Security audit

EPUB Bilingual Converter Skill

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent EPUB-to-bilingual-EPUB workflow that reads user-provided EPUB/JSON files and writes generated outputs, with no evidence of hidden data collection or exfiltration.

Install only if you are comfortable letting the agent process the EPUB text you provide. Use a dedicated output folder, review the token estimate before confirming translation, and approve any external translation provider only if you want the book content sent to that provider.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/assemble.py:391

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/patch_bilingual_math.py:11

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/test_assemble_order.py:12

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/test_estimate_tokens.py:13

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/test_extract_feynman_style.py:11