README Translator

将 GitHub README 自动翻译成多种语言，支持中文、英文、日文、韩文等。

Security Scan

The skill claims a full-featured README translator (CLI flags, API support, multi-language, batch mode) but the included code is a tiny stub that does not implement those features — the pieces are inconsistent.

Purpose & Capability

Name and description match a README translation tool. However the SKILL.md advertises CLI flags (--input, --output, --lang, --api), batch translation, and true multi-language support, while the shipped script is a simple stub that prints a static template and accepts only positional args. The declared requirements (no env, no binaries) are plausible for a pure-instructions skill, but they don't explain the missing real translation implementation.

Instruction Scope

SKILL.md instructs users/agents to run a 'readme-translator' CLI with option flags and an --api flag, but the bundled script does not accept those flags and does not call any translation API or external endpoints. This mismatch could cause an agent to run commands that don't exist or to assume API credentials are unnecessary when they would be required by a real implementation. The instructions do not request any unrelated files or secrets.

Install Mechanism

There is no install spec (instruction-only), and the only code file is a small bash script. No downloads or package installs occur. From an installation-risk perspective this is low-risk; the script is small, readable, and contains no network calls or obfuscated code.

Credentials

The skill requests no environment variables or credentials. SKILL.md mentions an '--api' option but does not declare required API keys; the included script makes no network calls and therefore does not need secrets. The lack of declared API key is an inconsistency but not an overreach for credentials.

Persistence & Privilege

always is false and the skill does not request persistent privileges or modify system/global agent settings. Autonomous invocation is allowed (platform default) but not combined with other concerning behaviors.

What to consider before installing

This package appears to be a placeholder/stub rather than a working translator: SKILL.md promises CLI flags, API usage, and real translation, but readme-translator.sh just prints a static translated-template and doesn’t call any translation service. If you need real translation, ask the author for a complete implementation (show how CLI flags map to the script and how an API key is provided), or prefer a well-known, maintained tool that documents required API keys and network calls. It's not actively malicious (no network calls or secret requests), but it's misleading and incomplete — do not rely on it for production workflows until it's clarified or updated.

将 README.md 文件自动翻译成多种语言。

功能

• 🌐 多语言支持
• 📝 保持 Markdown 格式
• 🔄 批量翻译
• 📖 术语一致性

支持语言

• English
• 中文 (简体)
• 日本語
• 한국어
• Español
• Français
• Deutsch

使用方法

readme-translator --input README.md --lang zh
readme-translator --input README.md --lang ja --output README_JA.md

选项

• --input, -i 输入文件
• --output, -o 输出文件
• --lang, -l 目标语言
• --api 翻译 API