translateflow-api

AI-powered translation services using TranslateFlow API - translation, translate text, language conversion, multilingual translation, language translation, d...

Before installing or using this skill, be aware it will transmit whatever text and uploaded files you provide to https://translateflow.vosscg.com. Verify the TranslateFlow service reputation and privacy/terms, avoid sending sensitive or confidential data (personal data, passwords, private keys, medical/legal secrets) to the service, and consider creating a dedicated or limited API key. The SKILL.md does not prescribe secure storage for the API key — plan to store credentials in a secure vault or agent config with restricted scope and revoke the key when done. If you allow the agent to call skills autonomously, monitor network activity and test first with non-sensitive sample data (or a disposable email) to confirm behavior.

Type: OpenClaw Skill Name: translateflow-api Version: 1.0.0 The skill provides translation services via the TranslateFlow API (translateflow.vosscg.com) but contains risky patterns in its instructions. It directs the agent to collect user emails for external registration and provides shell command templates in SKILL.md that incorporate user-provided text directly into curl commands, which presents a command injection risk if the agent does not sanitize inputs. Per the evaluation criteria, the use of shell and network capabilities for the stated purpose, combined with the collection of user data, warrants a suspicious classification.