api-design
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational guide and reference for API architecture, focusing on industry-standard patterns and secure design principles.
- [EXTERNAL_DOWNLOADS]: References standard industry libraries such as
dataloader,ioredis, andgraphql-wswithin implementation examples. These are standard dependencies for the described functionality and are not flagged as risky. - [COMMAND_EXECUTION]: Includes a Lua script for Redis to implement a token-bucket rate limiter. This is a standard architectural pattern for atomic database operations and does not represent an arbitrary shell command execution vulnerability.
- [CREDENTIALS_UNSAFE]: Includes placeholder examples for API keys (e.g.,
sk_live_abc123def456) and JWTs for demonstration purposes. These are explicitly documented as templates and do not contain actual sensitive credentials.
Audit Metadata