ocr-translate-skills
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified across the provided instruction files and associated code snippets.
- [EXTERNAL_DOWNLOADS]: The skill references standard academic software and Python libraries available through official channels such as PyPI and GitHub (e.g.,
pdf2zh,mathtranslate, andpix2tex). These downloads are from reputable sources and are strictly aligned with the skill's stated functional purpose. - [COMMAND_EXECUTION]: Python code examples demonstrate standard file processing, image manipulation, and API interactions using common libraries. No instances of arbitrary shell command execution or unsafe use of subprocesses were found.
- [CREDENTIALS_UNSAFE]: The guides correctly implement security best practices by instructing users to configure API keys for services like DeepL, OpenAI, and Azure via environment variables instead of hardcoding credentials in code.
- [DATA_EXFILTRATION]: Network interactions identified in the code snippets are directed toward documented, legitimate API endpoints for the respective OCR and translation services (e.g.,
api.mathpix.com). No unauthorized or suspicious data transmission patterns were detected.
Audit Metadata