api-security-assessment
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions.
- Ingestion points: The skill ingests data from external sources including API responses, schemas (REST, GraphQL, RPC), and crawler outputs from tools like
/katanaand/burp(SKILL.md). - Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore embedded instructions when processing external API data.
- Capability inventory: The skill utilizes powerful tools for network requests (
/burp), web crawling (/katana), and vulnerability scanning (/nuclei) (SKILL.md). - Sanitization: The instructions do not specify sanitization or escaping protocols for data retrieved from assessed services before it is interpreted by the agent.
Audit Metadata