dotnet-localization
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several community-maintained .NET packages for localization tasks, including 'Senlin.Mo.Localization' (JSON resources), 'ResXGenerator' (Source Generation), and 'SmartFormat' (Pluralization). These are presented as standard technical recommendations.
- [DYNAMIC_EXECUTION]: The instructions for RTL support in Blazor cover JavaScript interop via 'JSRuntime.InvokeVoidAsync'. The text explicitly includes a security warning against using 'eval' to prevent 'unsafe-eval' Content Security Policy (CSP) violations.
- [INDIRECT_PROMPT_INJECTION]: The skill discusses 'IHtmlLocalizer', noting that it HTML-encodes format arguments while preserving HTML in the resource string. This demonstrates awareness of sanitization requirements when rendering strings that may contain user-supplied or externally-sourced data.
Audit Metadata