api-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: All documentation files contain standard educational material on API patterns, security testing, and design principles. No obfuscated code, hidden instructions, or malicious intent were detected across the skill files.
- [COMMAND_EXECUTION]: The skill provides a Python-based diagnostic tool (
scripts/api_validator.py) intended to validate API endpoints in a project directory. The script performs local file analysis and regex checks to identify best practice violations. - [PROMPT_INJECTION]: The validation script (
scripts/api_validator.py) reads untrusted data from the local filesystem during its analysis phase. While this technically creates a surface for indirect prompt injection if project files contain malicious instructions, the risk is negligible as the script operates locally and has no network exfiltration capabilities.
Audit Metadata