review-api-contract
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is entirely comprised of markdown instructions and checklists intended to guide an AI agent through a REST API contract review process.
- [NO_CODE]: There are no scripts, executables, or code blocks that perform operations. The content is purely informational and pedagogical.
- [REMOTE_CODE_EXECUTION]: No patterns for remote code execution or package installations were detected. The skill does not download or execute any external scripts.
- [DATA_EXFILTRATION]: There are no network operations or sensitive file access patterns. The skill does not hardcode any credentials or secrets.
- [PROMPT_INJECTION]: The instructions do not attempt to bypass safety filters or override system prompts. The language used (e.g., 'Goal', 'Questions', 'Red flags') is standard for instructional frameworks.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process untrusted data (API PRs and designs), it does not possess any capabilities (file writing, network access, command execution) that could be exploited through injection. It serves as a passive reasoning framework.
Audit Metadata