Song Translation Expert

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 9:49 AM UTC
• Version: 1.0.0

Overview

This skill is a Chinese-focused lyrics translation assistant with disclosed helper scripts and no evidence of hidden, destructive, or credential-seeking behavior.

Install only if you want a Chinese-centered song-lyrics translation workflow. Be aware that song-name or URL requests may involve web lookup, and file export requests may create persistent local copies of lyrics; prefer chat-only output unless you intentionally want saved documents.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (30)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

The declared description presents a full-featured lyrics translation skill whose core purpose is translating song lyrics with artistic and cultural fidelity. The supplied code does not translate at all. Instead, it is a utility for aligning an already-existing original text and translation by line, preserving section markers and reporting mismatches. While lyric alignment could be a supporting tool within a translation workflow, this code chunk’s primary behavior is materially different from the declared primary purpose and lacks the central advertised capability: translation.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

声明描述的核心能力是“歌词翻译与本地化”，而代码的核心功能只是“检测歌词所属语言”。这是主目的层面的明显不一致，不是单纯的底层辅助细节，因为代码块本身没有任何翻译逻辑、词典、模型调用、文本生成或注释处理，仅做字符级统计分析。虽然语言检测可以作为翻译前的辅助步骤，但若整个提供的代码块只实现检测而不实现所宣称的翻译功能，则描述不能准确代表实际行为，因此应判定为 mismatch。

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

声明描述的是一个面向多语种歌曲歌词翻译的完整 skill，重点在翻译质量、风格保留、注释和多种翻译场景支持。但提供的代码仅识别歌词中的段落标签（如 [Verse]、[Chorus]），输出其所在行，并标出是否为标准标签。这可以被视为翻译流程中的辅助预处理步骤，但单独来看并不能实现声明中的核心能力。代码的实际主要用途与声明的主要用途存在显著差异，因此应判定为不匹配。

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence

Finding

The declared description presents the skill as a full-featured lyrics translation expert whose main function is translating and adapting song lyrics. The supplied code does not translate anything. Instead, it assumes both original and translated lyrics already exist in separate files, aligns them line-by-line, and outputs them in several display/export formats. While bilingual comparison output is mentioned in the description, that is only a supporting subset of the claimed functionality. The primary purpose of the code chunk is formatting/exporting aligned lyrics, which is materially different from the declared primary purpose of translation and lyric adaptation. No suspicious undeclared external access is present beyond local file I/O, but the core behavior is still a strong description-behavior mismatch.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

声明描述的核心能力是“翻译歌词”，包括多语种到中文/反向翻译、保留押韵可唱性、逐行对照、文化注释等生成式翻译能力。但代码的主功能是一个命令行验证脚本 validate_translation.py：它接收 original.txt 和 translated.txt，检查译文是否与原文在结构和形式上匹配，并给出质量分数。代码没有任何翻译模型调用、词典检索、文本生成或歌曲查询逻辑，也没有根据歌曲名寻找翻译的功能。因此其主要用途与声明存在实质性不一致。尽管该验证脚本与“歌词翻译”领域相关，可视为配套质检工具，但它不能代表所声明的主要 skill 能力。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

High

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

Forcing Chinese output by default without explicit opt-in can violate user intent and create unsafe transformations of content, especially in multilingual contexts where preserving the original language or target language matters. In an agent setting, hard-coded output language constraints can also cause incorrect disclosure, mishandling of user-provided text, and brittle orchestration when downstream consumers expect language choice.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence

Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

The trigger phrases are so broad that the skill may activate for ordinary song-discussion or interpretation requests beyond strict lyric translation. Over-broad activation can hijack normal request routing, causing the agent to invoke unnecessary tools or apply the wrong behavior, which increases the chance of privacy-impacting lookups or inappropriate file/output actions in downstream steps.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 85% confidence

Finding

The recommended activation condition includes vague requests about a song's meaning or story, which are not always translation tasks. This ambiguity can cause the skill to overtake broader conversational handling and potentially trigger web lookup or file-generation workflows without clear user intent.

Content

No source excerpt is available for this finding.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

This manifest-style JSON contains user-facing descriptive text in Chinese at L002 and L036, but provides no indication that the language is optional or that the skill is intentionally limited to Chinese-speaking users. That creates a natural-language policy concern because the file implicitly fixes the skill context to one language without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The title and opening scope state this is a dedicated guide for translating English songs into Chinese, and the instructions throughout prescribe specific Chinese wording and style choices. Because the file imposes a single language/locale outcome with no opt-in or user choice, it creates a natural-language locale policy concern under the stated rule.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 82% confidence

Finding

Line L059 states that translations 'must' convey the original particle-based persona, which imposes a fixed stylistic/locale convention rather than offering user choice. Under the policy, forcing a specific language or locale behavior without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 85% confidence

Finding

The document is written as a normative output specification in Chinese and defines labels, notes, headings, and examples in Chinese as the expected format for the skill. There is no indication that users may opt into another language or locale for the surrounding output structure, which can conflict with language-choice policy expectations.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The skill’s scope is expanded from simple lyric translation into orchestrating other file-generation skills (docx/xlsx/pdf) and producing downloadable artifacts. That broadens privileges and side effects beyond the user’s apparent request, increasing the chance of unintended file creation, data persistence, or misuse of downstream skills without clear necessity or consent.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The documentation mandates saving outputs to a fixed local directory, which introduces unnecessary filesystem side effects for a translation skill. Fixed-path persistence can overwrite prior files, leak sensitive user content into shared local storage, and create artifacts without the user understanding that their data is being written to disk.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

Requiring file saves to the local filesystem without warning the user is a security and privacy issue because it creates persistent copies of potentially copyrighted or sensitive text. In environments with shared storage or later automation, those files may be accessed, indexed, or reused in ways the user did not intend.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 87% confidence

Finding

This markdown file is entirely framed as a Chinese translation quality checklist and states the translation is qualified only when it passes the listed checks, with no indication that users may opt into another target language or locale. Under the policy rule for natural-language constraints, forcing a specific language without user opt-in is a reportable issue unless the locale restriction is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

This markdown guidance repeatedly mandates that translations use Chinese, and L063 explicitly states "中文歌词常用押韵模式," reinforcing a fixed target-language policy. Under the policy rules, forcing a specific language or locale without user opt-in is a natural-language policy violation unless the constraint is clearly documented and justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 87% confidence

Finding

The instruction to use "稍微文言化的中文" for anime themes is a prescriptive locale/style requirement in natural language, not an optional preference. Because the document does not present this as opt-in or clearly justify a Chinese-only operational scope, it conflicts with the policy against forcing a specific language/locale without user choice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

L283 instructs translators to use "现代日常中文," which imposes a specific output language and locale register. Since the file does not clearly offer alternatives or frame Chinese as a justified fixed scope, this is a natural-language locale policy issue under SQP-3.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

This markdown guidance repeatedly prescribes translating content specifically into Chinese, and L050 explicitly states a Chinese-language translation convention. Under the policy rule, forcing a specific language without user opt-in is a natural-language locale policy violation unless the constraint is clearly documented and justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

Lines L219-L222 prescribe a Traditional Chinese/Taiwan-specific wording choice by using “妳” in the recommended translation. This is a locale-specific language policy choice presented as default behavior, with no indication that users may choose simplified Chinese or another locale.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The module description and usage context state the script is for validating lyric translations in Chinese, and the implementation emits all user-facing help/output in Chinese. For a general-purpose skill file, this enforces a specific language/locale without user opt-in, which matches the policy-violation category.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The argparse description/help strings and all printed status messages are Chinese-only, with no mechanism for the user to choose another language. This is a natural-language policy concern because it imposes a locale on all users rather than offering a choice or clearly justifying a region-specific scope.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.