i18n-validate-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
@i18n-agent/i18n-validatepackage globally from the NPM registry. This package belongs to the skill author's verified namespace and is used to provide the primary validation functionality. - [COMMAND_EXECUTION]: Executes the
i18n-validateCLI tool to perform checks and usesgrepto verify translation key usage within the codebase. - [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes external data (translation files) which presents an indirect injection surface.
- Ingestion points: Translation files (locales, messages, i18n, lang directories) and CLI tool output are read into context in Step 2 and Step 3.
- Boundary markers: None present; the skill treats parsed JSON findings from the tool as trusted instructions for modification.
- Capability inventory: The skill is authorized to perform file writes (Steps 3.1 through 3.6) and command execution (Steps 1, 2, and 4).
- Sanitization: No explicit sanitization or validation of translation strings is mentioned before they are written back to disk.
Audit Metadata