api-openapi-diff
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is assessed as safe for its intended use. It is a diagnostic tool that identifies structural changes in API specifications and provides migration advice. It explicitly forbids file modification and production environment testing.
- [DATA_EXFILTRATION]: The skill has no access to network-capable tools such as curl, wget, or HTTP libraries. This technical restriction ensures that any sensitive information processed during analysis cannot be exfiltrated to external servers.
- [PROMPT_INJECTION]: The skill processes untrusted local data (OpenAPI files and codebases), creating an indirect prompt injection surface. However, the risk is negligible due to the absence of network tools and the restriction of shell commands to 'git diff'.
- Ingestion points: OpenAPI YAML/JSON files and API codebase files identified during the discovery phase.
- Boundary markers: No delimiters or 'ignore' instructions are specified to wrap processed data.
- Capability inventory: Read, Grep, Glob, and Bash (limited to 'git diff'). No administrative or network capabilities.
- Sanitization: The skill identifies changes but does not include explicit validation or sanitization of the input content before analysis.
Audit Metadata