Security audit

WeryAI video tool — subtitle translate

Security checks for vulnerabilities and agentic risk

Overview

This skill is a focused WeryAI subtitle-translation wrapper that sends a public HTTPS video URL to WeryAI only after user confirmation.

Install only if you are comfortable using WeryAI as a paid external processor. Use public HTTPS video URLs, confirm the exact URL and target language before submission, and keep WERYAI_API_KEY in the runtime environment rather than writing it to files.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (13)

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 12)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 23)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 48)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 51)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 67)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 12)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 22)May include surrounding context.
md
**Entry script:** `scripts/video_subtitle_translate.js` (alongside this `SKILL.md`).

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 90% confidence
Finding: The skill explicitly requires network access and an API key, but it does not declare a formal tool scope such as permissions or allowed-tools. That omission weakens least-privilege guarantees because an agent or runtime may not have an enforceable boundary limiting what tools or capabilities can be used when executing the skill.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This skill transmits a user-supplied video URL and associated job data to a third-party external service (WeryAI) but does not provide a clear user-facing disclosure at the point of submission that content will leave the local environment. That can cause privacy, compliance, or data-handling issues when users provide sensitive or private media under the assumption the tool operates locally or within the hosting platform.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.