rest-api-integration
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes secure development practices for API integrations.
- Secret Management: It explicitly warns against exposing third-party API keys to the client (front-end) and recommends server-side execution for authenticated requests to prevent credential exposure.
- Data Validation: It advocates for using Zod to validate external API responses at the boundary, which is a key security practice to prevent data integrity issues or processing malicious payloads from compromised third-party services.
- Anti-pattern Awareness: The skill identifies common security pitfalls, such as the misuse of
NEXT_PUBLIC_environment variables for secrets and the lack of response validation.
Audit Metadata