i18n-localization
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and reference materials do not contain any malicious patterns, obfuscation, or unauthorized data access commands. The workflow is entirely focused on legitimate development tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes strings within application source code, which constitutes a standard attack surface for indirect prompt injection when analyzing untrusted files.
- Ingestion points: Processes application source files (e.g., .tsx, .vue, .svelte, .html) to extract hardcoded user-facing strings.
- Boundary markers: The instructions do not specify the use of delimiters when reading or extracting content from the source files.
- Capability inventory: The skill utilizes shell commands (grep) for string discovery and possesses the capability to modify translation catalogs and source files.
- Sanitization: Extracted strings are processed as-is for catalog entry and translation without intermediate sanitization steps.
Audit Metadata