lokalise-deploy-integration
Facilitates deployment of Lokalise translations to Vercel, Netlify, and Cloud Run, ensuring seamless integration and environment setup.
Install this skill
Security score
The lokalise-deploy-integration skill was audited on May 12, 2026 and we found 19 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Direct command execution function call
| 250 | execSync("./scripts/download-translations.sh ./src/locales", { |
Template literal with variable interpolation in command context
| 44 | ```bash |
Template literal with variable interpolation in command context
| 98 | ```yaml |
Template literal with variable interpolation in command context
| 162 | ```bash |
Template literal with variable interpolation in command context
| 199 | `https://api.lokalise.com/api2/projects/${process.env.LOKALISE_PROJECT_ID}/translations`, |
Template literal with variable interpolation in command context
| 344 | ```bash |
Template literal with variable interpolation in command context
| 381 | ```yaml |
Node child_process module reference
| 247 | const { execSync } = require("child_process"); |
Webhook reference - potential data exfiltration
| 105 | # Trigger from Lokalise webhook (via repository_dispatch) |
Webhook reference - potential data exfiltration
| 160 | To trigger builds when translations change, set up a Lokalise webhook that fires a GitHub `repository_dispatch`: |
Webhook reference - potential data exfiltration
| 163 | # In your webhook handler (see lokalise-webhooks-events) |
Webhook reference - potential data exfiltration
| 374 | | Stale translations in production | Cache not invalidated | Use `repository_dispatch` webhook to trigger rebuild | |
Access to .env file
| 199 | `https://api.lokalise.com/api2/projects/${process.env.LOKALISE_PROJECT_ID}/translations`, |
Access to .env file
| 201 | headers: { "X-Api-Token": process.env.LOKALISE_API_TOKEN! }, |
Access to .env file
| 252 | env: process.env, |
External URL reference
| 56 | "https://api.lokalise.com/api2/projects/${PROJECT_ID}/files/download" \ |
External URL reference
| 165 | "https://api.github.com/repos/OWNER/REPO/dispatches" \ |
External URL reference
| 199 | `https://api.lokalise.com/api2/projects/${process.env.LOKALISE_PROJECT_ID}/translations`, |
External URL reference
| 442 | - [Lokalise Files API — Download](https://developers.lokalise.com/reference/download-files) |