soia-pkm-translate-article-zh
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted text from external Markdown files, which represents an indirect prompt injection surface.
- Ingestion points: External Markdown content provided via file paths or direct input as described in
SKILL.md. - Boundary markers: Absent; the skill does not use specific delimiters or instructions to prevent the model from obeying instructions embedded within the text to be translated.
- Capability inventory: The skill is capable of reading and writing to the local file system and executing bundled Python scripts (
SKILL.md). - Sanitization: None; the content is passed to the model for translation as-is.
- [COMMAND_EXECUTION]: The skill executes local Python scripts,
scripts/chunk_markdown.pyandscripts/resolve_config.py, to handle file chunking and configuration loading. These scripts use Python standard libraries and perform mechanical text processing without executing arbitrary shell commands or using dangerous functions likeeval()orexec()on untrusted input. - [EXTERNAL_DOWNLOADS]: The skill lists
PyYAMLas an optional dependency for parsing configuration files. This is a well-known package from a standard registry. No other external or unverified code downloads are performed at runtime.
Audit Metadata