paraglide-translation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited paraglide-translation (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the paraglide MCP server to inspect and translate messages.
project_info to determine the source locale, targets and missing counts.start_translation_job with a stable caller-generated jobId, selected targetLocales, optional prefix and translationStyle. Omitted targets mean all non-source locales. Use mode: all to refresh existing copy. OpenAI performs paid asynchronous translation; no translating subagents are needed.get_translation_job periodically to reconcile and collect. After a disconnect/restart, find jobs with list_translation_jobs. Completion requires no lastError, acceptable failed counts and cleanedUp: true; remote status alone is insufficient.save_translations or submit new scoped work. Preserve flat keys, placeholders and variants. Do not overwrite concurrent user edits or bypass validation by hand-editing locale files.Use cancel_translation_job to stop outstanding work, then keep collecting until terminal and cleaned up; cancellation can take ten minutes and successful partial results are retained. An uncertain create response stays pending for reconciliation: never submit a replacement paid batch merely because a tool call failed.
For unattended collection, the user can schedule paraglide-messages-mcp --project <path> --resume; it makes one reconciliation pass and exits. Do not create a schedule unless the user requests one.
If the server is unavailable, explain that this skill requires the paraglide MCP connection. The server defaults to gpt-6-luna with low reasoning; the API key and optional model override belong in server configuration.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.