快速翻译

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:18 PM UTC
• Version:
  1.0.0

Overview

This is a simple translation skill with no executable code or install hooks; users should just be aware that it advertises saved translation history.

Install this for ordinary translation tasks. Before using it with private documents, contracts, medical/legal text, business emails, credentials, or personal information, check whether the host keeps translation history or terminology data and how to clear it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill explicitly advertises a translation history feature, which implies retention of user-submitted text, but provides no notice about storage, retention period, access controls, or sensitivity considerations. Because users may paste contracts, medical, legal, or business content into a translation tool, undisclosed retention creates a meaningful privacy and data-handling risk.

VirusTotal

66/66 vendors flagged this skill as clean.