naming-is-hard
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security boundary by routing all network activity through a Node.js engine featuring a strict allowlist of trusted hosts, such as GitHub and official package registries like npm and PyPI.
- [SAFE]: Network requests include SSRF and DNS rebinding protections, ensuring that redirects from IANA-bootstrapped services like RDAP are safely followed only to verified public hostnames.
- [SAFE]: Input sanitization is enforced via a
slugifyfunction inscripts/net.mjs, which prevents potential path injection or URL manipulation by restricting candidate names to safe characters before they are used in network or file operations. - [SAFE]: The skill manages state within a session-specific workspace (
~/.copilot/session-state/) and avoids hardcoding credentials. It provides a secure mechanism for users to provide an optional GitHub token via environment variables for rate-limiting purposes. - [SAFE]: Detailed instructional boundaries are set for the agent, requiring it to use the validated engine scripts for deterministic and sensitive tasks rather than attempting to perform them autonomously.
Audit Metadata