lokalise-cost-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Interacts with the official
@lokalise/node-apipackage and the well-knownapi.lokalise.comservice. These are trusted resources from a reputable organization. - [COMMAND_EXECUTION]: Uses
curlandjqto fetch project metadata, team statistics, and seat counts from the official Lokalise API endpoints. - [DATA_EXPOSURE]: Accesses local source code files to perform a comparison against translation keys stored in Lokalise. This is a functional requirement for detecting orphaned keys and does not involve exfiltrating sensitive file content.
- [SAFE]: The skill correctly handles sensitive credentials by referencing the
LOKALISE_API_TOKENenvironment variable rather than using hardcoded values. All network operations are directed at the official vendor API.
Audit Metadata