Scan Report
5 /100
markdown-multilingual-translator
A specialized tool for translating Markdown files while preserving structural elements, code blocks, links, and formatting. Supports six languages: English, Simplified Chinese, Taiwan Traditional Chinese, Japanese, Korean, and Indonesian.
This is a legitimate Markdown translation tool with no malicious behavior detected. All operations are appropriate for the stated functionality.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | WRITE | ✓ Aligned | translate_markdown.py:122-127 - reads input file, writes output file as declared… |
| Network | READ | READ | ✓ Aligned | translator.py:73 - makes POST requests to api.anthropic.com for Claude API trans… |
2 findings
Medium External URL 外部 URL
https://api.example.com/users references/EXAMPLES.md:237 Medium External URL 外部 URL
https://api.example.com references/EXAMPLES.md:381 File Tree
13 files · 152.1 KB · 4886 lines Markdown 6f · 2593L
Python 6f · 1884L
JSON 1f · 409L
├─
▾
references
│ ├─
▾
glossaries
│ │ └─
tech_glossary_base.json
JSON
│ ├─
EXAMPLES.md
Markdown
│ ├─
GLOSSARY_TEMPLATE.md
Markdown
│ └─
LANGUAGE_GUIDE.md
Markdown
├─
▾
scripts
│ ├─
language_detector.py
Python
│ ├─
markdown_parser.py
Python
│ ├─
terminology_manager.py
Python
│ ├─
translate_markdown.py
Python
│ ├─
translator.py
Python
│ └─
validator.py
Python
├─
ARCHITECTURE.md
Markdown
├─
README.md
Markdown
└─
SKILL.md
Markdown
Dependencies 3 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
markdown | not specified | pip | No | Standard Markdown parsing library |
pyyaml | not specified | pip | No | Standard YAML parsing for frontmatter |
requests | not specified | pip | No | Standard HTTP library for API calls |
Security Positives
✓ No credential theft - API key is used only for intended Claude API calls
✓ No data exfiltration - all network calls are to legitimate Anthropic API endpoint
✓ No obfuscation - all code is readable plain Python
✓ No sensitive path access - only operates on user-specified input/output files
✓ Standard dependencies - markdown, pyyaml, requests are well-known, reputable libraries
✓ No hidden functionality - all operations match stated documentation
✓ No reverse shell or C2 communication detected
✓ No base64-encoded payloads or eval() calls
✓ Batch processing is limited to .md files as documented
✓ Glossary loading is file-path based with proper error handling