i18n-check
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the project's codebase, including locale definition files and source code templates. This creates a surface where malicious content within these files could potentially influence agent behavior during report generation or file-scaffolding processes.\n
- Ingestion points: Reads from locale files (e.g.,
messages/*.json,config/locales/*.yml,.pocatalogs) and source code (e.g.,.tsx,.vue,.html,.erb) as detailed in SKILL.md and references/frameworks.md.\n - Boundary markers: The skill does not define explicit delimiters or instructions to the agent to treat codebase content as untrusted data in its reports.\n
- Capability inventory: The skill utilizes
Bashfor command execution,EditandWritefor file modifications, andTaskfor sub-agent management.\n - Sanitization: Data from processed files is extracted and reported verbatim without mentioned escaping or filtering mechanisms.\n- [DYNAMIC_EXECUTION]: The skill uses the shell to execute dynamically generated Python and Ruby code to perform data processing tasks.\n
- The
references/frameworks.mdfile contains logic for executing Python heredocs and Ruby one-liners via theBashtool to flatten and diff locale file structures.
Audit Metadata