visa-doc-translate

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the macOS sips utility for image conversion and executes Python scripts generated at runtime to produce the formatted PDF output.
  • [EXTERNAL_DOWNLOADS]: The instructions and documentation specify the installation of multiple well-known third-party dependencies, including pillow, reportlab, easyocr, and pytesseract, as well as the Tesseract OCR engine.
  • [DATA_EXFILTRATION]: By design, the skill accesses and processes highly sensitive personal information, such as passports, bank statements, and employment certificates. This data is extracted and handled by the agent to perform its primary translation function.
  • [PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection. 1. Ingestion points: The skill ingests text extracted via OCR from user-provided document images. 2. Boundary markers: No explicit delimiters or instructions are used to distinguish document content from system instructions. 3. Capability inventory: The skill has the ability to execute shell commands and run dynamically generated code. 4. Sanitization: No sanitization or validation of the extracted OCR text is performed before it is processed for translation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 03:19 PM