apideck-codegen
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches OpenAPI specifications from Apideck's official domain (
specs.apideck.com) and references the vendor's GitHub repository for source files. These are trusted vendor resources. - [COMMAND_EXECUTION]: The skill provides instructions for installing and running various CLI tools via
npm,brew,docker, andnpx. This includes industry-standard tools likeopenapi-generator-cliandspeakeasy, as well as vendor-specific utilities like@apideck/portmanand@apideck/oas-format-filter. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it processes external OpenAPI specifications for code generation. However, the data sources are restricted to the vendor's own verified infrastructure.
- Ingestion points: OpenAPI specification URLs (e.g.,
https://specs.apideck.com/crm.yml) provided to code generation commands inSKILL.md. - Boundary markers: None identified in the provided instructions.
- Capability inventory: The skill utilizes command execution for package installation, code generation, and documentation rendering across multiple platforms.
- Sanitization: No explicit sanitization of the downloaded specifications is described beyond the validation performed by the standard generation tools.
Audit Metadata