translate-docs
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard development tools, specifically
git diffto identify changes between documentation locales andpnpm --filter docs run buildto verify the integrity of the generated documentation. These actions are restricted to the local repository environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from documentation files located in
docs/zh/,docs/en/, anddocs/AGENTS.md. While processing external data is a potential injection surface, the skill defines strict terminology rules and structural constraints that limit the agent's interpretation of embedded instructions. - Ingestion points: Documentation files under
docs/and terminology rules indocs/AGENTS.md(SKILL.md). - Boundary markers: Not explicitly defined in the workflow.
- Capability inventory: Git diff/syncing and pnpm build command execution (SKILL.md).
- Sanitization: The skill explicitly instructs the agent to replace real identifiers with neutral placeholders during translation.
- [CREDENTIALS_SAFE]: The instructions proactively mitigate data exposure by directing the agent to use placeholders such as
example.comandYOUR_API_KEYinstead of real internal values or credentials found in the source text.
Audit Metadata