naming-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external source code and project metadata, which creates a vulnerability surface for indirect prompt injection attacks where malicious instructions could be hidden in the code being reviewed.
- Ingestion points: The skill analyzes variables, constants, functions, classes, interfaces, file/directory names, database schemas, and API endpoints provided in the target codebase.
- Boundary markers: Absent. The instructions do not require the agent to wrap analyzed code in delimiters or use instructions to ignore embedded commands within the code context.
- Capability inventory: The skill provides the ability to generate and potentially execute refactoring scripts to rename items across the codebase, which involves file writing and modification capabilities (SKILL.md).
- Sanitization: None. There is no requirement for the agent to sanitize identifier names or code snippets before they are processed or included in output reports and scripts.
Audit Metadata