i18next-localization
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses
npx i18next-cli localize --print-agent-promptto generate its actual operating instructions at runtime. The agent is directed to follow this externally generated output verbatim, effectively creating a dynamic dependency for its core logic. - [REMOTE_CODE_EXECUTION]: The skill suggests installing community-maintained packages, such as
i18next-cli-vue(by PBK-B) andi18next-cli-plugin-svelte(by dreamscached), which are hosted in individual user repositories outside the official vendor's organization. - [INDIRECT_PROMPT_INJECTION]: The skill processes the project's entire codebase for string instrumentation and extraction, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill reads source files including
.js,.ts,.jsx,.tsx,.vue, and.svelteusing thei18next-cli instrumentandextractcommands. - Boundary markers: No explicit markers or warnings to ignore instructions embedded in code are provided for the file-reading phase.
- Capability inventory: The agent possesses the capability to modify files and execute shell commands via the
Bashtool. - Sanitization: No sanitization of source code content is performed before the data is processed by the agent's tools.
- [PERSISTENCE]: The skill instructs the agent to persistently add an MCP server (
https://mcp.locize.app) to its configuration usingclaude mcp add, which maintains access and functionality across future sessions. - [COMMAND_EXECUTION]: The skill utilizes
npxto run thei18next-cliand related plugins without pinning them to specific versions, which relies on the security of the latest packages published to the registry at the time of execution.
Audit Metadata