Academic Paper Translator

• Outcome: Pass
• Latest audit: Aug 31, 2026 · 9:19 AM UTC
• Version: 1.1.2

Overview

This skill transparently automates academic paper translation into DOCX files using the user-supplied paper, Image2 figure editing, local document tools, and nearby work caches.

Install this if you want a highly automated paper-translation workflow and are comfortable with it reading the supplied paper, creating work files beside it, using Image2 for figures, and invoking local document tools such as Word or WPS for rendering. Use it only on papers you are authorized to process, and choose a specific output directory if you do not want caches and DOCX files written next to the source PDF.

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 84% confidence
• Finding: The skill directs the agent to read local files, write output DOCX files, manage caches, and inspect the environment, but it does not declare those permissions explicitly. That creates a trust and governance gap: operators may approve the skill for simple translation while it actually exercises broader filesystem and runtime access, increasing the chance of unintended data exposure or unsafe file modification.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

When the user supplies a paper file (or a readable local path/attachment) and asks for translation, start the complete workflow immediately and deliver the two default DOCX files in the same response. Do **not** ask setup, formatting, terminology, output-name, output-folder, figure-style, reference-link, or confirmation questions: this skill already defines their defaults.

Infer the Chinese title from the paper title; use the source file's directory as the output directory unless the user specifies another location. Use the translation standard, terminology ledger, figure workflow, DOCX styling, bilingual layout, citation navigation, and QA rules in this skill without asking the user to select them.

Ask a single concise blocking question only when no paper can be accessed, the supplied file is unreadable/corrupt/password-protected, essential pages are missing, or a requested destination cannot be written. If any non-blocking ambiguity remains, make the best evidence-based choice, record it in the final report, and continue. Never pause merely to preview a plan or obtain permission to begin the translation.

• Confidence: 81% confidence
• Finding: The skill explicitly instructs the agent to begin processing immediately, make evidence-based choices without confirmation, infer output locations, and continue unless a narrow set of blockers occurs. In a file-processing skill with write capability, this autonomy can cause unintended handling of sensitive documents, writes to user directories, or execution of risky transformations without meaningful user review.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

### Capability fallback order

Use this order without asking the user: (a) bundled PDF/document/image tools; (b) installed local runtimes and libraries; (c) the model's own translation and structured document-generation ability. A missing optional helper is never a blocker. Only an inaccessible source, an unwritable destination, or a genuinely unavailable mandatory Image 2/image-edit capability may block delivery, and the final report must name the exact blocked artifact.

On Windows, absence of `soffice` is not a blocker when Microsoft Word or WPS is installed. Use `scripts/render_docx_windows.ps1`, which tries `Word.Application` first and `KWPS.Application` second, exports the DOCX to PDF, and rasterizes every page with Poppler. Do not incorrectly report that rendering is unavailable merely because a LibreOffice-only helper cannot find `soffice`.

• Confidence: 78% confidence
• Finding: The fallback policy authorizes the agent to use bundled tools, installed local runtimes and libraries, and its own capabilities without asking the user. This expands the execution surface and can lead to unreviewed use of local software such as Office automation, PowerShell scripts, or image/document tooling, which is risky in environments containing sensitive files or powerful local integrations.

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.