Security audit
Security checks for vulnerabilities and agentic risk
This skill is a naming assistant with small helper scripts; its behavior is coherent and low risk, with only minor disclosure notes around remembered preferences and broad activation scope.
Before installing, be aware that the skill may remember your naming preferences for later sessions. Avoid giving API keys unless you explicitly choose API-based availability checking; the default manual mode only produces search links.
The skill instructs the agent to remember user preferences for future sessions without requiring explicit user consent or a privacy notice. That can lead to unauthorized persistence of user data and surprise retention of behavioral preferences across sessions, which is especially risky in shared, multi-tenant, or compliance-sensitive environments.
In a markdown skill file, trigger scope should be specific enough to avoid accidental activation. The description and opening text broadly say the skill generates names for skills, domains, primitives, and general agent power, but do not define concrete trigger phrases, activation conditions, or exclusions, making the invocation boundary ambiguous.
No suspicious patterns detected.
