Translation Assistant
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill includes a function
extract_stringsthat reads from source files to identify translatable content. This is a standard operation for localization workflows and does not involve accessing sensitive system files or credentials. - [PROMPT_INJECTION]: The
llm_translatefunction interpolates user-provided text directly into an LLM prompt. While this creates an indirect prompt injection surface where a user could provide text containing instructions, the skill's capabilities are restricted to text processing and translation, posing minimal risk. The prompt uses labeled sections ('Source text:') to help delineate input.
Audit Metadata