rest-api-design-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational repository providing guidelines and templates for REST API development. It does not contain any instructions to override agent behavior, exfiltrate data, or execute unauthorized commands.
- [CREDENTIALS_UNSAFE]: Code snippets for authentication and database connectivity use standard placeholders for secrets and passwords (e.g., 'your-secret-key', 'db_password', 'your-secret-key-change-in-production'). No hardcoded production credentials or sensitive environmental configurations are exposed.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for handling external input. Ingestion points: REST endpoints defined in EXAMPLES.md and SKILL.md which accept JSON bodies, file uploads, and query parameters. Boundary markers: The documentation explicitly advocates for Pydantic models and Express validation middleware as strict logical boundaries. Capability inventory: Code examples demonstrate file system access (shutil.copyfileobj) and database interactions for storage. Sanitization: The skill provides robust examples of sanitization, including Pydantic regex patterns, type validation, and range checks.
- [OBFUSCATION]: A Base64-encoded string is used as a functional example for cursor-based pagination. Decoding the string reveals a benign data structure ('{"id":123}'), confirming it is not used for concealment of malicious intent.
Audit Metadata