Skills/ClawHub/mochi-translation-qa

mochi-translation-qa@1.0.0

VERIFIED

Publisher claims: "Translate and proofread text with source-grounded bilingual comparisons. Check numbers, terminology, dates and links; report mismatches and items needing human review. Includes local scripts, examples and tests. Free standalone Skill; no MochiLab account required." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher hznetnewpower · joined 1 days agoInstalls 49Last detonated 19 h ago
$npx skills add mochi-translation-qa
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionSKILL.md:24 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:21 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/local.mjs:23 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/input.md:14 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiontests/check.test.mjs:20 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/input.md:24 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/input.md:16 · File type combined with upload action — agent may exfiltrate local data files
AST07