i18n-and-timezones

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Recommends using the rails-i18n and ice_cube gems. These are well-known, established libraries in the Ruby ecosystem.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing user-controlled input (parameters and headers) to set the application locale.\n
  • Ingestion points: ApplicationController methods in SKILL.md read from params[:locale] and HTTP_ACCEPT_LANGUAGE headers.\n
  • Boundary markers: The implementation uses an explicit whitelist check against I18n.available_locales to restrict accepted values.\n
  • Capability inventory: The ingested data is only used for locale selection and is not passed to dangerous functions like shell commands or file writers.\n
  • Sanitization: Input is truncated to two characters and validated against the whitelist of supported locales before use.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 02:26 AM