response-compliance
Warn
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation indicates that the compliance test script (lobehub/packages/openapi/scripts/compliance-test.sh) clones the openresponses/openresponses repository and executes its CLI runner.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external code from a third-party GitHub repository (github.com/openresponses/openresponses) as part of the compliance testing workflow.
- [CREDENTIALS_UNSAFE]: The documentation includes hardcoded authentication headers and API keys (e.g., --auth-header "lobe-auth-dev-backend-api" --api-key 1) designed for testing against local development or mock environments.
- [PROMPT_INJECTION]: The skill processes untrusted data from API endpoints during compliance testing, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: API response payloads from configured APP_URL.
- Boundary markers: None identified in instructions.
- Capability inventory: Shell command execution via bun run and script execution.
- Sanitization: Mentions the use of Zod validation for response schema verification.
Audit Metadata