pagetranslate-scanned-pdf-translator
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions utilize
curlto upload document files and interact with the PageTranslate API atapi.pagetranslate.aifor translation tasks.\n- [EXTERNAL_DOWNLOADS]: The skill makes use of thepagetranslate-mcppackage from npm, which provides specialized tools for interacting with the PageTranslate service.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided scanned PDFs and images, which constitutes an ingestion point for untrusted content that could contain hidden instructions.\n - Ingestion points: Processes files from the local filesystem as specified by the user in Step 1 of the SKILL.md.\n
- Boundary markers: There are no explicit instructions or delimiters mentioned to prevent the agent from following directives contained within the processed documents.\n
- Capability inventory: The skill possesses the ability to read local files, write translated outputs to the disk, and perform network requests to the vendor API via
curland MCP tools.\n - Sanitization: Content from the uploaded files is not explicitly sanitized or filtered for instruction-like patterns before being processed or returned to the agent context.
Audit Metadata