← 返回 Skills 市场
72
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install paper-translator
功能描述
Translates academic PDFs from English to Chinese, preserving formulas and layout, producing bilingual, Chinese-only versions, and a glossary.
安全使用建议
This skill appears to do what it claims (translate PDFs) but has two things to watch: (1) it auto-installs tools by curling and piping an installer from https://astral.sh into sh — that executes remote code on your machine and is high risk unless you inspect and trust the installer; (2) the README encourages copying all PDFs into a QQBot uploads folder (~/.openclaw/media/qqbot/uploads/), which could move unrelated or sensitive PDFs into a shared upload area. Before installing, consider: - Inspect the install script at https://astral.sh/uv/install.sh and the pdf2zh-next source (or prefer to manually install uv and pdf2zh-next from trusted sources). - Run the skill in an isolated environment or container if possible. - Do not execute the 'cp *.pdf' step unless you intentionally want all local PDFs copied to that upload folder. - If unsure about astral.sh or pdf2zh-next origins, decline installation or ask the maintainer for hosted release binaries (e.g., GitHub releases) and a homepage/source repository. These mitigations would reduce the risk; absence of a homepage/source for the skill lowers confidence in its provenance.
功能分析
Type: OpenClaw Skill
Name: paper-translator
Version: 0.1.2
The skill employs a high-risk 'curl | sh' pattern in 'scripts/translate_paper.sh' to install the 'uv' package manager from 'astral.sh'. It also automatically installs the 'pdf2zh-next' tool via 'uv' without interactive user confirmation. While these behaviors are documented in 'SKILL.md' and align with the stated purpose of translating academic papers, the execution of remote scripts and automatic installation of third-party tools represent a significant security risk and potential RCE vector.
能力评估
Purpose & Capability
The name/description match the included script: the script runs pdf2zh_next on a provided PDF and produces the claimed outputs. However, the SKILL.md also instructs copying all PDFs to a QQBot uploads path (~/.openclaw/media/qqbot/uploads/) which is not declared anywhere in the skill metadata; that side-action is outside the stated core purpose and should be considered unexpected behavior.
Instruction Scope
The runtime instructions and script operate on the provided PDF only, but SKILL.md includes an explicit 'QQBot Send' step that tells users/agents to cp *.pdf into a media upload directory — this could cause bulk copying of unrelated PDFs. The script itself runs installers and executes external tools without prompting beyond the initial run, giving it the ability to modify system state and move user files if the extra SKILL.md step is followed.
Install Mechanism
The script auto-installs dependencies. It runs: curl -Ls https://astral.sh/uv/install.sh | sh — piping a remote installer to sh is a high-risk pattern because it executes code fetched from an external host without local review. It then uses 'uv tool install pdf2zh-next', which will fetch/execute code as well. These network installs are the highest-risk install mechanism in the policy.
Credentials
The skill does not request any environment variables or credentials (good). Still, SKILL.md references a specific user path (~/.openclaw/media/qqbot/uploads/) and suggests copying files there; that is effectively a required filesystem target for the 'QQBot Send' flow but wasn't declared in the skill's metadata as a required config path.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. However, its install flow will place binaries/tools on disk (via the remote installer and uv), which is a form of persistence. There is no evidence it modifies other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install paper-translator - 安装完成后,直接呼叫该 Skill 的名称或使用
/paper-translator触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.2
Add references to pdf2zh-next and PDFMathTranslate-next projects
v0.1.1
Update: clarified dependency check description - checks for uv and pdf2zh-next before installing
v0.1.0
Initial release: translate academic PDFs with bilingual and Chinese-only output, plus glossary generation
元数据
常见问题
Paper Translator 是什么?
Translates academic PDFs from English to Chinese, preserving formulas and layout, producing bilingual, Chinese-only versions, and a glossary. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 72 次。
如何安装 Paper Translator?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install paper-translator」即可一键安装,无需额外配置。
Paper Translator 是免费的吗?
是的,Paper Translator 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Paper Translator 支持哪些平台?
Paper Translator 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Paper Translator?
由 xingxing(@xing-xing-coder)开发并维护,当前版本 v0.1.2。
推荐 Skills