en-to-zh-translator
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external files, creating a potential surface for instructions within those files to influence agent behavior.
- Ingestion points: The translation workflow involves reading the full content of English text files (
.txt,.md) as specified inSKILL.md. - Boundary markers: The instructions lack explicit delimiters or warnings to the agent to treat the file content strictly as data and to ignore any embedded instructions.
- Capability inventory: The skill has the capability to read and write files on the local filesystem.
- Sanitization: There is no evidence of input validation or sanitization to filter out malicious prompts embedded in the source text.
Audit Metadata