translate
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/translate.pyensures the presence of thedeep-translatorlibrary by downloading it from the official Python Package Index (PyPI) if it is not already installed. - [COMMAND_EXECUTION]: The
ensure_dependenciesfunction withinscripts/translate.pyutilizessubprocess.runto programmatically execute thepip installcommand. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted user input within the
textparameter. - Ingestion points: The
textparameter passed to themainfunction inscripts/translate.py. - Boundary markers: The translation output is prefixed with a descriptive string, providing a minor boundary between metadata and translated content.
- Capability inventory: The script uses
subprocess.runfor environmental setup and performs network operations via thedeep-translatorlibrary. - Sanitization: No explicit input sanitization or safety-oriented boundary markers are implemented to prevent the translation engine from following instructions embedded in the input text.
Audit Metadata