enhanced-message-context
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a specific shell command using
awkto be used for auditing translation files. This instructs the agent to execute code in the local environment to identify messages missing translator comments by processing.pofiles. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading translation catalogs (
.pofiles). This constitutes a potential attack surface for indirect prompt injection if these files were manipulated to contain instructions that could influence agent behavior. - Ingestion points: The audit workflow reads and parses entries from
src/locales/en/messages.pousing text processing tools. - Boundary markers: No specific boundary markers or 'ignore' instructions are provided to the agent to distinguish the translation data being audited from operational instructions.
- Capability inventory: The agent is empowered to run shell commands and perform write operations on the application's source code files.
- Sanitization: The instructions do not prescribe any validation, filtering, or sanitization of the content extracted from the translation files before the agent processes it.
Audit Metadata