i18n-validate

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @i18n-agent/i18n-validate package from the public npm registry if the command is not already available on the system. This package is owned by the author of the skill.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to run the i18n-validate CLI. This tool processes translation files in various formats to check for missing keys, placeholder mismatches, and other localization errors.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external locale files (JSON, YAML, etc.) as input. While this represents a data ingestion surface, the risk is minimal as the data is used for structural validation and the output is intended for developer feedback.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 08:00 AM
Security Audit — agent-trust-hub — i18n-validate