api-integration
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides instructions for using
npxto execute utilities such asapidog-mcp-server,openapi-typescript, andorval. These are industry-standard developer tools used for facilitating Model Context Protocol (MCP) communication and automating the generation of TypeScript types from API specifications. - [DATA_EXFILTRATION]: The instructions demonstrate standard practices for client-side authentication, including the retrieval of tokens from
localStorageand their inclusion inAuthorization: Bearerheaders. These patterns are documented for educational purposes within a frontend development context and do not represent malicious exfiltration. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion point for external data by having the agent read OpenAPI specifications from remote URLs (e.g.,
https://api.example.com/openapi.json). - Ingestion points: Remote OpenAPI JSON/YAML URLs used for type generation.
- Boundary markers: The skill explicitly advocates for the use of Zod schemas to perform runtime validation (
UserSchema.parse(response.data)), which acts as a robust boundary for incoming data. - Capability inventory: The agent utilizes
npxfor static code generation and local file writing for types. - Sanitization: External content is sanitized via Zod validation logic to ensure the application only processes data matching the expected schema.
Audit Metadata