api-design-framework
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of informational markdown files and YAML templates (OpenAPI/AsyncAPI). It does not include any scripts, executable code, or platform-specific command injections.
- [OBFUSCATION]: Several Base64-encoded strings are used within the documentation to illustrate API authentication and pagination patterns. These strings (e.g., in
SKILL.md) decode to standard example data such as JWT headers ({"alg":"HS256","typ":"JWT"}), Basic auth credentials (username:password), and simple JSON objects for cursors ({"id":123}). All are benign placeholders for educational purposes. - [CREDENTIALS_UNSAFE]: The documentation includes example API keys (e.g.,
sk_live_abc123...) and bearer tokens. These are generic placeholders used to demonstrate header formats and do not represent active or sensitive credentials.
Audit Metadata