Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward translation skill with expected file-translation behavior and no evidence of hidden execution, exfiltration, or persistence.
Before installing, understand that asking it to translate files may create translated copies in the workspace using language-code suffixes. Check for existing output files if overwrites matter, and provide an explicit target language when you do not want English.
The instruction says to translate to English whenever the user does not specify a target language. This imposes a language preference by default rather than offering a user choice, which is a natural-language locale policy issue under the stated rules.
The skill instructs the agent to read files and save translated outputs back into the workspace without any explicit confirmation step or warning that it will modify local files. In an agent setting, implicit file writes can cause unintended workspace changes, overwrite derived artifacts, or create privacy/compliance issues if sensitive content is translated and stored automatically.
No suspicious patterns detected.
