Security audit
Security checks across malware telemetry and agentic risk
The skill appears to perform PDF translation as advertised, but it should be reviewed because it persistently patches BabelDOC security checks and stores/deletes document work files without strong safeguards.
Review before installing. Use this only in a disposable virtual environment or container, avoid running it as root or in a shared Python installation, and do not process confidential PDFs unless you are comfortable with extracted text being saved in the work directory and used for LLM translation. Back up or isolate the BabelDOC cache and choose a dedicated work directory before running the cleanup scripts.
# Step 2: Clear old caches echo "[Step 2] Clearing old caches..." rm -f /root/.cache/babeldoc/cache.v1.db mkdir -p "$WORK_DIR" rm -f "$WORK_DIR/segments.json" "$WORK_DIR/translations.json" "$WORK_DIR/unknown_segments.json"
echo "[Step 2] Clearing old caches..." rm -f /root/.cache/babeldoc/cache.v1.db mkdir -p "$WORK_DIR" rm -f "$WORK_DIR/segments.json" "$WORK_DIR/translations.json" "$WORK_DIR/unknown_segments.json" # Step 3: Kill any existing proxy on the port kill $(lsof -ti:$PROXY_PORT 2>/dev/null) 2>/dev/null || true
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.
