protobuf-grpc-api-review
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive instructional guide and reference set for performing technical reviews of Protocol Buffer (.proto) and gRPC files. It outlines professional workflows for assessing binary wire compatibility, JSON/text format stability, and source-level API changes.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data (protobuf definitions and diffs). While this constitutes an attack surface, the instructions guide the agent through a structured review process using established engineering principles. No exploitable vulnerabilities or instructions to disregard safety filters were found within the provided guidelines.
- [EXTERNAL_DOWNLOADS]: The reference files point to official documentation from trusted sources, including the gRPC website (grpc.io) and the official Protocol Buffer documentation (protobuf.dev), to provide the agent with authoritative guidance on industry standards.
- [COMMAND_EXECUTION]: The skill suggests using repository-specific tooling such as
protoc,Buf,Gradle,Maven, orBazelto verify API changes. These are standard development tools and are used within the context of the primary skill purpose—verifying code correctness.
Audit Metadata