← 返回 Skills 市场
69
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install crypto-terms-translator
功能描述
A plain-language crypto glossary that translates technical terms into everyday meaning, context, and examples. Use when the user encounters confusing crypto...
使用说明 (SKILL.md)
crypto-terms-translator
A plain-language crypto glossary that translates technical terms into everyday meaning.
Workflow
- Take a list of terms, a pasted article, or a confusing sentence.
- Identify the core terms that matter most for understanding.
- For each term, explain what it is, why it matters, and one common misunderstanding.
- Use simple analogies only when they clarify, not when they distort.
- End with a short "how these terms connect" summary.
Output Format
- Term
- Simple definition
- Why it matters
- Everyday example or analogy
- Common confusion to avoid
Quality Bar
- Definitions are accurate but not academic.
- Avoids circular explanations like "staking is staking your tokens."
- Makes it easier to read future crypto content.
- Notes when meaning depends on context.
Edge Cases
- Some terms vary by chain, protocol, or local language usage.
- If the user supplies a vague or meme-heavy phrase, explain uncertainty instead of pretending there is one fixed meaning.
Compatibility
- Works from pasted text, screenshots turned into text, or direct term lists.
- No live web lookup required.
- Good companion skill for beginner education flows.
安全使用建议
This skill's written description is harmless, but the bundled code reads a hard-coded path in a specific user's home directory (/Users/jianghaidong/.openclaw/skills/...). That is inconsistent with a prompt-only translator and could allow the skill to read local files (and may be susceptible to path traversal if skill_name is attacker-controlled). Before installing, ask the author why code needs to read that path and request one of these fixes: (a) remove local file reads entirely and keep the skill prompt-only, (b) use a packaged/relative SKILL.md path inside the skill bundle rather than a hard-coded absolute path, and (c) validate/sanitize any skill_name inputs to prevent path traversal. If you cannot get a satisfactory change, avoid installing or run the skill in a tightly sandboxed environment where it cannot access sensitive local files.
功能分析
Type: OpenClaw Skill
Name: crypto-terms-translator
Version: 1.0.0
The handler.py file contains a hardcoded absolute file path (/Users/jianghaidong/.openclaw/skills/) and is vulnerable to path traversal by using the unsanitized skill_name argument to construct a file path. While the code currently reads the file without exfiltrating its contents, the lack of input validation and the reliance on a specific user's local directory structure are significant security risks and highly irregular for a portable skill bundle.
能力标签
能力评估
Purpose & Capability
The SKILL.md describes a prompt-only glossary and says no live web lookup is required. The shipped handler.py, however, opens a local file at /Users/jianghaidong/.openclaw/skills/{skill_name}/SKILL.md to load metadata. That local-file access (and the hard-coded username) is unnecessary for a prompt-only translator and does not match the claimed purpose.
Instruction Scope
The runtime instructions (SKILL.md) do not instruct reading local files, but the code performs filesystem reads. This is scope creep: the instructions imply the skill will operate only on user-provided text, while the implementation tries to load skill metadata from disk.
Install Mechanism
There is no install spec (instruction-only), and no packages are downloaded or installed. This is the lowest-risk install surface.
Credentials
The skill declares no environment variables or credentials, which is appropriate. However, the code attempts to access a specific user's home directory; local filesystem access is disproportionate to a simple translation glossary and could expose unrelated local files if manipulated.
Persistence & Privilege
always is false and there are no indications the skill modifies other skills or system settings. Autonomous invocation is allowed by default; that is normal and not, by itself, a concern here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install crypto-terms-translator - 安装完成后,直接呼叫该 Skill 的名称或使用
/crypto-terms-translator触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of crypto-terms-translator skill.
- Provides clear, plain-language explanations for crypto terms, including context and common misunderstandings.
- Accepts lists, articles, or sentences with jargon and extracts key terms for explanation.
- Uses practical analogies only when helpful, with a summary of how terms connect.
- Designed to aid beginners and clarify complex crypto language without requiring live lookups.
元数据
常见问题
Crypto Terms Translator 是什么?
A plain-language crypto glossary that translates technical terms into everyday meaning, context, and examples. Use when the user encounters confusing crypto... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 69 次。
如何安装 Crypto Terms Translator?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install crypto-terms-translator」即可一键安装,无需额外配置。
Crypto Terms Translator 是免费的吗?
是的,Crypto Terms Translator 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Crypto Terms Translator 支持哪些平台?
Crypto Terms Translator 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Crypto Terms Translator?
由 haidong(@harrylabsj)开发并维护,当前版本 v1.0.0。
推荐 Skills