typo3-translations
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation suggests using standard shell utilities like
xmllint,ripgrep(rg), and the TYPO3 CLI for auditing and validating translation files. These are routine development practices. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process and inventory XLIFF files, which constitutes a potential attack surface for indirect prompt injection if those files contain adversarial content.
- Ingestion points: XLIFF files found in
Resources/Private/Language/and Content Blocks language directories as specified in the workflow. - Boundary markers: Not explicitly defined for the agent's interaction with the XML data.
- Capability inventory: The skill provides instructions and patterns for editing files but does not include scripts with autonomous network or system-level execution capabilities.
- Sanitization: The skill recommends utilizing official TYPO3 core APIs for label resolution, which includes standard processing of translation strings.
Audit Metadata