ae-localization
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external translation files, creating a surface for indirect instructions to reach the agent.
- Ingestion points:
scripts/loc-sheet.jsreads translation content fromtranslated.csvandglossary.csvprovided by the user. - Boundary markers: There are no explicit delimiters or safety instructions wrapping the imported text content.
- Capability inventory: The skill has access to extensive After Effects automation tools via
ae_run_jsx,ae_batch, andae_render_frameas seen inSKILL.mdand the provided scripts. - Sanitization: No sanitization or filtering is performed on the translated text before it is used to generate command payloads.
- [DYNAMIC_EXECUTION]: The skill utilizes dynamic script evaluation and After Effects expressions to perform its tasks.
- Evidence: In
SKILL.md, theae_run_jsxtool is invoked using$.evalFileto execute the localscripts/loc-duplicate.jsxscript. - Evidence: The documentation describes implementing After Effects expressions that dynamically load and parse string data from
strings.jsonat runtime.
Audit Metadata