ClawHub

File Translate

v1.0.2

Immersive file & image translation — preserving original layout, formatting, and visuals. Drop in a PDF, Word, PPT, Excel, image, ePub and get back a fully t...

⭐ 1· 174·0 current·0 all-time
by@ray771
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (layout-preserving file & image translation) match the included CLI script and API references. The single required env var TRANSLATE_360_API_KEY is exactly what a cloud translation client needs. The API endpoints used (api.360.cn and api.360.cn/deepdoc) are consistent with the described provider and homepage.
✓
Instruction Scope
SKILL.md and scripts/translate.py instruct the agent to upload only the user-supplied text, images, or document files to the 360 endpoints and to read the TRANSLATE_360_API_KEY env var. The code only reads files provided as arguments and the API key; it does not attempt to read unrelated local files, shell history, or other environment variables. The documentation explicitly warns about uploading sensitive documents.
✓
Install Mechanism
This is an instruction-only skill with a small Python stdlib-only script. There is no install spec, no downloads from third-party URLs, and no package manager dependencies — minimal install risk.
✓
Credentials
Only one credential is requested (TRANSLATE_360_API_KEY) and it is used solely for authenticating to the 360 API. No unrelated secrets, system config paths, or additional credentials are requested.
✓
Persistence & Privilege
The skill is not always-enabled and uses normal (default) autonomous-invocation settings. The SKILL.md states the skill does not persist uploads or results locally unless the user passes an --out path. The script prints or downloads URLs returned by the API but does not modify other skills or system-wide configuration.
Assessment
This skill appears to do exactly what it says: it uploads files/images/text to 360's translation API and returns translated outputs. Before installing, consider: (1) You will be sending document/image contents to a third-party service (api.360.cn) — do not use it for highly sensitive or regulated data unless you accept that transfer and provider policies. (2) Confirm the provider and API key page (ai.360.com) are legitimate for your organization; use a dedicated API key with limited billing scope and rotate/revoke it as needed. (3) The SKILL.md and reference docs contain small inconsistencies (e.g., reported image-URL expiry is 3 months in SKILL.md vs. 6 months in the API reference; supported formats lists differ slightly); verify supported formats and retention/expiry in the provider's official docs before bulk use. (4) The script uses HTTPS to the provider but will transmit entire files — treat returned CDN URLs as public while valid and download results promptly. If you want stronger guarantees, request provider data-retention and residency commitments before sending sensitive material.

Like a lobster shell, security has layers — review code before you run it.

latestvk976fcwav8ksmetm151r5e3npd83hv67

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvTRANSLATE_360_API_KEY
Primary envTRANSLATE_360_API_KEY

Comments