standardize-naming-conventions
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line utilities such as 'ls' to locate model files and 'rg' (ripgrep) to search for naming patterns and internal references across the TMDL definition directory. These operations are scoped to the local project environment.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted data by reading semantic model definition files. 1. Ingestion points: TMDL files are scanned in Phase 1 and modified in Phase 4. 2. Boundary markers: There are no explicit markers wrapping the ingested file content. 3. Capability inventory: The agent can list directory contents, perform string searches, and write updates to local files. 4. Sanitization: The skill does not explicitly sanitize file contents, but the risk of indirect injection is addressed by Phase 3, which mandates a human-in-the-loop audit report that the user must confirm before any changes are executed.
Audit Metadata