ios-localization

Warn

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill suggests using xcstrings-tool from github.com/liamnichols/xcstrings-tool for multi-module localization setups. This is an unverifiable third-party dependency recommended for installation in development environments.
  • [COMMAND_EXECUTION]: The documentation includes a Python command-line utility for translation coverage validation and provides several xcodebuild command patterns for importing and exporting localization data.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing external Localizable.xcstrings (JSON) files using scripts, which creates a potential surface for indirect injection if the processed files are attacker-controlled.
  • Ingestion points: references/string-catalogs.md (reads and parses Localizable.xcstrings via Python)
  • Boundary markers: Absent
  • Capability inventory: Python script execution (python3 -c) in references/string-catalogs.md
  • Sanitization: Absent
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 08:52 PM