glossary-generation
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source strings to identify glossary terms, creating a surface for indirect prompt injection if those strings contain malicious instructions.
- Ingestion points: Source catalog files identified via
crowdin.ymlor user input (e.g.,.pofiles) as described inSKILL.md. - Boundary markers: The skill mandates an explicit user review of the drafted CSV file before any upload occurs.
- Capability inventory: Utilizes
crowdin-clicommands for glossary listing and uploading. - Sanitization: Relies on human-in-the-loop review to verify the safety and accuracy of drafted terms.
- [COMMAND_EXECUTION]: The skill executes
crowdin-clicommands to manage glossaries on the Crowdin platform. - Evidence: Commands such as
crowdin glossary listandcrowdin glossary uploadare used as specified in theSKILL.mdinstructions andevals.jsonbehavioral tests.
Audit Metadata