angular-i18n
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides references and links to official Angular documentation and reputable community-standard tools.
- Official guides from
angular.devandblog.angular.dev(Google-managed domains). - Community-standard libraries such as
ngx-translateandtranslocohosted on GitHub. - [INDIRECT_PROMPT_INJECTION]: The skill guides the agent to interact with and process potentially untrusted external project files, which constitutes a vulnerability surface.
- Ingestion points: Project source code (HTML, TypeScript) and external translation files (e.g.,
.xlf,.json) are processed by the agent during extraction and translation tasks. - Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings for the content being localized.
- Capability inventory: The skill encourages use of the Angular CLI for extraction (
ng extract-i18n) and production builds (ng build), involving file system interaction and command execution. - Sanitization: No specific sanitization or filtering logic is provided for the interpolated translation content.
Audit Metadata