epub-translator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule to callpandocandepub2md. These operations are strictly limited to converting book content between Markdown, HTML, and EPUB formats, which is the primary purpose of the skill. - [EXTERNAL_DOWNLOADS]: A bootstrap script is provided to automate the installation of
pandocandepub2mdusing Homebrew and theuvpackage manager. These are well-known and reputable services, and the dependencies are standard tools for document processing. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from EPUB files and workspace configuration JSONs. It mitigates potential risks through automated structural checks and input validation (such as verifying language codes with specific regex patterns). The skill does not possess dangerous capabilities like arbitrary network access that could be triggered by untrusted data.
Audit Metadata