error-model-validation-architect
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and defines a design methodology for API error handling. It does not contain executable scripts, binaries, or remote dependencies.
- [SAFE]: The instructions include specific security guardrails that prohibit the leakage of sensitive system details, including stack traces, SQL fragments, class names, tokens, or secrets to API clients.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and analyze external inputs such as endpoint contracts, payload samples, and existing exception classes. While this represents a surface for indirect prompt injection, the skill lacks any dangerous capabilities (e.g., shell access, file writes, or network requests) that could be exploited. The risk is limited to the generation of the design plan itself.
- [DATA_EXPOSURE]: The skill explicitly advises on logging and observability conventions with a focus on PII (Personally Identifiable Information) policies and correlation IDs, ensuring that diagnostic data is handled appropriately server-side rather than exposed to clients.
Audit Metadata