api-documentation
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of markdown-based workflow instructions and metadata. It does not include any scripts, tools, or binary files, ensuring no code-based vulnerabilities are present.
- [PROMPT_INJECTION]: The workflow describes the ingestion and documentation of external API data. This is a potential surface for indirect prompt injection if the API metadata contains malicious instructions.
- Ingestion points: Phase 1 (API Discovery) and Phase 2 (OpenAPI Specification) in SKILL.md involve processing external API metadata.
- Boundary markers: None defined in the workflow text.
- Capability inventory: No active tool capabilities (e.g., shell, network, filesystem) are implemented in this skill file.
- Sanitization: Not addressed in the documentation templates.
Audit Metadata