find-clear-names
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to perform local analysis of the project.
- Uses
git ls-filesandgrepto identify file types and language distribution. - Uses recursive
grepon thesrc/directory to extract function, variable, and class declarations. - Scans
openapi.yamlandopenapi.jsonfor API field names. - Executes
git logto analyze naming patterns within the commit history. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the analysis of untrusted project data.
- Ingestion points: Reads source code from the
src/directory, API definitions, and git commit history. - Boundary markers: None identified; the agent is instructed to scan the output of the grep/git commands directly.
- Capability inventory: Uses shell commands (
grep,git) to read and pipe data for analysis. - Sanitization: The skill does not explicitly sanitize or validate the content of the files or logs before the agent evaluates them against the naming rules.
Audit Metadata