openapi
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
mix openapi.spec.jsonandmix openapi.spec.yamlto regenerate API documentation. These are standard commands provided by the establishedopen_api_spexElixir library.\n- [COMMAND_EXECUTION]: Usesgrepto search the locallib/directory for theApiSpecconfiguration module. This is a local, read-only operation used for configuration discovery.\n- [COMMAND_EXECUTION]: Invokesgit diffto allow the user to verify changes in the generated specification files, which is a standard development practice.\n- [PROMPT_INJECTION]: The skill interacts with untrusted project data, creating a potential surface for indirect prompt injection.\n - Ingestion points: Searches all
.exfiles in thelib/directory and reads the contents ofopenapi.jsonandopenapi.yaml.\n - Boundary markers: The skill does not define explicit delimiters to wrap the ingested project content or instruct the agent to ignore embedded directives.\n
- Capability inventory: The skill has access to shell commands (
mix,grep,git) across its workflows.\n - Sanitization: No specific escaping or validation is performed on the data extracted from the project files before it is processed by the agent.\n- [SAFE]: No external network operations, hardcoded credentials, or obfuscation techniques were identified. The skill's operations are confined to standard development tools and the local project directory.
Audit Metadata