sync-translations

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected. The skill performs standard documentation maintenance tasks such as listing files, reading content for translation, and writing translated files to the local docs/ directory. All operations are confined to the intended scope of the GramIO project documentation.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool specifically to retrieve file modification times via ls -la or stat. This is a routine operation for auditing synchronization and does not involve executing arbitrary strings or untrusted scripts.
  • [PROMPT_INJECTION]: The skill reads local Markdown files to perform translations. Although processing external data is a surface for indirect prompt injection (Category 8), the behavior is strictly required for the skill's primary purpose.
  • Ingestion points: Reads English and Russian markdown documentation files from docs/ and docs/ru/.
  • Boundary markers: Absent; the skill processes full file contents for translation.
  • Capability inventory: Includes Write, Glob, Grep, and Bash tools.
  • Sanitization: No input sanitization or validation of the documentation content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 12:35 PM