testing-api-tester
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because its core function involves ingesting and processing data from external API responses during testing.
- Ingestion points: Responses from external API endpoints (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded commands in API data are provided.
- Capability inventory: The agent generates JavaScript code for test suites and detailed markdown reports (SKILL.md).
- Sanitization: There are no explicit requirements or methods described for sanitizing data received from external sources before processing it into outputs.
Audit Metadata