skills/guo-yu/skills/skill-i18n/Gen Agent Trust Hub

skill-i18n

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands like cat, jq, and mv to manage its configuration file at ~/.claude/skill-i18n-config.json and to verify the existence of target files for translation.
  • [INDIRECT_PROMPT_INJECTION]: The skill translates external content from SKILL.md and README.md files. This creates a vulnerability surface where malicious instructions embedded in these files could influence the agent's behavior during the translation process.
  • Ingestion points: The skill reads content from local SKILL.md and README.md files located in the current directory or within specified skill paths.
  • Boundary markers: Absent. The skill does not instruct the agent to use specific delimiters or to disregard instructions found within the source documents.
  • Capability inventory: Shell execution (jq, cat, mv), file system reads, and file system writes.
  • Sanitization: Absent. There is no evidence of input validation or content filtering before the documentation is processed for translation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 04:28 AM