pdf2zh-next翻译

用统一脚本执行 pdf2zh-next。支持单/多PDF、目录批处理、按 glob 筛选；未指定 provider 时按 config.toml 生效；指定 provider 时按官方 --<Services> 参数传给主程序；支持实时监控与并行翻译。

This skill appears to do what it says: it is a local wrapper that runs your installed pdf2zh-next CLI using the included config.toml and isolates the child process environment to avoid leaking provider keys. Before installing, consider: (1) the wrapper will execute whatever pdf2zh-next binary it finds on PATH or in common user locations — only use this skill if you trust the installed pdf2zh-next binary; (2) the helper probes some user-home paths to find the binary (a small deviation from the SKILL.md's strict 'only read config.toml' wording); (3) first-run of the upstream pdf2zh-next/babeldoc tool may download models/assets — if you want to avoid network activity, pre-install and initialize pdf2zh-next offline; (4) review the included config.toml to ensure no API keys or endpoints are set to values you do not trust. If you need a stricter sandbox, run the wrapper in an environment where pdf2zh-next is preinstalled in a controlled location or modify the script to require an explicit --exe-path.

Type: OpenClaw Skill Name: pdf2zh-translator Version: 0.0.3 The skill is a well-structured wrapper for the pdf2zh-next translation utility. It demonstrates strong security practices, including explicit environment isolation in `scripts/run_pdf2zh_pipeline.py` (stripping sensitive environment variables and redirecting HOME/APPDATA to the skill directory) and strict path validation to ensure only the local `config.toml` is accessed. No evidence of data exfiltration, malicious execution, or prompt injection was found.