api-tester
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill instructions and code examples align with safe API testing practices and standard quality assurance methodologies.
- [EXTERNAL_DOWNLOADS]: The skill references the @playwright/test library in its code examples. This is an industry-standard testing framework provided by a well-known service and is considered a safe dependency for the intended use case.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection through the ingestion of external data. 1. Ingestion points: API specifications and documentation mentioned in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: The skill can generate test scripts containing network operations (fetch) and execute functional validation. 4. Sanitization: Not explicitly defined. However, this surface is essential for the primary skill purpose of API testing and is assessed as safe.
Audit Metadata