localize-cs

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted source text for the purpose of translation and localization into Czech. This creates a potential surface for indirect prompt injection where malicious instructions embedded in the source text could influence agent behavior.
  • Ingestion points: The skill processes user-supplied "source text", "UI strings", and "marketing copy" as described in the metadata and scope section of SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters (like XML tags or triple quotes) or explicit instructions for the agent to ignore commands found within the source data.
  • Capability inventory: The skill does not contain any executable scripts or tools; it has no capabilities for subprocess execution, file system modification, or network operations.
  • Sanitization: There are no instructions for sanitizing or escaping the input text.
  • [NO_CODE]: The skill consists entirely of markdown-based linguistic rules, terminology lists, and examples. It does not include any scripts (Python, JavaScript, shell), configuration files for package managers, or binary executables.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 12:28 PM
Security Audit — agent-trust-hub — localize-cs