qa-httpx-writer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a secure framework for generating API tests using
httpxandpytest. It explicitly directs the agent to avoid hardcoding sensitive information, recommending the use of environment variables and pytest fixtures for managing authentication tokens and passwords. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external, potentially untrusted data from OpenAPI contracts and test case specifications (Ingestion Point) to generate Python test scripts. While the instructions do not define specific boundary markers or explicit sanitization logic for input interpolation (Boundary/Sanitization), the skill mitigates this risk by requiring the generation of code that performs strict response schema validation using Pydantic and JSON Schema (Capability Inventory). The injection surface is inherent to the skill's primary purpose of code generation and is managed by following best practices for test isolation and data structure validation.
Audit Metadata