init-translator
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs fetching public web resources (e.g., https://www.zotero.org/support/_export/raw/dev/translators and target webpages via curl/requestDocument) and the translator code (doWeb/scrape/requestDocument) expects to read and parse arbitrary public web pages, exposing the agent to untrusted third‑party content.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to "fetch and ingest" https://www.zotero.org/support/_export/raw/dev/translators and https://www.zotero.org/support/_export/raw/dev/translators/coding, meaning external content would be ingested and directly control prompts/instructions and is required for the skill to run.
Audit Metadata