translations
Pass
Audited by Gen Agent Trust Hub on Jun 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The helper script
translation-batch-manager.phpexecutesphp -lviashell_execto perform syntax validation on generated translation files. The implementation usesescapeshellarg()to mitigate potential command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The documentation references
https://weblate.mikopbx.comas an official platform for automated translation synchronization. This is a vendor-owned service used for project maintenance. - [DYNAMIC_EXECUTION]: The skill employs a helper script that generates PHP files containing translation arrays. It uses the
includestatement to load these arrays into memory for processing, which is standard practice for PHP-based translation systems. The generation logic includes proper escaping of string literals to prevent syntax errors or code injection. - [PROMPT_INJECTION]: As the skill involves sending Russian source strings to an AI for translation, it possesses an indirect prompt injection surface. If source files contain malicious instructions, the agent could potentially be influenced during the translation process. The skill provides specific prompt templates to keep the AI focused on translation tasks, minimizing this risk.
- [SAFE]: Instructions for cache management (e.g.,
redis-cli FLUSHDBvia Docker) are provided for developer use and are consistent with the requirements for updating a production environment after translation changes.
Audit Metadata