oapi-expert
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides comprehensive instructions for executing the oapi CLI tool to perform network operations, explore API endpoints, and manage configuration files in
~/.oapi/. These operations are fundamental to the tool's purpose of managing REST APIs. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the
@desplega.ai/oapipackage from the public NPM registry and to register API specifications from remote URLs viaoapi register --remote <url>. The NPM package is a vendor-owned resource, and the remote specs are user-defined. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external OpenAPI specifications which could contain malicious instructions designed to influence the agent's behavior during command generation or documentation exploration.
- Ingestion points:
oapi register --remote <url>andoapi register --local <file>instructions inSKILL.md. - Boundary markers: None explicitly defined in the instructions for handling the content of the specifications.
- Capability inventory: The skill utilizes
oapi xfor network requests andoapi profilefor managing authentication credentials. - Sanitization: No specific sanitization or validation of the OpenAPI specification content is mentioned in the skill text.
Audit Metadata