rest-api-generator
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates standard C# and TypeScript development workflows for API generation and scaffolding.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied OpenAPI specifications (YAML/JSON) to generate code. While processing external data is an ingestion surface, the tool implements robust mitigation via 60+ analyzer rules (ATC_API_* prefix) and multiple validation levels (None, Standard, Strict) to verify the integrity and safety of the input specification.
- [DYNAMIC_EXECUTION]: Employs Roslyn Source Generators to produce code during the build process and a CLI tool for project scaffolding. These mechanisms are central to the tool's intended purpose and are restricted to the local development environment.
- [COMMAND_EXECUTION]: The instructions involve standard development commands such as 'dotnet build' and 'dotnet tool install'. All referenced packages and tools belong to the official 'atc-net' vendor ecosystem.
Audit Metadata