localizegen
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for the
Shiny.Extensions.Localization.Generatorlibrary. All recommended practices, such as installing packages via official NuGet channels and utilizing Dependency Injection, align with standard .NET development security guidelines. - [REMOTE_CODE_EXECUTION]: No suspicious remote code execution patterns were found. The skill mentions standard package installation (
dotnet add package) for well-known and vendor-relevant libraries. - [DATA_EXFILTRATION]: There are no indicators of data exposure or exfiltration. The skill does not access sensitive system paths or credentials, nor does it perform unauthorized network operations.
- [OBFUSCATION]: Analysis of all files, including templates and reference documentation, revealed no obfuscated content, hidden characters, or encoded URLs.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing
.resx(XML) files which could theoretically contain malicious prompts, it does so in the context of standard code generation where the agent acts as a developer assistant. No specialized attack surfaces were identified beyond normal code generation risks.
Audit Metadata