api-documenter

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is configured to ingest and process untrusted external data including OpenAPI/AsyncAPI specifications, code comments, and annotations (SKILL.md). * Ingestion points: The skill identifies API scope and scope specifications, and uses automated updates from code comments (SKILL.md). * Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions embedded within the documentation source files. * Capability inventory: The skill possesses high-impact capabilities including automated testing of documentation examples, multi-language SDK generation, and CI/CD pipeline integration for automated releases (SKILL.md). * Sanitization: The instructions do not define any validation or sanitization steps for the external specifications or code snippets before they are processed or tested.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 08:43 AM