react-native-i18n
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of widely-used, industry-standard libraries for internationalization, including
i18next,react-i18next,expo-localization, andreact-native-localize, as well as developer tools likei18next-clifor managing translation keys. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow for processing external translation data that could theoretically be tampered with by an attacker (e.g., via a Translation Management System compromise). However, it follows standard security practices for React Native development.
- Ingestion points: JSON locale files and external sync with TMS (Crowdin, Lokalise, etc.) described in
references/best-practices-workflow.md. - Boundary markers: Uses standard i18next delimiters (e.g.,
{{count}}) for interpolation. - Capability inventory: The data is used for UI rendering through the
useTranslationhook and<Trans>component. - Sanitization: The configuration in
references/core-setup.mdcorrectly relies on React's built-in XSS protection by settingescapeValue: false. - [COMMAND_EXECUTION]: The skill instructs the user on using standard development CLI commands via
npxandnpmfor extracting translation keys and managing dependencies.
Audit Metadata