localize-cs
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted source text for the purpose of translation and localization into Czech. This creates a potential surface for indirect prompt injection where malicious instructions embedded in the source text could influence agent behavior.
- Ingestion points: The skill processes user-supplied "source text", "UI strings", and "marketing copy" as described in the metadata and scope section of
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters (like XML tags or triple quotes) or explicit instructions for the agent to ignore commands found within the source data.
- Capability inventory: The skill does not contain any executable scripts or tools; it has no capabilities for subprocess execution, file system modification, or network operations.
- Sanitization: There are no instructions for sanitizing or escaping the input text.
- [NO_CODE]: The skill consists entirely of markdown-based linguistic rules, terminology lists, and examples. It does not include any scripts (Python, JavaScript, shell), configuration files for package managers, or binary executables.
Audit Metadata