name-audition

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local shell script (scripts/check_domains.sh) to interact with system utilities for networking information.
  • Evidence: The script is invoked with scripts/check_domains.sh NAME [NAME ...] -- com ai io to perform lookups.
  • Security Review: The script follows security best practices, including the use of set -u, proper quoting of variables to prevent injection, and controlled processing of command-line arguments.
  • [EXTERNAL_DOWNLOADS]: The skill performs lookups on external platforms to identify existing brands and code projects.
  • Evidence: The skill instructions mandate using firecrawl or web searches to check Product Hunt, Crunchbase, GitHub, and package registries.
  • Security Review: These operations are limited to data retrieval for analysis and do not involve the execution of remote scripts or binary downloads.
  • [SAFE]: No indicators of credential theft, persistence, or prompt injection were identified. The skill's behavior is consistent with its stated purpose of auditing brand names.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 10:20 PM
Security Audit — agent-trust-hub — name-audition