web-i18n-next-intl
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides idiomatic and secure guidance for using the
next-intllibrary. It includes explicit security advice, such as validating user-supplied locale strings usinghasLocalebefore using them in dynamic imports (e.g.,import("../../messages/${locale}.json")) to prevent potential path traversal vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The skill identifies the risk of XSS when handling translations with markup. In
examples/markup.md, it advocates for sanitizing content before interpolation into HTML strings and recommends using the safert.rich()hook for React components to minimize the attack surface. - [EXTERNAL_DOWNLOADS]: The
metadata.yamlfile references a configuration schema from the author's official GitHub repository. This is a standard metadata reference for the platform context. - [OBFUSCATION]: A thorough check for Base64, zero-width characters, homoglyphs, and other encoding techniques revealed no hidden or malicious content within the skill files.
Audit Metadata