name-session — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited name-session (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
/renameBuild a <scope>-<descriptive> name from the current context and emit it as a ready-to-paste /rename line.
/rename is a built-in CLI command; only the user typing it triggers a rename. Slash commands emitted in model output are inert text, and there is no hook or settings mechanism for mid-session rename. So the deliverable is a single paste-ready line — you press enter.<scope>-<descriptive>AB-1505) — keep its natural Jira case.bd-123) if no ticket.pr-6563) if neither.rebase-pr-status beats git-stuff. Derive it from the conversation, not the branch (the branch already gives the scope).Examples: AB-1505-rebase-pr-status, bd-412-flaky-test-hunt, pr-6563-review-comments, auth0-logout-investigation.
git rev-parse --abbrev-ref HEAD
bd list --status=in_progress 2>/dev/null/[A-Z]+-\d+/.gh pr view --json number,title to grab the number. Don't fetch a PR speculatively — only if the session is clearly about one.Fail soft: any missing signal just drops to the next priority. Not in a git repo → skip straight to a descriptive-only name.
From the current conversation, pick the ≤4-word kebab phrase that best names what this session is for. Prefer the concrete task over the topic — rebase-pr-status over maintenance. If the session genuinely spans several unrelated things, name the dominant one; don't try to cram them all in.
Render exactly:
**Proposed session name** — scope from {where the scope came from}, descriptive from this session:
/rename {scope}-{descriptive}
Paste it (the rename only fires when you run it).Keep the derivation note to one short clause. If you had to fall back (no ticket, no bead), say which fallback you used so the user can override.
/wrap-up and /handoffs, which emit the same kind of /rename line for end-of-session and resume respectively. This skill is the mid-session, on-demand version.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.