apidog-test-scenario
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the apidog CLI tool to perform scenario modeling and management tasks.
- Evidence: File SKILL.md contains examples of commands such as apidog test-scenario import-steps, apidog test-scenario create, and apidog test-scenario update.
- [PROMPT_INJECTION]: The skill defines a workflow for ingesting and processing external data from API responses, which presents an indirect prompt injection surface.
- Ingestion points: The skill describes extracting data from API responses using JSONPath (e.g., {{$.1.response.body.token}}) as documented in SKILL.md.
- Boundary markers: No explicit boundary markers or instructions to ignore embedded commands within response data are specified.
- Capability inventory: The agent is instructed to use the apidog CLI to orchestrate complex flows, including potentially using extracted data in subsequent requests or logic.
- Sanitization: No sanitization or validation of the ingested external content is described before it is used for variable interpolation or further operations.
Audit Metadata