rest-api-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of documentation and reference material. It contains no executable scripts or commands that the agent is instructed to run without user supervision.
- [SAFE]: Security best practices are actively promoted within the content, such as redaction of sensitive error details (RFC 9457), enforcement of HTTPS, and proper token-based authentication (JWT).
- [SAFE]: All credentials and tokens found in the files (e.g., 'sk_live_abc123', 'Bearer eyJhbGci...') are clearly marked as placeholders for documentation purposes and do not represent leaked production secrets.
- [SAFE]: External dependencies and tools mentioned (such as FastAPI, Express, Chi, Spring Boot, Schemathesis, and Axum) are well-known, industry-standard libraries for API development and testing.
Audit Metadata