naming-convention-enforcer
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides clear instructions for design file hygiene within a Figma environment.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes potentially untrusted data from design files (layer names and text content). It mitigates risk by requiring user confirmation for mass renaming and providing a preview of changes.
- Ingestion points: Figma layer names, text content, and component properties (SKILL.md).
- Boundary markers: Absent from the prompt instructions, but the workflow enforces a human-in-the-loop confirmation step.
- Capability inventory: Modifying Figma element names; no network, filesystem, or shell execution capabilities identified.
- Sanitization: No explicit content filtering or escaping is specified for the processed layer data.
Audit Metadata