generating-api-sdks
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill describes a standard development workflow for generating SDKs based on OpenAPI specifications.
- [SAFE]: Uses well-known and legitimate tools such as openapi-generator-cli and spectral for its operations.
- [SAFE]: External references point to official documentation and reputable service providers in the API development ecosystem.
- [PROMPT_INJECTION]: The skill processes external OpenAPI specification files to generate code and documentation. This constitutes an indirect prompt injection surface where a malicious specification could include instructions designed to influence the agent's behavior during the generation process. Ingestion points: OpenAPI specification files (YAML/JSON) read from the skill directory or user-provided paths. Boundary markers: No explicit instructions provided to ignore or escape embedded instructions within the specification. Capability inventory: The skill utilizes Bash, Write, Edit, and Grep tools. Sanitization: No specific sanitization of input data from the specification is mentioned before code generation.
Audit Metadata