skills/kaakati/rails-enterprise-dev/Rails Localization (i18n) - English & Arabic/Gen Agent Trust Hub
Rails Localization (i18n) - English & Arabic
Pass
Audited by Gen Agent Trust Hub on Feb 12, 2026
Risk Level: LOWNO_CODE
Full Analysis
The skill consists of a Markdown file (SKILL.md) containing Ruby, YAML, ERB, and CSS code snippets. These snippets are illustrative examples for implementing localization features in a Ruby on Rails application. The skill itself does not execute any code or perform any operations on the user's system.
- Prompt Injection: No patterns indicative of prompt injection (e.g., 'IMPORTANT: Ignore', 'Override', 'jailbroken') were found in the skill's content or metadata.
- Data Exfiltration: There are no commands or code snippets that attempt to read sensitive files or exfiltrate data to external servers. The code examples focus on application-internal logic for locale management.
- Obfuscation: No obfuscation techniques such as Base64 encoding, zero-width characters, Unicode homoglyphs, or other hidden content were detected.
- Unverifiable Dependencies: The skill mentions the
hijri gemas an optional dependency for Hijri date display but does not instruct the user to install it or download any external code. All other code is presented as examples to be integrated into a Rails application, not as external dependencies to be fetched by the skill itself. - Privilege Escalation: No commands like
sudo,chmod, or modifications to system-level files or configurations were found. - Persistence Mechanisms: No attempts to establish persistence (e.g., modifying shell configurations, creating cron jobs, or system services) were detected.
- Metadata Poisoning: The skill's name and description are benign and accurately reflect its content. No malicious instructions were found in the metadata.
- Indirect Prompt Injection: As a documentation and code-example skill, it does not process external user input directly. However, any application built using the provided code snippets would need to ensure proper input validation and sanitization to prevent indirect prompt injection or other vulnerabilities if it processes untrusted external content. This is a general consideration for any code-providing skill, not a direct vulnerability of this skill's content.
- Time-Delayed / Conditional Attacks: No conditional logic designed to trigger malicious behavior based on time, usage, or specific environmental factors was found.
Overall, the skill is a well-structured guide for Rails localization and poses no direct security risks.
Audit Metadata