oapi-expert

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides comprehensive instructions for executing the oapi CLI tool to perform network operations, explore API endpoints, and manage configuration files in ~/.oapi/. These operations are fundamental to the tool's purpose of managing REST APIs.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the @desplega.ai/oapi package from the public NPM registry and to register API specifications from remote URLs via oapi register --remote <url>. The NPM package is a vendor-owned resource, and the remote specs are user-defined.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external OpenAPI specifications which could contain malicious instructions designed to influence the agent's behavior during command generation or documentation exploration.
  • Ingestion points: oapi register --remote <url> and oapi register --local <file> instructions in SKILL.md.
  • Boundary markers: None explicitly defined in the instructions for handling the content of the specifications.
  • Capability inventory: The skill utilizes oapi x for network requests and oapi profile for managing authentication credentials.
  • Sanitization: No specific sanitization or validation of the OpenAPI specification content is mentioned in the skill text.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:34 PM