i18n
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests untrusted data from the project's source code and configuration files.
- Ingestion points: The agent is instructed to read
package.json, locale files (e.g.,src/locales/en.json), and source files (JSX, TSX, Vue) to find strings. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the strings or code being audited.
- Capability inventory: The skill is limited to reading files and reporting findings; it explicitly states it should never auto-modify files and does not request network access.
- Sanitization: There is no evidence of sanitization or filtering of the ingested content before it is processed by the agent.
Audit Metadata