openapi-to-typescript
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests external data that could contain malicious instructions.
- Ingestion points: Untrusted content enters the agent context through local OpenAPI JSON or YAML files during the read and validate step.
- Boundary markers: The instructions do not specify the use of delimiters or ignore-instructions warnings when processing external file content.
- Capability inventory: The skill has the capability to write files to the local file system, which could be abused if an injection is successful.
- Sanitization: Descriptions and other text fields from the input file are used directly in generated JSDoc comments without sanitization or validation.
Audit Metadata