swift-missing-translations
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard macOS and iOS development commands, including
find,grep,xcodebuild,plutil, andxcrun simctl. These tools are used for their intended purposes: locating translation catalogs, building the application, and verifying compiled localization resources in the simulator environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user's project by scanning Swift source files and
.xcstringscatalogs. - Ingestion points: Swift files and JSON-based string catalogs are read by
scripts/audit.pyto identify translation gaps. - Boundary markers: The skill does not implement explicit delimiters or instructions to ignore potential commands embedded within the strings it translates.
- Capability inventory: The skill has the ability to modify project files (
.xcstrings) and execute build/utility commands. - Sanitization: There is no explicit sanitization of the processed text for LLM instructions. However, the risk is minimal as the skill lacks network exfiltration capabilities and is scoped strictly to localization management tasks.
Audit Metadata