react-native-i18n

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of widely-used, industry-standard libraries for internationalization, including i18next, react-i18next, expo-localization, and react-native-localize, as well as developer tools like i18next-cli for managing translation keys.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow for processing external translation data that could theoretically be tampered with by an attacker (e.g., via a Translation Management System compromise). However, it follows standard security practices for React Native development.
  • Ingestion points: JSON locale files and external sync with TMS (Crowdin, Lokalise, etc.) described in references/best-practices-workflow.md.
  • Boundary markers: Uses standard i18next delimiters (e.g., {{count}}) for interpolation.
  • Capability inventory: The data is used for UI rendering through the useTranslation hook and <Trans> component.
  • Sanitization: The configuration in references/core-setup.md correctly relies on React's built-in XSS protection by setting escapeValue: false.
  • [COMMAND_EXECUTION]: The skill instructs the user on using standard development CLI commands via npx and npm for extracting translation keys and managing dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 08:45 PM