translate
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: References implementation guidelines and translation patterns from the vendor's official GitHub repository at github.com/vechain/vechain-ai-skills.\n- [COMMAND_EXECUTION]: Includes a Node.js shell command to automate the sorting of keys within the local translation JSON files located in the project's i18n directory.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting and processing content from translation files and application source code. 1. Ingestion points:
apps/frontend/src/i18n/languages/*.jsonand code usage of translation keys. 2. Boundary markers: Not present. 3. Capability inventory: File-system read/write and shell script execution. 4. Sanitization: No specific filtering or escaping is defined for the content within translation keys.\n- [DYNAMIC_EXECUTION]: Utilizes a Node.js one-liner to parse, sort, and rewrite JSON objects at runtime during translation maintenance tasks.
Audit Metadata