fusion-framework-mocking
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by documenting the use of
@equinor/fusion-openapi-mockto fetch and process OpenAPI documents from remote or local sources to drive mock behavior. - Ingestion points:
references/http-and-openapi-mocks.mddescribes fetching specifications viafetchOpenApiDocumentfrom provided URLs. - Boundary markers: Not explicitly defined for the ingested schema data, though the context is restricted to test environments.
- Capability inventory: The ingested data influences HTTP middleware routing and the shape of generated mock responses.
- Sanitization: Not explicitly documented; the mock generator interprets the OpenAPI schema directly.
- [DYNAMIC_EXECUTION]: The skill documents the use of dynamic mock data generation via
@equinor/fusion-openapi-mock, which resolves JSON schemas at runtime and supports functional overrides for specific fields (e.g., using@faker-js/faker). This is a standard and expected mechanism for generating deterministic test data.
Audit Metadata