ios-localization
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests using
xcstrings-toolfromgithub.com/liamnichols/xcstrings-toolfor multi-module localization setups. This is an unverifiable third-party dependency recommended for installation in development environments. - [COMMAND_EXECUTION]: The documentation includes a Python command-line utility for translation coverage validation and provides several
xcodebuildcommand patterns for importing and exporting localization data. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing external
Localizable.xcstrings(JSON) files using scripts, which creates a potential surface for indirect injection if the processed files are attacker-controlled. - Ingestion points:
references/string-catalogs.md(reads and parsesLocalizable.xcstringsvia Python) - Boundary markers: Absent
- Capability inventory: Python script execution (
python3 -c) inreferences/string-catalogs.md - Sanitization: Absent
Audit Metadata