← 返回 Skills 市场
PDF Translate
作者
ChrisLee121
· GitHub ↗
· v4.0.0
556
总下载
0
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install pdf-translate
功能描述
Translates PDF documents to Chinese with professional typography. Extracts text, translates section-by-section into well-structured Markdown, then generates...
安全使用建议
This skill appears coherent and implements what it claims: it extracts text from PDFs, expects the agent (model) to do the translation, then converts the resulting Markdown to a styled PDF using the provided scripts. Before installing/use: 1) be prepared to install system dependencies (weasyprint requires libpango/libgobject; instructions include brew/apt notes). 2) Understand that the translation step is performed by your agent/model — sending extracted text to the model may expose document contents to your model provider; do not use it on highly sensitive documents unless you are comfortable with that. 3) The scripts read the PDF you supply and write .md/.pdf alongside it (ensure you trust the skill and the environment where files are placed). 4) No network endpoints, secrets, or unrelated credentials are requested by the skill, but you should still review any runtime logs if used in a multi-tenant environment. If you want stricter guarantees, run the scripts locally with an on-premise model or perform translation offline.
功能分析
Type: OpenClaw Skill
Name: pdf-translate
Version: 4.0.0
The skill is classified as suspicious due to a significant Remote Code Execution (RCE) vulnerability. The `SKILL.md` file instructs the AI agent to execute shell commands (e.g., `python3 ${SKILL_DIR}/scripts/md2pdf.py "输入.md" "输出.pdf"`). The Python scripts (`scripts/md2pdf.py`, `scripts/translate_pdf.py`) take input and output filenames directly from command-line arguments (`sys.argv`) without explicit sanitization for shell metacharacters. If the OpenClaw agent does not adequately sanitize user-provided filenames before passing them to these shell commands, an attacker could inject arbitrary commands, leading to RCE. Additionally, `scripts/generate_complete_pdf.py` contains a hardcoded absolute output path, which is a minor vulnerability for unintended file overwrites.
能力评估
Purpose & Capability
Name/description (PDF → Chinese Markdown + PDF) match the shipped files and runtime instructions. Included scripts (pdf text extraction, Markdown→PDF, legacy reportlab scripts) are entirely consistent with PDF translation and typesetting; README and SKILL.md explicitly describe using the model (Claude) for translation, which aligns with the skill's purpose.
Instruction Scope
SKILL.md instructs the agent to extract text, translate section-by-section, write a .md file and convert to PDF using provided scripts. The instructions reference only local files (input PDF, output .md/.pdf, ${SKILL_DIR}) and required dependencies; they do not instruct reading unrelated system files or env vars, nor do they direct data to external endpoints beyond the expected model usage for translation.
Install Mechanism
No automated install spec is declared (instruction-only installation), which lowers risk. The docs require pip packages (pdfplumber, markdown, weasyprint) and system libs (pango/libgobject) — these are reasonable for the task but do require users to install system libraries (brew/apt) and large Python packages. Nothing is downloaded from obscure URLs and no archives are extracted by the skill itself.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. Scripts only probe common system font paths and read the user-provided PDF; that access is proportional to producing properly typeset PDFs. There are no requests for unrelated secrets or cloud credentials.
Persistence & Privilege
Skill flags are default (not always:true). It does not attempt to modify other skills or system-wide agent settings. It is instruction-only with local scripts and will only run when invoked (agent-autonomy is permitted by platform defaults but not elevated here).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pdf-translate - 安装完成后，直接呼叫该 Skill 的名称或使用
/pdf-translate触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v4.0.0
Initial release of PDF translation tool with professional Markdown-to-PDF workflow.
- Provides section-by-section translation of PDFs to Chinese, preserving document structure in Markdown.
- Generates high-quality PDFs from Markdown using weasyprint with full CJK (Chinese, Japanese, Korean) font support and modern typography.
- Fixes previous issues with code blocks displaying Chinese characters incorrectly.
- Includes robust handling of tables, lists, code, blockquotes, and headings.
- Adds `scripts/md2pdf.py` for universal Markdown-to-PDF conversion.
- Reference guides cover translation standards, font configuration, troubleshooting, and complete workflow examples.
元数据
常见问题
PDF Translate 是什么？
Translates PDF documents to Chinese with professional typography. Extracts text, translates section-by-section into well-structured Markdown, then generates... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 556 次。
如何安装 PDF Translate？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pdf-translate」即可一键安装，无需额外配置。
PDF Translate 是免费的吗？
是的，PDF Translate 完全免费（开源免费），可自由下载、安装和使用。
PDF Translate 支持哪些平台？
PDF Translate 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 PDF Translate？
由 ChrisLee121（@chrislee121）开发并维护，当前版本 v4.0.0。
推荐 Skills