nextjs-i18n
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill references standard, well-maintained libraries from the npm registry, including
next-intl,use-intl,@formatjs/intl-localematcher, andnegotiator. These are industry-standard dependencies for i18n tasks. - [COMMAND_EXECUTION] (SAFE): Provides utility script snippets for development workflows such as message extraction (
next-intl extract) and translation validation. These scripts interact with local project files (JSON/TSX) using standard Node.js APIs (fs, glob) and do not perform unauthorized or hidden operations. - [DATA_EXFILTRATION] (SAFE): No patterns for unauthorized data access or exfiltration were found. The mention of environment variables like
CROWDIN_TOKENis a standard placeholder for legitimate third-party translation service integration. - [DYNAMIC_EXECUTION] (SAFE): The dynamic import of translation files (
import('../../messages/${locale}.json')) is a standard pattern for on-demand locale loading. The provided snippets include validation logic to ensure thelocalevariable matches a predefined list of supported languages, mitigating potential path traversal concerns.
Audit Metadata