epub-translate
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages sensitive credentials (OpenAI API keys) securely by storing them in a local
.envfile within a dedicated project data directory (.skills-data/epub-translate/). It explicitly sets restricted file permissions (chmod 600) to ensure only the owner can read or write the configuration. - [SAFE]: External network communication is confined to a well-known and trusted service (OpenAI API). The communication is performed using standard libraries with established endpoints, preventing data exfiltration to unauthorized third parties.
- [SAFE]: The skill implements a robust defense against potential content-based attacks (such as those hidden in EPUB files) by using structural integrity verification. It computes SHA256 hashes of the original XHTML markup and validates them after translation to ensure that the AI model has not injected unexpected tags, attributes, or scripts into the resulting ebook.
- [SAFE]: All file processing, including the unpacking and repackaging of EPUB containers, is scoped to a per-job temporary directory within the project's data folder, preventing path traversal or interference with other system or project files.
Audit Metadata