api-rate-limiting-config
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a framework for processing user requests related to API rate limiting. This functionality introduces an attack surface where maliciously crafted user queries could attempt to influence the agent's behavior through instructions embedded in the data.
- Ingestion points: The skill triggers and ingests user input based on keywords like 'api rate limiting config', 'api config', and 'api'.
- Boundary markers: No explicit delimiters or boundary markers (e.g., XML tags or clear 'ignore instructions within input' rules) are specified in the SKILL.md instructions.
- Capability inventory: The skill is scoped to use
Read,Write,Edit,Bash(curl:*), andGreptools. - Sanitization: There is no documented logic for sanitizing or validating user-supplied content before the agent acts upon it using the available tools.
- [NO_CODE]: The skill does not include any accompanying scripts, executables, or dynamic configuration files. It consists solely of descriptive instructions and metadata.
- [SAFE]: No obfuscation, data exfiltration patterns, hardcoded credentials, or persistence mechanisms were detected in the analyzed file.
Audit Metadata