api-design-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard implementation templates for API features.
- [COMMAND_EXECUTION]: The skill contains a Redis Lua script executed via
redis.eval. This is a standard and safe implementation for a sliding window rate limiter, using a hardcoded script literal to ensure atomicity in Redis. - [DYNAMIC_EXECUTION]: The cursor-based pagination example uses
Buffer.from(cursor, 'base64url').toString()andJSON.parse. This is a common and appropriate pattern for encoding/decoding opaque pagination tokens (cursors) and does not involve executing untrusted code. - [DATA_EXFILTRATION]: The webhook delivery example uses
fetch(url, ...). This is the intended functionality for a webhook dispatcher and is documented as a best practice including HMAC signatures for security.
Audit Metadata