skill-i18n
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
cat,jq, andmvto manage its configuration file at~/.claude/skill-i18n-config.jsonand to verify the existence of target files for translation. - [INDIRECT_PROMPT_INJECTION]: The skill translates external content from
SKILL.mdandREADME.mdfiles. This creates a vulnerability surface where malicious instructions embedded in these files could influence the agent's behavior during the translation process. - Ingestion points: The skill reads content from local
SKILL.mdandREADME.mdfiles located in the current directory or within specified skill paths. - Boundary markers: Absent. The skill does not instruct the agent to use specific delimiters or to disregard instructions found within the source documents.
- Capability inventory: Shell execution (
jq,cat,mv), file system reads, and file system writes. - Sanitization: Absent. There is no evidence of input validation or content filtering before the documentation is processed for translation.
Audit Metadata