ddd-api-designer
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's content is purely educational, providing markdown-based documentation and code snippets for API design architecture. No executable scripts are included.
- [PROMPT_INJECTION]: No instructions were found that attempt to override system behavior, extract internal prompts, or bypass AI safety constraints.
- [CREDENTIALS_UNSAFE]: No sensitive credentials, API keys, or private tokens are hardcoded. Examples use standard placeholders (e.g., 'eyJhbGciOiJIUzI1NiIs...') or generic UUIDs for illustrative purposes.
- [DATA_EXFILTRATION]: There are no commands or instructions that attempt to read sensitive local files or transmit data to external servers. All network-related examples are conceptual and point to placeholder domains.
- [REMOTE_CODE_EXECUTION]: No patterns involving remote script execution, such as piping curl outputs to a shell, were found. The skill describes standard development tools like openapi-generator for instructional purposes.
- [OBFUSCATION]: The skill uses Base64 encoding in examples to demonstrate JSON Web Tokens (JWT) and pagination cursors. These were decoded and verified to contain benign metadata and example identifiers (e.g., '{"id":100}').
Audit Metadata