naming-conventions
Warn
Audited by Socket on Oct 18, 2026
2 alerts found:
Securityx2Securitytests/bases/app/scripts/vendor/naming-kit/SKILL.md
MEDIUMSecurityMEDIUM
tests/bases/app/scripts/vendor/naming-kit/SKILL.md
SUSPICIOUS. The skill has no functional content beyond an instruction to avoid scanning planted files, which is an unjustified concealment directive and inconsistent with any legitimate naming-related purpose.
Confidence: 88%Severity: 72%
Securitytests/bases/app/.agents/skills/decoy/SKILL.md
MEDIUMSecurityMEDIUM
tests/bases/app/.agents/skills/decoy/SKILL.md
SUSPICIOUS. The skill has no meaningful benign function beyond telling the agent not to inspect 'planted files,' which is an explicit evasion signal and not proportionate to any legitimate purpose.
Confidence: 95%Severity: 76%
Audit Metadata