obsidian-localize-new
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a pipeline that executes multiple local TypeScript scripts using
npx tsx. These scripts, such astranslate-filenames.ts,sync-locale.ts, andpublish-all.ts, are used to manage the localization process, including file system manipulation and interaction with the Obsidian Publish CLI. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the translation of documentation by ingesting English source files and processing them via an LLM. This represents a potential surface for indirect prompt injection if the source files were to contain malicious instructions.
- Ingestion points: English markdown files within the
en/directory. - Boundary markers: The instructions do not specify the use of delimiters or protective prompts when passing file content to the translation scripts.
- Capability inventory: The environment allows for script execution (
tsx), file system writes, and remote publishing (ob publish). - Sanitization: There is no mention of sanitizing or filtering the content of the source files before they are processed.
- [DYNAMIC_EXECUTION]: The skill manages the generation of
publish.jsfiles for localized sites by concatenating JavaScript snippets frompublish.strings.js. These scripts are designed to execute in a browser environment to customize the UI of the published documentation.
Audit Metadata