building-apis
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official celigo CLI commands for account and resource management, which is standard and expected functionality for this vendor's environment.
- [SAFE]: Analysis of the API building pipeline identifies a potential indirect prompt injection surface, but it is mitigated by platform design and guidance: 1. Ingestion points: API request components defined in api-request.yml. 2. Boundary markers: Implementation of bodySchema for structured validation. 3. Capability inventory: Controlled use of exports, imports, and JavaScript hooks for data processing. 4. Sanitization: Request body validation using JSON Schema.
- [SAFE]: Configuration schemas for integrations, such as ShipWorks, correctly define sensitive fields with instructions for masking in responses, preventing credential exposure.
Audit Metadata