13-api-integration
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of markdown documentation and YAML metadata. It does not package any scripts, binaries, or automation files.
- [INDIRECT_PROMPT_INJECTION]: The instructions require the agent to analyze external repository content and user-provided requirements, creating a standard surface for indirect prompt injection.
- Ingestion points: Local repository files and user requirement descriptions (SKILL.md).
- Boundary markers: None defined; instructions do not specify delimiters for external content.
- Capability inventory: The agent generates frontend code and performs resource cleanup (timers, event listeners).
- Sanitization: No specific filtering or validation steps are prescribed for external repository content.
- [SAFE]: The skill focuses on development best practices, such as accessibility, resource lifecycle management, and performance. No obfuscation, data exfiltration, or credential exposure patterns were detected.
Audit Metadata