skills/mukul975/anthropic-cybersecurity-skills/implementing-api-rate-limiting-and-throttling/Gen Agent Trust Hub
implementing-api-rate-limiting-and-throttling
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The agent.py script parses external API log data to assess effectiveness and suggest rate limits.\n
- Ingestion points: scripts/agent.py reads user-provided JSON log files through the --log CLI parameter.\n
- Boundary markers: There are no boundary markers or instructions provided to the agent to ignore potentially malicious instructions embedded within the log entries.\n
- Capability inventory: The script performs data aggregation and writes analysis findings to a local output file using json.dump.\n
- Sanitization: The script performs JSON parsing and basic type validation on numeric fields, but the string content from the log entries is processed without sanitization.\n- [DYNAMIC_EXECUTION]: The skill employs Lua scripts executed within a Redis environment to manage rate limit counters.\n
- Evidence: Embedded Lua script templates in SKILL.md (Step 3 and Step 5) are designed to be executed via the Redis eval() command. This ensures atomic operations for token bucket and sliding window algorithms, representing a standard implementation pattern rather than a malicious vector.
Audit Metadata