translate-site
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project content (JSON, MD, MDX) which could contain adversarial instructions targeting the AI agent during the translation phase.
- Ingestion points:
scripts/prepare-translation.mjsreads locale strings fromrosey/locales/, andscripts/prepare-content-translation.mjsextracts frontmatter and body text fromsrc/content/files. - Boundary markers: The task manifests (
.translation-task-*.json) do not use specific boundary markers or 'ignore' instructions for the content data being translated. - Capability inventory: The skill possesses file-write capabilities via
scripts/merge-translation.mjsandscripts/merge-content-translation.mjswhich update the project's source files. - Sanitization: While
scripts/merge-translation.mjsperforms basic HTML tag count validation to ensure structural integrity, there is no sanitization or filtering of the text content to prevent the agent from executing instructions embedded in the source strings.
Audit Metadata