moodle-external-api-development
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on teaching developers how to implement Moodle's external API framework, which inherently requires strict validation of input and output parameters via execute_parameters and execute_returns.
- [SAFE]: Implementation guidelines correctly include essential security checks such as validate_context and require_capability, ensuring that APIs enforce Moodle's permission system.
- [SAFE]: All database examples utilize Moodle's DML API with named placeholders, which is the standard method for preventing SQL injection attacks.
- [SAFE]: The skill consists entirely of instructional documentation and does not include any executable scripts, binaries, or platform-level configurations that could be exploited. While a code snippet for directory creation uses permissive (0777) permissions, this is provided as a development example within instructional text and does not affect the safety of the skill itself.
Audit Metadata