okhttp5

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a technical reference guide for the OkHttp 5.x HTTP client. It contains no executable scripts or malicious instructions. Hardcoded values in examples are standard placeholders used in the library's official documentation.
  • [NO_CODE]: The skill consists exclusively of Markdown files. It does not provide any Python, JavaScript, or shell scripts for execution.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for adding dependencies from Maven Central and references official documentation hosted on GitHub and Square's official domains, all of which are trusted sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest data from the network, which is the primary purpose of an HTTP client. This constitutes an attack surface where an agent might be exposed to malicious instructions embedded in remote content.
  • Ingestion points: SKILL.md, examples/basic-usage.md, and references/calls.md (reading response bodies).
  • Boundary markers: Absent.
  • Capability inventory: Network requests and file system caching.
  • Sanitization: No sanitization logic is included in the provided snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:37 AM