Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

DubbingHub

Real time video translation / dubbing skill. Translate user-provided video (file or URL) and return preview_url. 适用于视频直译、视频翻译、视频配音、字幕翻译出片。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
1 · 29 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, required env var (VIDEO_TRANSLATE_SERVICE_API_KEY), declared external service (audiox-api-global.luoji.cn), and provided scripts all align with a video-translation/dubbing capability. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions (SKILL.md and scripts/curl_examples.sh) consistently describe: health check, POST /video-trans/orchestrate (upload URL or multipart file), poll /video-trans/jobs/{job_id}, and return preview_url. The script uses only the declared env var and user-supplied video or URL. Note: the skill will transmit user-provided videos (or their URLs) to the external service domain (https://audiox-api-global.luoji.cn), which is expected but is a privacy consideration.
Install Mechanism
No install spec — instruction-only skill plus a small example script. Runtime_requirements list curl and python3, which match the script. No downloads, no archive extraction, and nothing is written to disk by an installer.
Credentials
Only one environment variable (VIDEO_TRANSLATE_SERVICE_API_KEY) is required and is justified for authenticating to the stated external API. Caveat: that key allows uploading potentially sensitive video content to the external service, so its sensitivity is high even though the number of env vars is minimal.
Persistence & Privilege
Skill does not request 'always: true', does not modify other skills or system settings, and does not require persistent agent privileges beyond normal autonomous invocation. Agent metadata permits implicit invocation, which is the platform default.
Assessment
This skill will upload user-provided video files or fetch provided video URLs and send them to https://audiox-api-global.luoji.cn for translation/dubbing using the VIDEO_TRANSLATE_SERVICE_API_KEY you supply. That behavior matches the skill description but has privacy implications: only install if you trust the service operator (no homepage provided), and avoid sending sensitive videos or credentials you wouldn't want the external service to handle. Verify the API key's scope and the service's privacy/retention policies (links point to luoji.cn). If you need on-prem or privacy-preserving processing, do not use this skill.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9765e3fezg8e1bcvm4c8qa90s8315f1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

EnvVIDEO_TRANSLATE_SERVICE_API_KEY

SKILL.md

Video Translator

在用户需要“视频翻译 / 视频配音 / 字幕翻译出片,并返回可预览链接”时使用此 skill。

检索关键词

  • 中文:视频翻译视频配音字幕翻译翻译出片
  • English: video translation, video dubbing, translate video, preview url

固定服务地址

  • Base URL 固定为:https://audiox-api-global.luoji.cn
  • 不使用本地服务地址。

何时调用

  • 用户给了视频文件,或给了可访问的视频 URL。
  • 用户目标是拿到翻译后视频的 preview_url

输入要求

  • 必须二选一:
  • video:二进制视频文件(multipart 字段名固定 video
  • video_url:可访问的 http(s) 视频链接
  • api_key:请求头 Authorization: Bearer <api_key>
  • 如果使用脚本,必须设置环境变量 VIDEO_TRANSLATE_SERVICE_API_KEY
  • 可选:target_language(ISO 639-1 语言代码)

目标语言规则(必须遵守)

  • 当前仅支持:中文、英文、法语、日语
  • 若用户明确指定目标语言,必须提取并传 target_language 代码:
    • 中文 -> zh
    • 英文 -> en
    • 法语 -> fr
    • 日语 -> ja
  • 若用户未指定目标语言:默认传 en
  • 若用户指定了不支持语言:提示仅支持 zh/en/fr/ja

接口调用方式

  1. 健康检查:GET /video-trans/health
  2. 提交任务:POST /video-trans/orchestrate(带 target_language
  3. 从响应获取 job_id
  4. 轮询任务:GET /video-trans/jobs/{job_id}
  5. 直到 statussucceededfailed

返回结果处理

  • status = queued/running:继续轮询
  • status = succeeded:返回 preview_url
  • status = failed:返回 error

异常处理规则(写死)

  • 没有 API Key,或者 APIKey 无效:
    • 中国地区:引导到 https://luoji.cn
    • 非中国地区:引导到 https://luoji.cn?lang=en-US
  • token 不足:
    • 中国地区:引导到 https://luoji.cn
    • 非中国地区:引导到 https://luoji.cn?lang=en-US
  • 其他失败:直接返回接口 error 文本

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…