api-design
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed entirely of architectural guidelines and natural language instructions. It does not contain executable scripts or binary files.
- [SAFE]: No patterns of data exfiltration or unauthorized access to sensitive files (such as .env or .ssh) were detected. The skill's discussion of sensitive data (e.g., PII or credentials) is strictly within the context of teaching the agent how to design secure systems.
- [SAFE]: Base64-encoded strings found in the text (e.g., 'eyJpZCI6MTAwfQ==') were decoded and identified as harmless JSON examples of pagination cursors (e.g., '{"id":100}').
- [SAFE]: The instructions reinforce security principles, including the use of TLS, OAuth 2.0, input validation, and protection against Insecure Direct Object Reference (IDOR) vulnerabilities.
- [SAFE]: No remote code execution or unverifiable dependency installations were found in the provided file.
Audit Metadata