migrating-apis
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could contain malicious instructions.
- Ingestion points: The skill reads source API codebases and OpenAPI specifications (referenced in SKILL.md and references/implementation.md).
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands are defined for the analysis of source files.
- Capability inventory: The skill uses Write, Edit, and Bash(api:migrate-*) tools to create adapters, routers, and project scaffolding based on its analysis.
- Sanitization: There are no explicit sanitization or validation steps mentioned for the content read from external specifications or codebases.
Audit Metadata