intlayer-content

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of documentation, reference material, and code examples for the Intlayer internationalization framework. It does not contain any executable scripts, obfuscated code, or malicious instructions.
  • [COMMAND_EXECUTION]: The reference files include standard installation and configuration commands, such as npm install intlayer, which are necessary for setting up the framework.
  • [EXTERNAL_DOWNLOADS]: The documentation describes how to use the fetch API within Intlayer content functions to retrieve data from external sources during the application build process. These are presented as developer-controlled features for content management.
  • [DATA_EXFILTRATION]: The skill documents the file() function, which allows developers to reference and embed local file content into their translation dictionaries. This is a standard feature for managing external content assets and does not represent an exfiltration risk in the context of these instructions.
  • [PROMPT_INJECTION]: The framework's templating system (insert() function using {{variable}} syntax) is documented for dynamic content replacement. While this is a potential surface for indirect prompt injection if user-provided data is handled, the framework also includes security-focused options like the tagfilter for Markdown rendering to mitigate risks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 09:51 AM