astro-i18n
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide and template library for Astro's built-in i18n features. The instructions and code snippets follow standard development practices for the framework.
- [INDIRECT_PROMPT_INJECTION]: The skill documents the handling of untrusted input from URL parameters (
Astro.params.locale) used to fetch translations and filter content collections. This represents a standard application attack surface but lacks exploitable capabilities in the provided context. - Ingestion points: URL parameters in
src/pages/[locale]/routes (references/templates/locale-page.md,references/content-translation.md). - Boundary markers: None explicitly defined in the templates, as boundary enforcement is typically handled by the routing framework.
- Capability inventory: The provided code snippets only perform read-only operations on localized content and URL generation. No subprocess execution, file writes, or network requests are triggered by the ingested locale data.
- Sanitization: The logic uses the locale string as a key for a closed translation object (
translations[locale]), which effectively acts as a whitelist for valid locale codes.
Audit Metadata