openapi-spec-generation
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation instructions for well-known API documentation and validation tools from official registries, including
@stoplight/spectral-cli,@redocly/cli, and@openapitools/openapi-generator-cli.- [COMMAND_EXECUTION]: Instructions include standard developer commands to extract API specifications from local development servers (e.g.,curl http://localhost:8080/v3/api-docs) and run linting tools against local YAML files. These are routine tasks for API development.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided source code (Java, Python, TypeScript) and configuration files to generate documentation. - Ingestion points: Reads local project files including source code and
openapi.yamlspecifications. - Boundary markers: None explicitly defined in the prompts to differentiate between code and metadata instructions.
- Capability inventory: Uses file reading and shell execution for tool-based validation and generation.
- Sanitization: The skill mitigates risks by requiring and providing configurations for schema validation and linting using Spectral and Redocly.
Audit Metadata