api-testing

Pass

Audited by Gen Agent Trust Hub on May 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses author-provided CLI tools, ironbee-browser-devtools-cli and ironbee-node-devtools-cli, to perform browser automation and backend process debugging. These operations are within the scope of the skill's intended functionality.
  • [DATA_EXFILTRATION]: The skill facilitates monitoring of network traffic and extraction of page content. While this allows access to potentially sensitive information such as authentication headers, the behavior is local to the testing session and no unauthorized external data transmission patterns were found.
  • [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface by ingesting external data from web pages and API responses.
  • Ingestion points: ironbee-browser-devtools-cli content get-as-text and ironbee-browser-devtools-cli o11y get-http-requests as shown in SKILL.md.
  • Boundary markers: None specified in the instructions.
  • Capability inventory: Shell command execution via Bash tool (specifically restricted to the vendor's devtools CLI).
  • Sanitization: No explicit sanitization or filtering of external input is described.
Audit Metadata
Risk Level
SAFE
Analyzed
May 29, 2026, 01:38 AM
Security Audit — agent-trust-hub — api-testing