Skip to main content

lokalise-incident-runbook

Facilitates rapid incident response for Lokalise outages, including triage, mitigation, and postmortem procedures.

Install this skill

or
0/100

Security score

The lokalise-incident-runbook skill was audited on May 12, 2026 and we found 36 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 45

Template literal with variable interpolation in command context

SourceSKILL.md
45```bash
medium line 122

Template literal with variable interpolation in command context

SourceSKILL.md
122```bash
medium line 150

Template literal with variable interpolation in command context

SourceSKILL.md
150```bash
medium line 197

Template literal with variable interpolation in command context

SourceSKILL.md
197const response = await fetch(`/api/translations/${locale}`, {
medium line 200

Template literal with variable interpolation in command context

SourceSKILL.md
200if (!response.ok) throw new Error(`HTTP ${response.status}`);
medium line 203

Template literal with variable interpolation in command context

SourceSKILL.md
203console.error(`Translation fetch failed for ${locale}, using fallback:`, error);
medium line 210

Template literal with variable interpolation in command context

SourceSKILL.md
210```bash
medium line 266

Template literal with variable interpolation in command context

SourceSKILL.md
266const primaryPath = path.join(CACHE_DIR, `${locale}.json`);
medium line 267

Template literal with variable interpolation in command context

SourceSKILL.md
267const fallbackPath = path.join(FALLBACK_DIR, `${locale}.json`);
medium line 279

Template literal with variable interpolation in command context

SourceSKILL.md
279console.warn(`Using fallback translations for ${locale}`);
medium line 284

Template literal with variable interpolation in command context

SourceSKILL.md
284console.error(`No translations available for ${locale}, falling back to English`);
medium line 358

Template literal with variable interpolation in command context

SourceSKILL.md
358```bash
medium line 381

Template literal with variable interpolation in command context

SourceSKILL.md
381const res = await fetch(`https://api.lokalise.com/api2/projects/${process.env.LOKALISE_PROJECT_ID}`, {
medium line 71

Curl to non-GitHub URL

SourceSKILL.md
71TOKEN_CHECK=$(curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
medium line 87

Curl to non-GitHub URL

SourceSKILL.md
87RATE_RESPONSE=$(curl -sI "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}/keys?limit=1" \
medium line 125

Curl to non-GitHub URL

SourceSKILL.md
125curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}/keys?filter_keys=${KEY_NAME}" \
medium line 152

Curl to non-GitHub URL

SourceSKILL.md
152LOKALISE_UPDATED=$(curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
medium line 181

Curl to non-GitHub URL

SourceSKILL.md
181curl -sf "https://status.lokalise.com/api/v2/summary.json" 2>/dev/null \
medium line 359

Curl to non-GitHub URL

SourceSKILL.md
359curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
low line 381

Access to .env file

SourceSKILL.md
381const res = await fetch(`https://api.lokalise.com/api2/projects/${process.env.LOKALISE_PROJECT_ID}`, {
low line 382

Access to .env file

SourceSKILL.md
382headers: { 'X-Api-Token': process.env.LOKALISE_API_TOKEN! },
low line 55

External URL reference

SourceSKILL.md
55"https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
low line 64

External URL reference

SourceSKILL.md
645*) echo "API: LOKALISE OUTAGE (${API_STATUS}) — Check https://status.lokalise.com" ;;
low line 71

External URL reference

SourceSKILL.md
71TOKEN_CHECK=$(curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
low line 87

External URL reference

SourceSKILL.md
87RATE_RESPONSE=$(curl -sI "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}/keys?limit=1" \
low line 125

External URL reference

SourceSKILL.md
125curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}/keys?filter_keys=${KEY_NAME}" \
low line 152

External URL reference

SourceSKILL.md
152LOKALISE_UPDATED=$(curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
low line 180

External URL reference

SourceSKILL.md
180echo "Check: https://status.lokalise.com"
low line 181

External URL reference

SourceSKILL.md
181curl -sf "https://status.lokalise.com/api/v2/summary.json" 2>/dev/null \
low line 217

External URL reference

SourceSKILL.md
217"https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
low line 359

External URL reference

SourceSKILL.md
359curl -sf "https://api.lokalise.com/api2/projects/${LOKALISE_PROJECT_ID}" \
low line 381

External URL reference

SourceSKILL.md
381const res = await fetch(`https://api.lokalise.com/api2/projects/${process.env.LOKALISE_PROJECT_ID}`, {
low line 407

External URL reference

SourceSKILL.md
407- [Lokalise Status Page](https://status.lokalise.com) — First thing to check during an outage
low line 408

External URL reference

SourceSKILL.md
408- [Lokalise API Rate Limits](https://developers.lokalise.com/reference/api-rate-limits)
low line 409

External URL reference

SourceSKILL.md
409- [Lokalise API Error Codes](https://developers.lokalise.com/reference/errors)
low line 411

External URL reference

SourceSKILL.md
411- [Lokalise Community Forum](https://community.lokalise.com)
Scanned on May 12, 2026
View Security Dashboard