skills/mikopbx/core/translations/Gen Agent Trust Hub

translations

Pass

Audited by Gen Agent Trust Hub on Jun 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The helper script translation-batch-manager.php executes php -l via shell_exec to perform syntax validation on generated translation files. The implementation uses escapeshellarg() to mitigate potential command injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The documentation references https://weblate.mikopbx.com as an official platform for automated translation synchronization. This is a vendor-owned service used for project maintenance.
  • [DYNAMIC_EXECUTION]: The skill employs a helper script that generates PHP files containing translation arrays. It uses the include statement to load these arrays into memory for processing, which is standard practice for PHP-based translation systems. The generation logic includes proper escaping of string literals to prevent syntax errors or code injection.
  • [PROMPT_INJECTION]: As the skill involves sending Russian source strings to an AI for translation, it possesses an indirect prompt injection surface. If source files contain malicious instructions, the agent could potentially be influenced during the translation process. The skill provides specific prompt templates to keep the AI focused on translation tasks, minimizing this risk.
  • [SAFE]: Instructions for cache management (e.g., redis-cli FLUSHDB via Docker) are provided for developer use and are consistent with the requirements for updating a production environment after translation changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 9, 2026, 04:04 PM
Security Audit — agent-trust-hub — translations