naming
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled local shell script,
scripts/check-availability.sh, to facilitate batch availability checks for brand names. The script is safely constructed with quoted variables and performs standard availability lookups. - [EXTERNAL_DOWNLOADS]: The skill instructions and the availability script perform network requests to well-known services including GitHub, PyPI, and npm. These operations are essential for the skill's primary function of verifying that proposed names are not already taken on major development and commercial platforms.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources via web searches and HTTP responses from various registries. While this presents an ingestion point for untrusted data, the risk is mitigated by specific instructions directing the agent to look for narrow status markers (such as 404 codes or 'not found' strings) rather than interpreting the full response content as new commands.
Audit Metadata