Translator Pro

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user may install the skill expecting no local tooling requirements, but the artifacts indicate a shell-based helper and documented runtime requirements.

Why it was flagged

This matters because SKILL.md lists bash 4+ and python3 requirements and the bundle includes a bash script, so the registry metadata does not fully reflect the runtime/dependency expectations.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Align the registry requirements, SKILL.md requirements, and script version/dependencies; remove unused requirements such as python3 if they are not actually needed.

What this means

Running the helper may leave a local directory in the user's home folder.

Why it was flagged

The script creates a persistent local directory when run. The artifacts do not show background execution, stored data, or self-propagation, so this is only a minor persistence disclosure note.

Skill content
DATA_DIR="$HOME/.local/share/translator-pro-test"
mkdir -p "$DATA_DIR"
Recommendation

Document why the directory is created, or remove the directory creation if the script does not use it.