Security audit

translator-pro

Security checks for vulnerabilities and agentic risk

Overview

This translation skill is purpose-aligned and does not show hidden access, persistence, credential use, or unsafe system behavior.

Before using this for legal, business, or otherwise high-stakes translations, explicitly provide or confirm the source language, target language, jurisdiction or region, and glossary terms instead of relying on automatic detection.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

Confidence: 81% confidence
Finding: Defaulting ambiguous Latin-script input to English can silently misclassify user content and produce incorrect translations without consent or confirmation. In legal or business contexts, that can degrade accuracy, omit nuance, or cause downstream misunderstandings, especially for short multilingual fragments or romanized text.

Static analysis

No suspicious patterns detected.