multi-lang-readme
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from existing README files to perform translations, creating a surface for indirect prompt injection.
- Ingestion points: The agent reads the full markdown content from the project's root
README.md(Step 2). - Boundary markers: The instructions do not define specific delimiters or warnings to disregard instructions that may be embedded within the source markdown text.
- Capability inventory: The skill is designed to perform file-read and file-write operations on the local file system to manage documentation.
- Sanitization: No sanitization or validation of the input markdown content is specified before processing by the agent.
- [NO_CODE]: The skill consists exclusively of markdown instructions for the agent and does not ship with any executable scripts, binaries, or external code dependencies.
Audit Metadata