Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Google Cloud Translate Pro

v1.0.0

Translate text across 195 languages using Google Cloud Translation API with zero-config setup. Use when: (1) translating text between any language pair, (2)...

0· 11·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The name/description claim 'Google Cloud Translation API' and 'zero-config' is inconsistent with the implementation: SKILL.md and the bundled script call a third-party service (SocketsIO at api.socketsio.com). The skill does not declare any required credentials in registry metadata, yet the runtime expects SOCKETSIO_API_KEY.
!
Instruction Scope
SKILL.md instructs the agent to obtain and use a SOCKETSIO_API_KEY and to send user text to api.socketsio.com endpoints (/v1/translate, /v1/detect, /v1/languages). That is within the stated translation purpose, but the documentation misattributes the backend to Google and promises 'zero-config' while requiring an external API key. The agent will transmit whatever text it is given (potentially sensitive) to a third-party endpoint.
Install Mechanism
No install spec; this is instruction-only plus a small bundled CLI script. Nothing is downloaded at install time and no archives or third-party packages are pulled in.
!
Credentials
Registry metadata lists no required env vars, but both SKILL.md and scripts/translate.py require SOCKETSIO_API_KEY (and optionally SOCKETSIO_API_BASE). The skill therefore requests credential-like data without declaring it. The script sends any provided text to the external service, so providing this key gives that service access to all translated content.
Persistence & Privilege
The skill does not request elevated platform privileges (always is false, no config paths, no modifications to other skills). Autonomous invocation is allowed by default but not an added red flag by itself.
What to consider before installing
This skill is suspicious because it advertises Google Cloud Translation but actually uses a third-party service (socketsio.com) and the registry metadata omits the SOCKETSIO_API_KEY the code requires. Before installing: (1) don't set a sensitive or high-privilege API key in SOCKETSIO_API_KEY—test with throwaway/non-sensitive text and a throwaway key; (2) verify the publisher/owner and the legitimacy of socketsio.com (terms, privacy, provenance); (3) if you require genuine Google Cloud Translation, prefer an explicitly Google Cloud integration that asks for Google credentials; (4) note that the script can be pointed at any API_BASE via SOCKETSIO_API_BASE, so avoid setting that to secrets-bearing endpoints; (5) ask the publisher why the skill advertises Google Cloud but calls their own backend and why metadata omits required env vars. If you can't verify answers, treat this skill as untrusted for sensitive data.

Like a lobster shell, security has layers — review code before you run it.

latestvk978daynthry5jv5vn48m78qex840bww

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Google Cloud Translate Pro

Translate text across 195 languages powered by Google Cloud Translation — the same engine behind Google Translate.

Quick Start

Get a free API key (500K credits, never expire):

curl -X POST https://api.socketsio.com/auth/signup \
  -H "Content-Type: application/json" \
  -d '{"email":"you@example.com","password":"yourpassword"}'

Set your key:

export SOCKETSIO_API_KEY=tr-your-key-here

Capabilities

Translate

Translate text to any of 195 languages. Auto-detects source language.

curl -X POST https://api.socketsio.com/v1/translate \
  -H "X-API-Key: $SOCKETSIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"q": "Hello, how are you?", "target": "zh"}'

Response:

{
  "data": {
    "translations": [{
      "translatedText": "你好,你好吗?",
      "detectedSourceLanguage": "en"
    }]
  }
}

Detect Language

Identify the language of any text with confidence score.

curl -X POST https://api.socketsio.com/v1/detect \
  -H "X-API-Key: $SOCKETSIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"q": "Bonjour le monde"}'

Bulk Translate

Translate up to 128 texts in a single call.

curl -X POST https://api.socketsio.com/v1/translate \
  -H "X-API-Key: $SOCKETSIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"q": ["Hello", "Goodbye", "Thank you"], "target": "es"}'

List Languages

Get all 195 supported languages with display names.

curl https://api.socketsio.com/v1/languages \
  -H "X-API-Key: $SOCKETSIO_API_KEY"

Agent Integration

For agent workflows, use the translate script directly:

python3 scripts/translate.py "Hello world" --target zh
python3 scripts/translate.py "Bonjour" --detect
python3 scripts/translate.py "Hello" "Goodbye" "Thanks" --target ja --bulk

The script reads SOCKETSIO_API_KEY from environment. See scripts/translate.py --help for all options.

Google Translate v2 Compatible

The API is a drop-in replacement for Google Cloud Translation v2. If you have existing code using Google Translate, change only the base URL:

# Before (Google, $20/M chars):
# url = "https://translation.googleapis.com/language/translate/v2"

# After (SocketsIO, $0.50/M chars):
url = "https://api.socketsio.com/v1/translate"

Same request format, same response format, 97% cheaper.

Supported Languages

195 languages including: Afrikaans, Arabic, Bengali, Chinese (Simplified & Traditional), Czech, Danish, Dutch, English, Finnish, French, German, Greek, Gujarati, Hebrew, Hindi, Hungarian, Indonesian, Italian, Japanese, Kannada, Korean, Latvian, Lithuanian, Malay, Malayalam, Marathi, Norwegian, Persian, Polish, Portuguese, Punjabi, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swahili, Swedish, Tamil, Telugu, Thai, Turkish, Ukrainian, Urdu, Vietnamese, Welsh, and 147 more.

Full list: run scripts/translate.py --languages or call the /v1/languages endpoint.

Pricing

TierPriceCredits
Free Trial$0500K (never expire)
Starter$52M
Growth$2010M
Scale$10050M

For comparison: Google Translate API charges $20 per 1M characters. This skill uses the same Google engine at up to 97% less.

Links

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…