lokalise-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The CI workflow in
references/implementation.mdfetches the Lokalise CLI installation script from Lokalise's official GitHub repository. - [COMMAND_EXECUTION]: The skill utilizes shell commands for translation promotion, environment setup, and secret management using tools like
jq,lokalise2, and CLI interfaces for AWS, GCP, and HashiCorp Vault. - [INDIRECT_PROMPT_INJECTION]: The skill processes translation data from external Lokalise projects, creating a potential attack surface for indirect prompt injection.
- Ingestion points: The
lokalise2 file downloadcommand inSKILL.mdandreferences/implementation.mdfetches external JSON translation files into the local environment. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content within the fetched JSON files.
- Capability inventory: The skill environment permits
Bashexecution (specifically foraws,gcloud, andvaultnamespaces), along withReadandWritefile system access. - Sanitization: The skill does not perform sanitization or validation of the content within translation files before processing them with
jqor re-uploading them to different environments.
Audit Metadata