translate

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: References implementation guidelines and translation patterns from the vendor's official GitHub repository at github.com/vechain/vechain-ai-skills.\n- [COMMAND_EXECUTION]: Includes a Node.js shell command to automate the sorting of keys within the local translation JSON files located in the project's i18n directory.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting and processing content from translation files and application source code. 1. Ingestion points: apps/frontend/src/i18n/languages/*.json and code usage of translation keys. 2. Boundary markers: Not present. 3. Capability inventory: File-system read/write and shell script execution. 4. Sanitization: No specific filtering or escaping is defined for the content within translation keys.\n- [DYNAMIC_EXECUTION]: Utilizes a Node.js one-liner to parse, sort, and rewrite JSON objects at runtime during translation maintenance tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 04:19 PM
Security Audit — agent-trust-hub — translate