skills/medy-gribkov/arcana/api-design/Gen Agent Trust Hub

api-design

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as an educational guide and reference for API architecture, focusing on industry-standard patterns and secure design principles.
  • [EXTERNAL_DOWNLOADS]: References standard industry libraries such as dataloader, ioredis, and graphql-ws within implementation examples. These are standard dependencies for the described functionality and are not flagged as risky.
  • [COMMAND_EXECUTION]: Includes a Lua script for Redis to implement a token-bucket rate limiter. This is a standard architectural pattern for atomic database operations and does not represent an arbitrary shell command execution vulnerability.
  • [CREDENTIALS_UNSAFE]: Includes placeholder examples for API keys (e.g., sk_live_abc123def456) and JWTs for demonstration purposes. These are explicitly documented as templates and do not contain actual sensitive credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 09:14 PM
Security Audit — agent-trust-hub — api-design