rf-restinstance
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate collection of instructions and examples for the RESTinstance Robot Framework library, designed for API testing and automation.
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
RESTinstancelibrary via pip. This is a standard and expected procedure for using the documented testing framework. - [PROMPT_INJECTION]: No malicious patterns or attempts to override agent behavior or bypass safety filters were detected in the instructions or metadata.
- [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were found. The skill demonstrates standard authentication methods (Bearer tokens, API keys, Basic Auth) using placeholder values and recommends the use of environment variables for secure credential management.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data via API responses. However, it incorporates robust boundary markers through its core functionality: mandatory type validation (Integer, String, etc.) and JSON Schema enforcement, which effectively constrain how the agent interprets external content.
- [COMMAND_EXECUTION]: All documented keywords (GET, POST, PUT, DELETE) are part of the legitimate RESTinstance library API. No arbitrary or malicious shell command execution patterns were identified.
Audit Metadata