AI Video Translation
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent video-translation CLI skill, but users should notice that it runs an npm CLI, logs into a third-party service, stores a token locally, and uploads videos for processing.
Before installing, confirm you trust the newtranx npm package and provider. Do not upload confidential videos unless the provider's privacy and retention practices are acceptable to you, and protect or delete the local token when no longer needed.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the command gives the npm package normal local execution ability for the current user.
The skill directs users to execute an npm package without a pinned version or reviewed code in the artifact set. This is central to the skill's purpose, so it is a notice rather than a concern.
npx --yes newtranx-ai
Install only if you trust the npm package source; consider checking the package name, publisher, and version before running it.
Anyone with access to that local token may be able to use the associated newtranx session until it expires.
The login flow obtains a device ID and stores a service token locally. This is disclosed and aligned with using the translation service, but it is persistent authentication material.
Automatically obtain device ID, call the registration login interface to obtain token, and save it to `~/. newtranx/config. json `. The token is valid for 15 days.
Protect the local config file and re-login or remove the token if you no longer want the CLI to retain access.
Private video, audio, subtitles, speaker metadata, and resulting download links may be handled by the external service.
The skill discloses that videos are processed through an external API, and the workflow includes uploading local files or URLs and returning translated video/subtitle/metadata download links.
Translate videos and podcasts from the terminal using the newtranx API.
Use the skill only for media you are comfortable uploading to the provider, and avoid sharing returned download links unless intended.