openapi-specification
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured instructions for API design using the OpenAPI 3.x specification. All referenced files (templates, scripts, and documentation) are internal to the skill's directory structure.
- [COMMAND_EXECUTION]: The skill mentions using a local validation script
scripts/validate-openapi.mjs. This is a routine task for checking API syntax and does not involve external network calls or dangerous system modifications. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests API requirements to generate specifications, it explicitly includes steps for verification (Phase 3) and follows standardized schema patterns, which mitigates typical injection risks through structured output formats (YAML/JSON).
Audit Metadata