api-specs-openapi
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the use of established development tools such as
openapi-typescript,openapi-fetch,redocly, and@hey-api/openapi-ts. These tools are typically executed vianpxas part of a standard developer workflow for API contract management and code generation. - [DYNAMIC_EXECUTION]: Provides a pattern for programmatic type generation in
examples/codegen.mdusing the TypeScript compiler API andopenapi-typescript. This allows for customized transformations of schema types (e.g., converting strings to Date objects) during the build process, which is a legitimate and common use case for these libraries. - [INDIRECT_PROMPT_INJECTION]: As a tool for processing API specifications, the skill inherently deals with external data (OpenAPI YAML/JSON files). To mitigate risks associated with untrusted inputs, it includes dedicated patterns for structural validation and linting using the Redocly CLI in
examples/validation.md, encouraging the validation of contracts before they are used for code generation or documentation.
Audit Metadata