AI-powered translation for 48 languages with context-aware quality
Drift inferred · capture-to-capture
- HIGH code analysis flagged hidden prompt content in i18n-agent/mcp-client
tool count over time
06-03 20:32 now
16t
1t
transport stdio · streamable-http · http counts 10 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
analyze_content
-
check_translation_status
-
download_translations
-
get_credits
-
list_supported_languages
-
list_uploaded_translations
-
resume_translation
-
translate_file
-
translate_text
-
upload_translations
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 320290a · analyzer v33 · 2w ago
danger signals1
- credential in logs credential in log i18n-agent-mcp-client-320290a/tests/integration/full-install.test.js :105
console.log(` - API key preserved: ${mergedConfig.mcpServers['i18n-agent'].env.I18N_AGENT_API_KEY}`);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 15
filesystem 11
- fs i18n-agent-mcp-client-320290a/i18n-agent.js :27
import fs from 'fs'; - fs i18n-agent-mcp-client-320290a/install.js :8
import fs from 'fs'; - fs i18n-agent-mcp-client-320290a/lib/config-writer.js :1
import fs from 'fs'; - fs i18n-agent-mcp-client-320290a/lib/environment-detector.js :12
import fs from 'fs'; - fs i18n-agent-mcp-client-320290a/lib/verifier.js :7
import fs from 'fs'; - fs (weak) i18n-agent-mcp-client-320290a/test-download-translations.js :11
import fs from 'fs'; - fs (weak) i18n-agent-mcp-client-320290a/test.js :8
import fs from 'fs'; - fs (weak) i18n-agent-mcp-client-320290a/tests/integration/api-key-prompt.test.js :11
import fs from 'node:fs'; - fs (weak) i18n-agent-mcp-client-320290a/tests/integration/error-scenarios.test.js :3
import fs from 'node:fs/promises'; - fs (weak) i18n-agent-mcp-client-320290a/tests/integration/full-install.test.js :7
import fs from 'fs'; - fs (weak) i18n-agent-mcp-client-320290a/tests/integration/verification-flows.test.js :3
import fs from 'node:fs/promises';
shell / exec 3
- shell i18n-agent-mcp-client-320290a/install.js :12
import { execSync } from 'child_process'; - shell i18n-agent-mcp-client-320290a/lib/verifier.js :6
import { spawn } from 'child_process'; - shell (weak) i18n-agent-mcp-client-320290a/tests/integration/tool-call-auth.test.js :14
import { spawn } from 'node:child_process';
network 3
- net i18n-agent-mcp-client-320290a/i18n-agent.js :26
import axios from 'axios'; - net i18n-agent-mcp-client-320290a/lib/verifier.js :130
// Try to import fetch (Node 18+ has native fetch) - net (weak) i18n-agent-mcp-client-320290a/tests/integration/tool-call-auth.test.js :13
import http from 'node:http';
secrets 2
- secrets i18n-agent-mcp-client-320290a/i18n-agent.js :48
if (!process.env.I18N_AGENT_API_KEY) { - secrets i18n-agent-mcp-client-320290a/lib/verifier.js :210
const apiKey = env.I18N_AGENT_API_KEY || process.env.I18N_AGENT_API_KEY;
tool registrations 10
- translate_text i18n-agent-mcp-client-320290a/i18n-agent.js :106
- list_supported_languages i18n-agent-mcp-client-320290a/i18n-agent.js :187
- translate_file i18n-agent-mcp-client-320290a/i18n-agent.js :201
- analyze_content i18n-agent-mcp-client-320290a/i18n-agent.js :303
- get_credits i18n-agent-mcp-client-320290a/i18n-agent.js :343
- check_translation_status i18n-agent-mcp-client-320290a/i18n-agent.js :383
- resume_translation i18n-agent-mcp-client-320290a/i18n-agent.js :405
- download_translations i18n-agent-mcp-client-320290a/i18n-agent.js :419
- upload_translations i18n-agent-mcp-client-320290a/i18n-agent.js :433
- list_uploaded_translations i18n-agent-mcp-client-320290a/i18n-agent.js :487
install hooks 2
- postinstall i18n-agent-mcp-client-320290a/package.json :11
echo ' 🌍 i18n-agent MCP Client installed successfully!' - prepublishOnly i18n-agent-mcp-client-320290a/package.json :12
echo '❌ Direct npm publish blocked. Use scripts/publish-mcp-client.sh instead.' && exit 1
declared dependencies 3
- @modelcontextprotocol/sdk@^1.0.0
- axios@^1.6.0
- form-data@^4.0.0