i18n-and-timezones
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends using the
rails-i18nandice_cubegems. These are well-known, established libraries in the Ruby ecosystem.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing user-controlled input (parameters and headers) to set the application locale.\n - Ingestion points:
ApplicationControllermethods inSKILL.mdread fromparams[:locale]andHTTP_ACCEPT_LANGUAGEheaders.\n - Boundary markers: The implementation uses an explicit whitelist check against
I18n.available_localesto restrict accepted values.\n - Capability inventory: The ingested data is only used for locale selection and is not passed to dangerous functions like shell commands or file writers.\n
- Sanitization: Input is truncated to two characters and validated against the whitelist of supported locales before use.
Audit Metadata