react-i18n
Audited by Socket on Feb 28, 2026
1 alert found:
SecurityThis SKILL.md is primarily documentation and templates for integrating react-i18next into React 19 projects. It does not contain direct download-execute commands, credential requests, or explicit network exfiltration endpoints. The main security concerns arise from its mandatory agent orchestration and transitive dependency on another skill (`solid-react`). Requiring automated creation and running of named agents (TeamCreate) and relying on external skill rules create a transitive trust and autonomy risk: if an agent actually executes the workflow it may load additional code/skills or perform file operations beyond what is visible in this file. Overall the content appears benign for human consumption as documentation, but if consumed by an autonomous agent with permission to spawn agents or install skills, it creates a medium supply-chain/autonomy risk. Review and vet any referenced skills, agents, and templates before allowing automated execution; require explicit human approval for spawning agents and installing or running external skills.