language-config — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited language-config (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Configure and manage multilingual settings for the active brand. This command controls the language infrastructure that powers all translation, localization, and multilingual audit commands in the plugin. It sets the primary content language (the source language for all translations), secondary and target languages (which markets and languages the brand operates in), do-not-translate terms (brand names, product names, trademarked phrases, and technical terms that must appear identically in every language), preferred translation service per language (routing to the optimal MCP for each language pair), and locale-specific formatting rules (date, number, currency, measurement formats per market).
This configuration persists in the brand profile and is referenced by every multilingual command — translate, transcreate, multilingual-score, language-audit, hreflang-check, and any content creation targeting non-primary languages. Getting this configuration right upfront prevents repeated corrections downstream and ensures consistent multilingual output across all workflows.
The user must provide (or will be prompted for):
view (display all current language settings), set-primary (change the primary/source language), add-language (add a secondary/target language), remove-language (remove a secondary language), add-dnt (add a do-not-translate term), remove-dnt (remove a do-not-translate term), set-translation-pref (set preferred translation service for a language), set-locale-format (set locale-specific formatting for a language-region), or reset (restore language config to defaults)en, en-US, de-DE, hi-IN, ja-JP, pt-BR). Required for set-primary, add-language, remove-language, set-translation-pref, and set-locale-format actionsdeepl (best for European languages), sarvam-ai (best for Indic languages), google-cloud-translation (broadest language coverage), or lara-translate (best for marketing/creative context preservation). Required for set-translation-pref actiondate_format (e.g., DD/MM/YYYY, MM/DD/YYYY, YYYY-MM-DD), number_format (decimal and thousands separators, e.g., "1,234.56" or "1.234,56"), currency_format (symbol position and spacing, e.g., "$1,234" or "1.234 EUR"), measurement (metric or imperial). Any subset can be provided; omitted fields retain current values~/.claude-marketing/brands/_active-brand.json for the active slug, then load ~/.claude-marketing/brands/{slug}/profile.json. Apply brand voice, compliance rules for target markets (skills/context-engine/compliance-rules.md), and industry context. Also check for guidelines at ~/.claude-marketing/brands/{slug}/guidelines/_manifest.json — if present, load restrictions. Check for agency SOPs at ~/.claude-marketing/sops/. If no brand exists, ask: "Set up a brand first (/digital-marketing-pro:brand-setup)?" — or proceed with defaults.language object from profile.json containing primary_language, secondary_languages, content_languages, do_not_translate, translation_preferences, and locale_formatting. If the language object does not exist yet (new brand or pre-multilingual setup), initialize it with sensible defaults: primary_language set to "en", empty arrays for secondary_languages and do_not_translate, and empty objects for translation_preferences and locale_formatting.language-router.py --action supported-languages. Update profile.json field language.primary_language to the new value. If the old primary language is not already in secondary_languages and the user has content in it, suggest adding it as a secondary language to maintain existing translations.language.secondary_languages and language.content_languages arrays (avoiding duplicates). Recommend a translation service for the new language based on language-router.py routing logic (DeepL for European, Sarvam AI for Indic, Google Cloud for others) and prompt the user to confirm or override. Provide default locale formatting for the language-region. For remove: remove from both arrays, warn if content exists in this language (it will no longer be targeted by multilingual commands), and ask for confirmation before removing.language.do_not_translate array, avoiding duplicates, and confirm each term added. For remove: remove matching terms (case-sensitive match), warn if a term is not found in the list. Display the updated do-not-translate list after changes. For batch operations (comma-separated input), process all terms and report results for each.deepl, sarvam-ai, google-cloud-translation, lara-translate. Validate that the language code is in the brand's configured languages (primary or secondary). Set language.translation_preferences[language_code] to the specified service name. Note: this overrides the automatic routing in language-router.py for this specific language — the user's explicit preference takes priority over default routing logic.language.locale_formatting[language_region] for the provided preferences (date_format, number_format, currency_format, measurement). If not all fields are provided, retain existing values for omitted fields. Provide format previews showing how dates, numbers, currency, and measurements will render with the configured format (e.g., "Date preview: 13/02/2026", "Currency preview: EUR 1.234,56").A structured language configuration result containing:
language-router.py --action supported-languages showing which languages are available and which translation service handles each, so the user can make informed decisions about adding languages~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.