integrate-api-client
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a robust defense-in-depth strategy to handle untrusted third-party API data. It uses a multi-layered approach (Client, Builder) to ensure that only allowlisted fields reach the domain logic. It specifically filters out instruction-like keys such as 'prompt', 'system', and 'instructions' that could be used in injection attacks.
- [DATA_EXFILTRATION]: The skill includes guidance on preventing data exposure through error messages. It instructs developers to return only status codes or class names and to specifically avoid including raw response bodies in error exceptions, which prevents potentially malicious payloads from entering the LLM's context.
- [PROMPT_INJECTION]: The instructions contain phrases like 'Ignore previous instructions', but these are used as explicit examples of malicious content to be disregarded when encountered in untrusted third-party API responses. These are defensive guidelines and do not represent an attempt to bypass the agent's core instructions.
- [CREDENTIALS_UNSAFE]: The skill follows secure practices for credential management by recommending the use of environment variables or framework-specific secret stores (e.g., Rails.configuration.secrets) rather than hardcoding sensitive information.
Audit Metadata