gettext-i18n
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for standard internationalization (i18n) workflows in Elixir/Phoenix applications using the well-known
gettextlibrary. - [SAFE]: The documentation includes explicit security rules and code examples for validating user-controlled input (locale parameters) against a predefined allowlist. This implementation follows the principle of least privilege and prevents potential issues related to unvalidated input entering the system context.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data ingestion (locale from URL params/session) but provides robust sanitization logic.
- Ingestion points: Locale data is read from
conn.params["locale"]andget_session(conn, "locale")in the providedSetLocaleplug. - Boundary markers: The instructions explicitly state to use an allowlist.
- Capability inventory: No dangerous automated capabilities (network/file-write) are triggered directly by the input; it is used only to set the process locale via the Gettext backend.
- Sanitization: The code snippet includes a
validatefunction that checks the input against a hardcoded@supported_localeslist.
Audit Metadata