pagetranslate-pdf-translator
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use curl to interact with the PageTranslate API, including uploading documents and downloading translated files.
- [EXTERNAL_DOWNLOADS]: The skill references the official pagetranslate-mcp package on npm and its source code on GitHub for optional MCP tool support.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes external, user-provided files (PDF, DOCX, etc.) without content sanitization.
- Ingestion points: The skill reads local files to upload them to the translation service via the upload commands in SKILL.md.
- Boundary markers: Absent; file content is sent directly to the API without delimiters or ignore-instructions.
- Capability inventory: Network communication and file system access (read/write) are both available to the skill via curl.
- Sanitization: Absent; the skill acts as a pass-through for the translation service without validating the internal content of the files.
Audit Metadata