Skills
skills/desplega-ai/ai-toolbox/oapi-expert/Gen Agent Trust Hub

oapi-expert

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the oapi CLI tool for all primary functions, including listing APIs, viewing documentation, and executing requests.
  • [COMMAND_EXECUTION]: It supports the jq utility via the --jq flag to process and filter API response data.
  • [EXTERNAL_DOWNLOADS]: Fetches remote OpenAPI specifications from user-provided URLs using the oapi register --remote command.
  • [REMOTE_CODE_EXECUTION]: Recommends installing and running the toolbox from the vendor's GitHub repository using npx.
  • [DATA_EXFILTRATION]: Allows reading local file contents and sending them to external API endpoints through the -F @file and --input options.
  • [CREDENTIALS_UNSAFE]: Manages authentication profiles (tokens and keys) and stores them in a local configuration file at ~/.oapi/config.json.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 10:51 AM