api-standards
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external API specifications (Swagger/OpenAPI/GraphQL schemas) as part of its core workflow. This represents a potential indirect prompt injection surface if malicious instructions are embedded within the schemas.
- Ingestion points: SKILL.md (Analyze Schema step) reads external API specs.
- Boundary markers: The skill includes an explicit security guardrail to 'Validate all external API specs (Swagger/OpenAPI files) against strict parsers before digesting them into context'.
- Capability inventory: The skill is designed to generate or update a markdown file (INTEGRATION_SPEC_TEMPLATE.md). It does not exhibit subprocess execution, network exfiltration, or dynamic code evaluation capabilities.
- Sanitization: The instructions mandate schema validation and capping the size of processed files to prevent resource exhaustion.
Audit Metadata