api-documentation-generator
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is an instructional guide for creating documentation and does not include any executable code, binary files, or installation scripts.
- [SAFE]: Example code snippets for cURL, JavaScript, and Python are provided for reference only and are not executed by the skill itself.
- [SAFE]: Authentication examples use generic placeholders such as 'YOUR_TOKEN' and 'your-password'. A Base64-encoded string in the example decodes to a standard, non-sensitive JWT header.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface as it instructs the agent to analyze an external codebase.
- Ingestion points: The skill instructs the agent to 'examine your API codebase' in Step 1 of SKILL.md.
- Boundary markers: None specified in the instructions.
- Capability inventory: No tools or scripts are provided or authorized in the frontmatter configuration.
- Sanitization: No explicit sanitization of codebase content is mentioned.
Audit Metadata