tidas-bilingual-transcreation
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
tiangong-lcaCLI tool to perform dataset operations includingextract,apply, andvalidate. These commands are used to process JSONL files at specific file system paths provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which constitutes a vulnerability surface.
- Ingestion points: The skill ingests data from
processes.jsonl,trans-units.jsonl, source evidence documents, and process/flow QA reports. - Boundary markers: The instructions do not define clear delimiters or "ignore embedded instructions" warnings to separate user data from agent instructions during the transcreation process.
- Capability inventory: The agent has the capability to execute shell commands via the
tiangong-lcaCLI and perform file system reads/writes on.jsonland.jsonfiles. - Sanitization: No explicit sanitization, validation, or filtering mechanisms for the external content are described in the skill's logic.
Audit Metadata