asyncapi-docs
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard industry practices for API documentation without any malicious patterns or behaviors.
- [EXTERNAL_DOWNLOADS]: The skill references established packages from the official AsyncAPI and Stoplight organizations on npm. The installation process uses a trusted repository belonging to the skill's maintainer.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run asyncapi CLI commands, which is the expected and intended method for processing these specifications.
- [PROMPT_INJECTION]: While the skill processes external AsyncAPI specifications, it is designed for this primary purpose and does not exhibit any vulnerabilities or unsafe handling of the data.
- Ingestion points: The specPath parameter defines the entry point for external data into the agent's context.
- Boundary markers: No explicit delimiters are present in the documentation.
- Capability inventory: The skill has access to Bash, Write, and Edit tools to interact with CLI tools and files.
- Sanitization: Standard validation is performed by the AsyncAPI CLI during processing.
Audit Metadata