api-docs-generator
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates and instructions for improving API documentation. A review of all instructions and reference files shows no signs of malicious intent, unauthorized data access, or network exfiltration.
- [DATA_EXFILTRATION]: The skill requires access to the user's API source code to perform its analysis. This is limited to identifying endpoint structures and existing documentation strings as part of its documented workflow. No network exfiltration path is defined.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code and docstrings from the workspace. Ingestion points: API source code (routes and models). Boundary markers: Absent. Capability inventory: Limited to text generation and documentation formatting; no dangerous tool execution, file-write, or network capabilities are present in the skill's instructions. Sanitization: Absent. The risk is minimized by the lack of exploitable capabilities.
Audit Metadata