Dynamic code execution detected.
Critical
- Code
- suspicious.dynamic_code_execution
- Location
- tests/test_subtitle_tool.py:21
Security audit
Agent Subtitle Translator
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent subtitle-translation helper that reads a user-chosen subtitle file, prepares local translation batches, validates responses, and writes local outputs without hidden network, credential, or persistence behavior.
Install only from the expected publisher/source, review the generated batch prompts before sending them to a translation model if subtitles are sensitive, and use overwrite flags only when you intentionally want to replace prior work or output files.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dynamic_code_execution