i18n-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
i18n-tasksgem, which is a standard community tool used in the Ruby on Rails ecosystem for managing translation files. - [COMMAND_EXECUTION]: The documentation includes common development CLI commands for the
i18n-tasksutility, such asbundle exec i18n-tasks missingandbundle exec i18n-tasks normalize. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to process and utilize data from external localized YAML files.
- Ingestion points: Translation data is ingested from YAML files specified in the
config/locales/directory. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat the content of these translation files as untrusted data.
- Capability inventory: The skill demonstrates rendering translations in ERB templates, using them in controller redirects (notices), and accessing them within model logic.
- Sanitization: The instructions explicitly promote the use of the
_htmlsuffix for translation keys, which is a built-in Rails mechanism that bypasses default HTML escaping to render raw markup.
Audit Metadata