process the video content or video URL provided for translation.

Why it was flagged

The skill explicitly sends either a user-provided video file or video URL to a fixed external API. This is central to the stated purpose, but it is still an external transfer of user media.

Skill content
Base URL 固定为:`https://audiox-api-global.luoji.cn` ... `video`:二进制视频文件 ... `video_url`:可访问的 `http(s)` 视频链接
Recommendation

Only provide videos or URLs you are allowed to share with the provider, and ask for explicit confirmation before uploading sensitive media.

What this means

Anyone with the API key could potentially submit translation jobs or use the associated service quota.

Why it was flagged

The skill requires a service API key and uses it as a bearer token for API calls. This is expected for the integration, but it grants service access and may consume account quota.

Skill content
`api_key`:请求头 `Authorization: Bearer <api_key>` ... 必须设置环境变量 `VIDEO_TRANSLATE_SERVICE_API_KEY`
Recommendation

Store the API key securely, prefer a scoped or revocable key if available, and rotate it if it may have been exposed.

What this means

Users have less independent provenance information about the publisher or implementation origin.

Why it was flagged

The package does not provide a public source or homepage for provenance verification, although it also does not include an installer or hidden dependency flow.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Install only if you trust the listed owner and the luoji.cn/audiox-api-global.luoji.cn service relationship.