openapi
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell command execution to interact with the Elixir/Phoenix project environment.
- Evidence: Uses
grepto locate theApiSpecmodule within thelib/directory. - Evidence: Executes
mix openapi.spec.jsonandmix openapi.spec.yamlto generate documentation files. - Evidence: Uses
git diffto compare generated specifications against existing versions. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the data it processes.
- Ingestion points: Reads application source code (
.exfiles), search results fromgrep, and the output ofmixbuild tasks andgit diffinSKILL.md. - Boundary markers: No delimiters or explicit instructions are provided to the agent to distinguish between its instructions and the content of the files or command outputs being processed.
- Capability inventory: The skill can execute shell commands (
grep,mix,git) and write to the local filesystem via the generated specification files. - Sanitization: No sanitization or validation is performed on the ingested code or command output before it is incorporated into the agent's context.
Audit Metadata