api-security-tester
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a text-based instruction set for static code analysis and does not contain any executable scripts, remote dependencies, or unauthorized network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting and processing untrusted source code provided by the user. However, the risk is mitigated as the skill lacks exploitable capabilities.
- Ingestion points: API route definitions, middleware, and resolvers within project files as described in the workflow section of SKILL.md.
- Boundary markers: None identified in the skill instructions.
- Capability inventory: The skill is restricted to code analysis and report generation; no file system write, network access, or subprocess execution capabilities are present.
- Sanitization: No specific sanitization or filtering of input code is mentioned.
- [DATA_EXFILTRATION]: No evidence of hardcoded credentials or unauthorized data exfiltration. The skill contains examples of vulnerable code for identification purposes, but these are static patterns and not used maliciously.
Audit Metadata