pagetranslate-scanned-pdf-translator

Pass

Audited by Gen Agent Trust Hub on Nov 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions utilize curl to upload document files and interact with the PageTranslate API at api.pagetranslate.ai for translation tasks.\n- [EXTERNAL_DOWNLOADS]: The skill makes use of the pagetranslate-mcp package from npm, which provides specialized tools for interacting with the PageTranslate service.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided scanned PDFs and images, which constitutes an ingestion point for untrusted content that could contain hidden instructions.\n
  • Ingestion points: Processes files from the local filesystem as specified by the user in Step 1 of the SKILL.md.\n
  • Boundary markers: There are no explicit instructions or delimiters mentioned to prevent the agent from following directives contained within the processed documents.\n
  • Capability inventory: The skill possesses the ability to read local files, write translated outputs to the disk, and perform network requests to the vendor API via curl and MCP tools.\n
  • Sanitization: Content from the uploaded files is not explicitly sanitized or filtered for instruction-like patterns before being processed or returned to the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 14, 2026, 02:15 AM