locale: rm llm_proofreader directory during build
What changed, and why it matters
This commit removes a helper directory called llm_proofreader from Electrum's build script so that proofreading scripts are not accidentally packaged into released binaries. It is a cleanup/hygiene change rather than a fix for an active security flaw. The scripts being excluded are not described as malicious, but shipping unnecessary development tools in production builds can slightly enlarge the attack surface.
No immediate action required. Treat as build hygiene. If the llm_proofreader scripts are sensitive or network-capable, review their contents and confirm they are excluded from all release artifacts and source distributions.
Security signals we found
Removal of non-shipping development scripts from release build
Potential reduction in attack surface from bundled helper utilities
Evidence from the diff
The patch adds rm -rf llm_proofreader in contrib/locale/build_cleanlocale.sh before the locale build runs. The llm_proofreader directory appears to contain LLM-based proofreading utilities used during translation work. The change ensures these files are stripped from the locale directory before binaries are produced. There is no diff evidence that the scripts are exploitable, only that they were previously retained in the build tree.
Changed components
contrib/locale/build_cleanlocale.shelectrum/locale/llm_proofreaderInspect captured patch +1 / −0
diff --git a/contrib/locale/build_cleanlocale.sh b/contrib/locale/build_cleanlocale.sh
index 239df16..3d87e88 100755
--- a/contrib/locale/build_cleanlocale.sh
+++ b/contrib/locale/build_cleanlocale.sh
@@ -13,4 +13,5 @@ LOCALE="$PROJECT_ROOT/electrum/locale/"
cd "$LOCALE"
git clean -ffxd
git reset --hard
+rm -rf llm_proofreader
"$CONTRIB_LOCALE/build_locale.sh" "$LOCALE/locale" "$LOCALE/locale"
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.