validating-api-schemas
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns detected. The skill performs its intended purpose of schema validation using transparent and standard methods.- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto execute well-known API tooling such as@stoplight/spectral-cli,swagger-cli, andajv-cli. These represent standard industry tools for schema validation.- [COMMAND_EXECUTION]: Provides shell and JavaScript scripts to automate linting, structural validation, and breaking change detection. The scripts are provided within the skill for transparency.- [PROMPT_INJECTION]: The skill processes external data (API specifications), which creates an indirect prompt injection surface. This is mitigated by the use of dedicated structural validators rather than direct prompt interpolation. - Ingestion points: API specification files (OpenAPI, JSON Schema, GraphQL SDL) identified via Glob in SKILL.md.
- Boundary markers: Absent in instructions; rely on the structural constraints of the validation tools.
- Capability inventory: Shell command execution and file manipulation tools provided across the skill scripts.
- Sanitization: Relies on official validation libraries (Spectral, AJV, GraphQL-inspector) to process content safely.
Audit Metadata