rhdh-translation-upload
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the
subprocess.runfunction to interact with external tools such as Git, Node.js, Memsource, and the GitHub CLI. Technical review confirms that all calls use argument lists rather than shell strings, which is a secure practice that prevents command injection. - [CREDENTIALS_UNSAFE]: The skill checks for Memsource TMS credentials in environment variables such as
MEMSOURCE_TOKEN,MEMSOURCE_URL, andMEMSOURCE_USERNAME. The documentation instructs the user to provide these locally (e.g., via a.memsourcercfile), which is a standard and acceptable practice for developer automation tools. - [SAFE]: The behavior of the skill aligns exactly with its stated purpose of managing translation workflows. It operates on local repositories and files, and its network operations are limited to authenticated interactions with the Translation Management System and GitHub API via official CLI tools.
Audit Metadata