bahasa-indonesia
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/sync-language-registry.mjsfile fetches linguistic data from the Indonesian Ministry of Education's official portal (petabahasa.kemendikdasmen.go.id) to synchronize the local language registry. - [COMMAND_EXECUTION]: Development and test scripts utilize
child_process.spawnSyncto execute local Node.js utilities for output validation and skill linting during the development phase. - [INDIRECT_PROMPT_INJECTION]: The skill processes user input to apply regional voices and poetic styles. It mitigates potential injection risks by explicitly instructing the agent in
references/core.mdto preserve technical artifacts (code, commands, paths) and to never allow style changes to override security warnings or permission decisions. - Ingestion points:
evals/cases.jsonand user-supplied prompts. - Boundary markers: Explicit instructions in
references/core.mdregarding 'artefak terlindungi' (protected artifacts) to maintain technical integrity. - Capability inventory: Local file system access and subprocess spawning for testing purposes in
scripts/. - Sanitization: Validation scripts check for the preservation of key technical tokens and the absence of restricted linguistic patterns.
Audit Metadata