http-api-conventions
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and guidelines for API development. It does not include any scripts, executable binaries, or external dependencies.
- [SAFE]: The instructions explicitly advocate for security best practices, including the exclusion of secrets, stack traces, and internal errors from API response bodies, as well as the use of secure cookie attributes (HttpOnly, Secure, SameSite).
- [SAFE]: No prompt injection, obfuscation, or data exfiltration patterns were detected in the documentation or evaluation files.
Audit Metadata