Subtitle Translator

Translate SRT subtitle files using LLM APIs with OpenAI-compatible format. Supports both single-language and bilingual output. Use when you need to translate...

This skill appears to do exactly what it says: translate .srt files by sending subtitle text to an OpenAI-compatible API. Before using it, consider: (1) you must supply an API URL and API key — the registry metadata omitted declaring this credential; treat the key like any secret. (2) Prefer environment variables or a secret manager over the suggested plaintext config file (~/.openclaw/skills/.../config.json). (3) The skill sends all subtitle text to whatever API URL you provide — do not use it for sensitive content unless you control the endpoint. (4) Proxies (http_proxy/https_proxy) are honored and can capture keys—ensure you trust your proxy. (5) Review the small Python scripts yourself (they're included) before running. If you want stricter guarantees, ask the author to declare the API key as a required credential in the registry metadata and to remove the plaintext-config recommendation.

Type: OpenClaw Skill Name: subtitle-translate-skill Version: 0.1.1 The skill is classified as suspicious primarily due to the `scripts/list_models.py` and `scripts/translate_srt.py` scripts honoring `http_proxy` and `https_proxy` environment variables. While this is a common feature, it introduces a vulnerability where API keys and subtitle content could be intercepted if the agent's environment is configured with an untrusted proxy. However, the `SKILL.md` documentation explicitly warns users about this risk, stating: 'If your environment uses untrusted proxies, API keys could be captured.' This transparency, combined with the absence of other malicious indicators like unauthorized data exfiltration, persistence mechanisms, or prompt injection attempts against the agent, prevents a 'malicious' classification. The core functionality aligns with the stated purpose of subtitle translation.