globalize-now-project-setup

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various git commands (e.g., git rev-parse, git remote get-url, git status, git log) to identify the repository state and remote provider information.
  • [COMMAND_EXECUTION]: It utilizes npx to run the @globalize-now/cli-client package for interactions with the Globalize platform, such as project creation and repository connection.
  • [EXTERNAL_DOWNLOADS]: The skill triggers the download and execution of the @globalize-now/cli-client package via npx to perform its platform-specific tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration files (e.g., lingui.config.js, i18n.ts, settings.json, and .globalize/globalize-inputs.json) to automatically determine project settings.
  • Ingestion points: Local i18n configuration files and the project-specific .globalize/globalize-inputs.json file.
  • Boundary markers: The instructions do not specify any boundary markers or special handling to isolate content read from these files from the agent's instructions.
  • Capability inventory: The skill can execute shell commands via git and npx, and perform network operations through the Globalize CLI tools.
  • Sanitization: No explicit sanitization or validation of the input file content is performed before the extracted values are passed as arguments to the CLI commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 02:39 PM