readme-i18n

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill processes standard project documentation files (e.g., README.md, README.zh-TW.md). No access to sensitive environment variables, credentials, or system configuration files was detected.
  • [PROMPT_INJECTION]: The instructions focus entirely on translation and synchronization logic. There are no attempts to override agent behavior, bypass safety filters, or extract system prompts.
  • [COMMAND_EXECUTION]: The skill does not involve the execution of shell commands, system-level calls, or subprocess spawning.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided text for translation and write it to local README files. While this creates an ingestion surface for untrusted data, the risk is negligible as it is restricted to documentation files and lacks automated execution of the content.
  • Ingestion points: Processes content provided by the user in conversation and from existing README files.
  • Boundary markers: Absent; the skill does not explicitly use delimiters to separate user content from instructions during the translation process.
  • Capability inventory: File system write access to README documentation files.
  • Sanitization: Not explicitly defined in the logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 09:26 PM
Security Audit — agent-trust-hub — readme-i18n