validating-api-contracts
Warn
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/generate_pact_tests.pyscript contains agenerate_scriptmethod that assembles a bash script using content provided via command-line arguments and programmatically applies executable permissions (chmod 0o755) to the output. This pattern facilitates the creation and execution of arbitrary code on the local system. - [PROMPT_INJECTION]: The skill processes external data (OpenAPI specifications and Pact contracts) which constitutes an indirect prompt injection surface.
- Ingestion points: Files located in the
openapi_specs/directory and other contract-related files. - Boundary markers: There are no instructions or delimiters defined to prevent the agent from executing instructions that might be embedded in the ingested data.
- Capability inventory: The agent can execute commands via the
Bashtool and create executable scripts using the bundled generator. - Sanitization: The skill lacks logic to sanitize or validate the content of external specifications before they are processed by tools or used in comparison tasks.
Audit Metadata