README Translator
v1.0.0将 GitHub README 自动翻译成多种语言，支持中文、英文、日文、韩文等。
⭐ 0· 321·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description match a README translation tool. However the SKILL.md advertises CLI flags (--input, --output, --lang, --api), batch translation, and true multi-language support, while the shipped script is a simple stub that prints a static template and accepts only positional args. The declared requirements (no env, no binaries) are plausible for a pure-instructions skill, but they don't explain the missing real translation implementation.
Instruction Scope
SKILL.md instructs users/agents to run a 'readme-translator' CLI with option flags and an --api flag, but the bundled script does not accept those flags and does not call any translation API or external endpoints. This mismatch could cause an agent to run commands that don't exist or to assume API credentials are unnecessary when they would be required by a real implementation. The instructions do not request any unrelated files or secrets.
Install Mechanism
There is no install spec (instruction-only), and the only code file is a small bash script. No downloads or package installs occur. From an installation-risk perspective this is low-risk; the script is small, readable, and contains no network calls or obfuscated code.
Credentials
The skill requests no environment variables or credentials. SKILL.md mentions an '--api' option but does not declare required API keys; the included script makes no network calls and therefore does not need secrets. The lack of declared API key is an inconsistency but not an overreach for credentials.
Persistence & Privilege
always is false and the skill does not request persistent privileges or modify system/global agent settings. Autonomous invocation is allowed (platform default) but not combined with other concerning behaviors.
What to consider before installing
This package appears to be a placeholder/stub rather than a working translator: SKILL.md promises CLI flags, API usage, and real translation, but readme-translator.sh just prints a static translated-template and doesn’t call any translation service. If you need real translation, ask the author for a complete implementation (show how CLI flags map to the script and how an API key is provided), or prefer a well-known, maintained tool that documents required API keys and network calls. It's not actively malicious (no network calls or secret requests), but it's misleading and incomplete — do not rely on it for production workflows until it's clarified or updated.Like a lobster shell, security has layers — review code before you run it.
i18nvk97fs7ybqpwy77nz1c423a107s825c5glatestvk97fs7ybqpwy77nz1c423a107s825c5greadmevk97fs7ybqpwy77nz1c423a107s825c5gtranslatevk97fs7ybqpwy77nz1c423a107s825c5g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌐 Clawdis