Skillv1.0.0

ClawScan security

快速翻译 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 11, 2026, 1:55 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's description and instructions are internally consistent for a translation helper and it does not request extra system access or credentials.
Guidance: This skill is coherent and lightweight, but ask the author or check runtime behavior before using it with sensitive text: 1) Where and how is "translation history" stored (local agent storage, cloud, or external service)? 2) Does pronunciation or terminology lookup call any external APIs (which could require credentials or send your text off-platform)? 3) Test with non-sensitive samples to confirm no unexpected network calls or prompts asking for API keys. If you need privacy guarantees, require that history is stored only locally or disable history/remote TTS features.

Purpose & Capability: okName/description (multi-language translation, terminology handling, batch mode, history) match the SKILL.md content and there are no unrelated env vars, binaries, or install steps requested.
Instruction Scope: noteSKILL.md provides prompt examples and feature descriptions only; it does not instruct the agent to read system files or access environment variables. However, features like "保存翻译记录 (translation history)", "术语库 (termbase)" and "发音支持 (pronunciation)" are mentioned but no implementation or storage location is specified — this ambiguity could lead an implementation to store data somewhere or call external services unless clarified.
Install Mechanism: okNo install spec and no code files — this is instruction-only, which minimizes disk persistence and supply-chain risk.
Credentials: okThe skill declares no required environment variables or credentials. That is proportional to the presented functionality. Note: if later changes implement history storage or external TTS/translation APIs, additional credentials or storage will be needed; those are not currently requested.
Persistence & Privilege: okalways:false and no indications of modifying other skills or system-wide settings. The skill does not request persistent privileges.