globalize-now-project-setup
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various
gitcommands (e.g.,git rev-parse,git remote get-url,git status,git log) to identify the repository state and remote provider information. - [COMMAND_EXECUTION]: It utilizes
npxto run the@globalize-now/cli-clientpackage for interactions with the Globalize platform, such as project creation and repository connection. - [EXTERNAL_DOWNLOADS]: The skill triggers the download and execution of the
@globalize-now/cli-clientpackage vianpxto perform its platform-specific tasks. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration files (e.g.,
lingui.config.js,i18n.ts,settings.json, and.globalize/globalize-inputs.json) to automatically determine project settings. - Ingestion points: Local i18n configuration files and the project-specific
.globalize/globalize-inputs.jsonfile. - Boundary markers: The instructions do not specify any boundary markers or special handling to isolate content read from these files from the agent's instructions.
- Capability inventory: The skill can execute shell commands via
gitandnpx, and perform network operations through the Globalize CLI tools. - Sanitization: No explicit sanitization or validation of the input file content is performed before the extracted values are passed as arguments to the CLI commands.
Audit Metadata