localization-qa
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs like localized strings and glossaries which could potentially include malicious instructions.
- Ingestion points: The 'Inputs To Gather' section in SKILL.md specifies external localized strings and glossaries.
- Boundary markers: There are no instructions provided to the agent to treat external content as data only or to ignore embedded commands.
- Capability inventory: No executable scripts, network access, or system-altering tools are present in the skill files.
- Sanitization: No input validation or sanitization process is described for the localized content.
- [NO_CODE]: The skill is comprised solely of Markdown documentation and CSV templates with no active code components, significantly reducing its technical risk profile.
Audit Metadata