Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Zhihuiya Description Translated

v1.0.0

从智慧芽获取翻译后的专利说明书(描述)文本。当用户要求专利说明书翻译、其他语言的专利全文、翻译后的专利全文,或想查看中文、英文、日文版的专利说明书、patent specification translation, patent description translation, PatSnap, patent t...

0· 89·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for linkfox-ai/linkfox-zhihuiya-description-translated.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Zhihuiya Description Translated" (linkfox-ai/linkfox-zhihuiya-description-translated) from ClawHub.
Skill page: https://clawhub.ai/linkfox-ai/linkfox-zhihuiya-description-translated
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install linkfox-zhihuiya-description-translated

ClawHub CLI

Package manager switcher

npx clawhub@latest install linkfox-zhihuiya-description-translated
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's stated purpose (fetch translated patent descriptions from Zhihuiya via LinkFox) matches the included API reference and script which call https://tool-gateway.linkfox.com/zhihuiya/descriptionDataTranslated. However, the registry metadata declares no required environment variables or primary credential while both references/api.md and scripts/zhihuiya_description_translated.py require an API key (LINKFOXAGENT_API_KEY). That mismatch between declared requirements and actual needs is not coherent with the manifest.
Instruction Scope
SKILL.md and the Python script limit actions to forming a POST against the LinkFox endpoint and returning the API response. The instructions do not ask the agent to read unrelated system files or other credentials. The skill also documents a separate feedback API; this is expected for telemetry/feedback but is a second external endpoint to be aware of.
Install Mechanism
No install spec is provided (instruction-only with an included helper script). Nothing is downloaded or written by an installer, so installation risk is low.
!
Credentials
The runtime requires a secret API key (LINKFOXAGENT_API_KEY) to be sent in the Authorization header; that is reasonable for accessing a paid/permissioned API. However, the skill's published metadata does not declare this required environment variable or a primary credential, which is a transparency/permission issue. Users need to know an API key (a secret) will be accessed and sent to https://tool-gateway.linkfox.com. No other unrelated secrets are requested.
Persistence & Privilege
always is false, the skill doesn't request persistent system-wide changes, and the included script does not modify other skills or agent configuration. It only reads a single environment variable and exits if missing.
What to consider before installing
This skill appears to do what it says: call a LinkFox/Zhihuiya endpoint to fetch translated patent descriptions. However, the package metadata omitted a required secret: LINKFOXAGENT_API_KEY. Before installing or using the skill: - Treat LINKFOXAGENT_API_KEY as a secret. Confirm the API key's origin and scope (who issued it and what permissions it grants). Use a least-privilege key if possible and a dedicated key for this skill. - Verify you trust the endpoint domain (tool-gateway.linkfox.com) and the skill owner (linkfox namespace). If you can't verify the owner, consider testing with a throwaway key and non-sensitive queries first. - The skill documents a separate feedback endpoint (skill-api.linkfox.com) — be aware that feedback calls would send content externally if implemented. Review what user text might be included before sending feedback. - Ask the publisher to update registry metadata to declare LINKFOXAGENT_API_KEY (and set primaryEnv if applicable). If the author makes that change and you verify the domain/owner, the mismatch concern would be resolved. Confidence is medium because the behavior and endpoints in code and docs align with the declared purpose, but the manifest omission of the required API key and the presence of a second feedback endpoint are material transparency issues that should be clarified before trusting the skill with production keys or sensitive queries.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d54aq9er7pt62p6w19bgfb9842ssp
89downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Zhihuiya Patent Description (Translated)

This skill guides you on how to retrieve translated patent description (specification) text via the Zhihuiya data service. It supports translation into Chinese, English, or Japanese, and can look up patents by patent ID or publication number.

Core Concepts

A patent description (also called "specification") is the full technical text of a patent document. This tool fetches the translated version of that text from the Zhihuiya patent database, supporting three target languages: Chinese (cn), English (en), and Japanese (jp).

When a patent's description is unavailable, the tool can optionally substitute it with a description from a patent family member (a related patent filed in another jurisdiction covering the same invention).

Parameters

ParameterTypeRequiredDescription
patentIdstringConditionallyPatent ID. At least one of patentId or patentNumber must be provided. If both are given, patentId takes priority. Multiple values separated by commas; max 100.
patentNumberstringConditionallyPublication (announcement) number. At least one of patentId or patentNumber must be provided. Multiple values separated by commas; max 100.
langstringNoTarget translation language. Supported values: en (English, default), cn (Chinese), jp (Japanese).
replaceByRelatedintegerNoWhether to substitute with a patent family member's description when the original is unavailable. 1 = yes, 0 = no (default).

Key Rules

  1. At least one identifier required: Either patentId or patentNumber must be provided. If the user gives a publication number like "US10123456B2", use patentNumber. If they give a numeric patent ID, use patentId.
  2. Priority: When both identifiers are supplied, patentId takes precedence.
  3. Batch queries: Up to 100 patents can be queried at once by passing comma-separated values.
  4. Default language: If the user does not specify a language, default to en (English).

API Usage

This tool calls the LinkFox tool gateway API. See references/api.md for calling conventions, request parameters, and response structure. You can also execute scripts/zhihuiya_description_translated.py directly to run queries.

Usage Examples

1. Get English translation of a patent description by publication number

patentNumber: "US10123456B2"
lang: "en"

2. Get Chinese translation of a patent description by patent ID

patentId: "abc123def"
lang: "cn"

3. Batch query with family member fallback

patentNumber: "US10123456B2,EP3456789A1,CN112345678A"
lang: "en"
replaceByRelated: 1

4. Japanese translation of a specific patent

patentNumber: "JP2021012345A"
lang: "jp"

Display Rules

  1. Present the translated text clearly: Show the patent description text directly. For long descriptions, present a summary or the first section and inform the user the full text is available.
  2. Identify substitutions: When pnRelated is present in the response, clearly inform the user that the description was sourced from a family member patent and show the related publication number.
  3. Batch results: When multiple patents are returned, present them in a structured list with clear separation between each patent's description.
  4. Error handling: When a query fails, explain the reason based on the response and suggest checking the patent ID or publication number for correctness.
  5. No fabrication: Never invent or paraphrase patent text. Only display what the API returns.

User Expression & Scenario Quick Reference

Applicable -- Patent description/specification translation queries:

User SaysScenario
"Translate this patent description to English"Single patent translation
"I need the Chinese version of patent US10123456"Specific language translation
"Get me the specification text for these patents"Batch patent description retrieval
"What does patent CN112345678A describe?"Patent description lookup
"Show me the Japanese translation of this patent's full text"Japanese translation
"The description is missing, can you try a family member?"Family member fallback

Not applicable -- Needs beyond patent description translation:

  • Patent search or discovery (finding patents by keyword/topic)
  • Patent claim analysis or claim chart generation
  • Patent legal status or prosecution history
  • Patent citation or reference analysis
  • Patent portfolio analytics or statistics

Feedback:

Auto-detect and report feedback via the Feedback API when any of the following apply:

  1. The functionality or purpose described in this skill does not match actual behavior
  2. The skill's results do not match the user's intent
  3. The user expresses dissatisfaction or praise about this skill
  4. Anything you believe could be improved

Call the feedback API as specified in references/api.md. Do not interrupt the user's flow.


For more high-quality, professional cross-border e-commerce skills, set LinkFox Skills.

Comments

Loading comments...