i18n-localization
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION] (LOW): The skill is designed to analyze external project files, which serves as an ingestion point for untrusted data. This creates a surface for indirect prompt injection. \n
- Ingestion points: The
i18n_checker.pyscript and theGreptool are used to scan source code within a user-specified<project_path>. \n - Boundary markers: None specified; there are no instructions to the agent to disregard embedded commands in the scanned data. \n
- Capability inventory: Limited to
Read,Glob, andGrep, which are read-only operations with no direct execution or write capabilities. \n - Sanitization: No sanitization of the processed file content is mentioned.\n- [EXTERNAL_DOWNLOADS] (LOW): The documentation mentions standard third-party libraries
react-i18nextandnext-intl. These are trusted libraries and do not pose a direct security threat in this context.
Audit Metadata