scanning-api-security
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and local analysis scripts for detecting API security vulnerabilities. It does not perform any unauthorized data exfiltration or execute remote code from untrusted sources.
- [EXTERNAL_DOWNLOADS]: The skill references established resources from the OWASP Foundation (owasp.org) and ZAP project (zaproxy.org). These are well-known technology organizations and the references are purely informational.
- [COMMAND_EXECUTION]: The skill utilizes standard development tools (Grep, Glob, npm audit, pip-audit, govulncheck) for static code analysis and dependency auditing. These are used for their intended primary purpose within a security auditing context.
- [NO_CODE_IN_METADATA]: The YAML frontmatter is well-formed and consistent with the described functionality. Only standard tool access (Read, Write, Bash) is requested for local file operations.
- [SAFE_VENDOR_RESOURCE]: External links to jeremylongshore.com and intentsolutions.io are recognized as legitimate vendor resource endpoints for the author and do not contribute to risk escalation.
Audit Metadata