ramp-reference-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code snippets for integrating with the Ramp API using standard OAuth2 authentication patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill has a minimal attack surface for indirect prompt injection.
- Ingestion points: The Python snippet in
SKILL.mdfetches card data from the Ramp API viarequests.get().json(). - Boundary markers: None explicitly present in the logic, though the data is handled as structured JSON.
- Capability inventory: No dangerous operations (subprocess calls, file-writes, or secondary network requests) are performed using the ingested data; the script only prints the count of retrieved records.
- Sanitization: Standard JSON parsing is used, which is appropriate for the simple logging task described.
- [DATA_EXPOSURE]: The skill follows security best practices by utilizing environment variables (
RAMP_CLIENT_ID,RAMP_CLIENT_SECRET) for managing API credentials rather than hardcoding sensitive information.
Audit Metadata