i18n-pseudo

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions include a command to install the @i18n-agent/i18n-pseudo package from the NPM registry. The package is scoped to the skill author's identified vendor name.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform setup checks, install dependencies, and execute the i18n-pseudo command-line utility for processing files.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external locale files, which serves as an ingestion point for untrusted data that could contain malicious instructions.
  • Ingestion points: Files passed as arguments to the i18n-pseudo command in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the contents of these files as untrusted data.
  • Capability inventory: The skill has access to Bash for shell command execution and Read for file system access.
  • Sanitization: No sanitization or filtering of the input file content is mentioned beyond the tool's intended logic to preserve specific placeholders.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 08:45 AM