init-translator
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches and ingests developer documentation from the official Zotero website (zotero.org). These resources provide legitimate technical guidelines for the development of translator scripts.
- [COMMAND_EXECUTION]: The instructions recommend using
curlin the shell to retrieve target webpages for analysis and scraper logic development. - [PROMPT_INJECTION]: The skill involves processing external web content, which presents an indirect prompt injection surface. This is addressed by instructions advising the agent to avoid parsing large external pages directly into its context, minimizing the potential impact of adversarial content embedded in target sites.
- [SAFE]: The skill follows developer best practices by involving the user in the initialization and verification process through Zotero's built-in Scaffold tool, ensuring human-in-the-loop oversight for file creation and code execution.
Audit Metadata