api-mock

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs several well-known development tools and libraries from the NPM registry, including @stoplight/prism-cli, msw, json-server, and @faker-js/faker.
  • [EXTERNAL_DOWNLOADS]: It downloads the WireMock standalone executable (JAR) from the official Maven Central repository (repo1.maven.org), which is a standard and trusted source for Java-based utilities.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands like find and grep to scan the local project directory for API-related files (e.g., OpenAPI specs, GraphQL schemas, or framework-specific route definitions).
  • [COMMAND_EXECUTION]: It generates local shell scripts (.sh files) and JavaScript files to automate the starting of mock servers and the generation of realistic test data. It also uses jq to modify package.json scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 03:53 AM
Security Audit — agent-trust-hub — api-mock