transifex
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the installation of the @membranehq/cli package from the npm registry to enable interaction with the Membrane platform.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Transifex, such as translation strings and comments, which represents an indirect prompt injection attack surface. 1. Ingestion points: Data is fetched through the membrane CLI using action or request commands in SKILL.md. 2. Boundary markers: No specific delimiters or instructions are provided to the agent to treat Transifex content as untrusted data. 3. Capability inventory: The skill utilizes the membrane CLI for shell-based operations and requires network access as noted in the compatibility section. 4. Sanitization: There are no instructions for sanitizing or validating content retrieved from the Transifex API before processing.
Audit Metadata