testfx-localization-validation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill directs the execution of local Python scripts (e.g.,
.github\scripts\check_localization.py) and build commands likemsbuild. These operations are standard for validating and updating repository resources and occur within the local environment. - External Resource Reference: The instructions reference XLIFF schemas from the OASIS Open standards body and documentation from the Microsoft-associated
dotnetorganization. These are well-known, trusted sources for technical specifications. - Indirect Prompt Injection Surface: The skill is designed to process and validate external localization files (XLIFF and RESX). While this represents a data ingestion surface, the validation is performed by dedicated local scripts with specific structural rules, minimizing the risk of instructions embedded in the data influencing agent behavior.
Audit Metadata