openapi-to-typescript
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external OpenAPI specifications (JSON/YAML) and uses this content to generate TypeScript files, which involves file-write capabilities.
- Ingestion points: Reads OpenAPI 3.0.x files (JSON/YAML) from the workspace as defined in the workflow.
- Boundary markers: The instructions do not specify any delimiters or safety prompts to prevent the agent from following instructions potentially embedded in the OpenAPI
descriptionorsummaryfields. - Capability inventory: The skill utilizes file-reading and file-writing tools to create the output
types/api.tsfile. - Sanitization: There is no explicit logic described to sanitize or escape strings from the OpenAPI spec before they are interpolated into the generated code or processed by the agent.
Audit Metadata