sync-translations
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill performs standard documentation maintenance tasks such as listing files, reading content for translation, and writing translated files to the local docs/ directory. All operations are confined to the intended scope of the GramIO project documentation.
- [COMMAND_EXECUTION]: The skill uses the Bash tool specifically to retrieve file modification times via
ls -laorstat. This is a routine operation for auditing synchronization and does not involve executing arbitrary strings or untrusted scripts. - [PROMPT_INJECTION]: The skill reads local Markdown files to perform translations. Although processing external data is a surface for indirect prompt injection (Category 8), the behavior is strictly required for the skill's primary purpose.
- Ingestion points: Reads English and Russian markdown documentation files from
docs/anddocs/ru/. - Boundary markers: Absent; the skill processes full file contents for translation.
- Capability inventory: Includes
Write,Glob,Grep, andBashtools. - Sanitization: No input sanitization or validation of the documentation content is performed before processing.
Audit Metadata