naming-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external source code, which constitutes untrusted data.
- Ingestion points: The skill processes source code files (e.g., UserService.js), directories, and database schemas as described in the instructions and usage examples (SKILL.md).
- Boundary markers: The instructions do not specify delimiters or provide guidance to the agent to ignore potentially malicious instructions embedded within the code files it analyzes.
- Capability inventory: The skill offers analysis and suggests generating 'refactoring scripts' (SKILL.md), which implies the agent may attempt to perform file-writing operations if tools are available.
- Sanitization: There are no instructions provided to sanitize, escape, or validate the content of the analyzed files before it is processed by the agent.
Audit Metadata