skills/bastndev/skills/l10n-sync/Gen Agent Trust Hub

l10n-sync

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/extract_reassemble.py) to handle file parsing, translation extraction, and reassembly. The execution is bounded to the workspace and a temporary work directory.
  • [PROMPT_INJECTION]: The skill processes workspace content (Markdown and JSON) for localization. It mitigates indirect prompt injection risks by extracting prose into a structured JSON payload and using explicit instructions to the model to only translate values, preserving the structure and invariants wrapped in sentinel characters.
  • [EXTERNAL_DOWNLOADS]: The skill references the author's official GitHub repository for assets and installation instructions, which is standard for skill distribution. No unauthorized or suspicious external connections were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 08:15 AM
Security Audit — agent-trust-hub — l10n-sync