i18n-pseudo
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include a command to install the
@i18n-agent/i18n-pseudopackage from the NPM registry. The package is scoped to the skill author's identified vendor name. - [COMMAND_EXECUTION]: The skill uses the Bash tool to perform setup checks, install dependencies, and execute the
i18n-pseudocommand-line utility for processing files. - [INDIRECT_PROMPT_INJECTION]: The skill processes external locale files, which serves as an ingestion point for untrusted data that could contain malicious instructions.
- Ingestion points: Files passed as arguments to the
i18n-pseudocommand inSKILL.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the contents of these files as untrusted data.
- Capability inventory: The skill has access to
Bashfor shell command execution andReadfor file system access. - Sanitization: No sanitization or filtering of the input file content is mentioned beyond the tool's intended logic to preserve specific placeholders.
Audit Metadata