obsidian-localize-new

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines a pipeline that executes multiple local TypeScript scripts using npx tsx. These scripts, such as translate-filenames.ts, sync-locale.ts, and publish-all.ts, are used to manage the localization process, including file system manipulation and interaction with the Obsidian Publish CLI.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the translation of documentation by ingesting English source files and processing them via an LLM. This represents a potential surface for indirect prompt injection if the source files were to contain malicious instructions.
  • Ingestion points: English markdown files within the en/ directory.
  • Boundary markers: The instructions do not specify the use of delimiters or protective prompts when passing file content to the translation scripts.
  • Capability inventory: The environment allows for script execution (tsx), file system writes, and remote publishing (ob publish).
  • Sanitization: There is no mention of sanitizing or filtering the content of the source files before they are processed.
  • [DYNAMIC_EXECUTION]: The skill manages the generation of publish.js files for localized sites by concatenating JavaScript snippets from publish.strings.js. These scripts are designed to execute in a browser environment to customize the UI of the published documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:58 PM