migrate-i18next-to-lingui
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and transform source code files, creating a surface for indirect instructions to influence agent behavior.
- Ingestion points: The agent is instructed to scan and read JavaScript, TypeScript, and JSX files within the user's project directory (e.g.,
src/). - Boundary markers: The instructions do not specify any delimiters or safety warnings to ignore potentially malicious instructions embedded in the code being migrated.
- Capability inventory: The skill utilizes capabilities to install software packages (
npm install), execute developer tools (npx lingui,grep), and write or update local files. - Sanitization: No sanitization or validation of the processed source code is performed before the agent acts upon it.
- [EXTERNAL_DOWNLOADS]: The skill involves the installation of several Node.js packages related to the Lingui framework.
- The packages (@lingui/core, @lingui/react, @lingui/cli, etc.) trace back to the vendor's own namespace and are standard for the migration process.
- [COMMAND_EXECUTION]: The skill uses shell commands to manage dependencies and audit the codebase.
- Execution includes
npm installfor package management,npx lingui extractandnpx lingui compilefor translation workflow, andgrepfor identifying residual i18next code. These are standard development tools and commands appropriate for the skill's purpose.
Audit Metadata