figma-json-localization
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on data transformation and translation. It does not attempt to execute code, access sensitive files, or exfiltrate information.
- [EXTERNAL_DOWNLOADS]: References official documentation from Apple and the vendor's own domain (aso.dev) for locale verification. These are trusted/well-known sources and represent normal functionality for a localization tool.
- [PROMPT_INJECTION]: While the skill processes user-provided JSON which is an untrusted data source, the instructions are constrained to translation and structural preservation. There are no patterns that would allow the processed data to escalate privileges or trigger dangerous operations.
- [DATA_EXFILTRATION]: No network operations or sensitive data access patterns were found. The skill operates entirely within the provided context.
Audit Metadata