lokalise-incident-runbook
Facilitates rapid incident response for Lokalise outages, including triage, mitigation, and postmortem procedures.
Install this skill
Security score
The lokalise-incident-runbook skill was audited on Mar 3, 2026 and we found 24 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 78 | ```bash |
Curl to non-GitHub URL
| 39 | curl -s https://api.lokalise.com/api2/system/health | jq |
Curl to non-GitHub URL
| 42 | curl -s https://status.lokalise.com/api/v2/status.json | jq '.status.description' |
Curl to non-GitHub URL
| 50 | curl -s https://your-app.com/health/lokalise | jq |
Curl to non-GitHub URL
| 111 | curl -s https://status.lokalise.com/api/v2/status.json | jq |
Curl to non-GitHub URL
| 120 | watch -n 60 'curl -s https://status.lokalise.com/api/v2/status.json | jq ".status.description"' |
Curl to non-GitHub URL
| 173 | curl "http://prometheus:9090/api/v1/query_range?query=lokalise_errors_total&start=-2h" > metrics.json |
Curl to non-GitHub URL
| 261 | curl -sf https://your-app.com/health/lokalise | jq '.status' || echo "UNHEALTHY" |
Webhook reference - potential data exfiltration
| 32 | | P3 | Minor impact | < 4 hours | Webhook delays, non-critical translations missing | |
Access to .env file
| 267 | process.env.LOKALISE_FALLBACK_ENABLED = "true"; |
Access to .env file
| 270 | const useFallback = process.env.LOKALISE_FALLBACK_ENABLED === "true"; |
External URL reference
| 39 | curl -s https://api.lokalise.com/api2/system/health | jq |
External URL reference
| 42 | curl -s https://status.lokalise.com/api/v2/status.json | jq '.status.description' |
External URL reference
| 47 | "https://api.lokalise.com/api2/projects?limit=1" |
External URL reference
| 50 | curl -s https://your-app.com/health/lokalise | jq |
External URL reference
| 60 | ├─ YES: Is https://status.lokalise.com showing incident? |
External URL reference
| 84 | "https://api.lokalise.com/api2/projects?limit=1" | jq '.projects[0].name // .error' |
External URL reference
| 96 | "https://api.lokalise.com/api2/projects" | grep -i "x-ratelimit" |
External URL reference
| 111 | curl -s https://status.lokalise.com/api/v2/status.json | jq |
External URL reference
| 120 | watch -n 60 'curl -s https://status.lokalise.com/api/v2/status.json | jq ".status.description"' |
External URL reference
| 173 | curl "http://prometheus:9090/api/v1/query_range?query=lokalise_errors_total&start=-2h" > metrics.json |
External URL reference
| 261 | curl -sf https://your-app.com/health/lokalise | jq '.status' || echo "UNHEALTHY" |
External URL reference
| 277 | - [Lokalise Status Page](https://status.lokalise.com) |
External URL reference
| 279 | - [Community Forum](https://community.lokalise.com) |