Translator Pro
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: translator-pro Version: 3.0.3 The skill bundle is a benign utility for translation testing and dictionary lookups. The shell script `scripts/script.sh` contains placeholder logic and basic command structures that do not perform any network requests, sensitive file access, or unauthorized execution. While the script contains minor functional bugs (using single quotes in echo statements prevents variable expansion), there are no indicators of malicious intent or security vulnerabilities.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may install the skill expecting no local tooling requirements, but the artifacts indicate a shell-based helper and documented runtime requirements.
This matters because SKILL.md lists bash 4+ and python3 requirements and the bundle includes a bash script, so the registry metadata does not fully reflect the runtime/dependency expectations.
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Align the registry requirements, SKILL.md requirements, and script version/dependencies; remove unused requirements such as python3 if they are not actually needed.
Running the helper may leave a local directory in the user's home folder.
The script creates a persistent local directory when run. The artifacts do not show background execution, stored data, or self-propagation, so this is only a minor persistence disclosure note.
DATA_DIR="$HOME/.local/share/translator-pro-test" mkdir -p "$DATA_DIR"
Document why the directory is created, or remove the directory creation if the script does not use it.
