api-schema-inferrer
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The Python script
scripts/infer_schemas.pyusesyaml.safe_loadto parse OpenAPI specifications. This is a security best practice that prevents the execution of arbitrary code embedded in malicious YAML files during the parsing process. - [EXTERNAL_DOWNLOADS]: The skill requires the
pyyamlPython package. This is a widely used, well-known, and trusted library for handling YAML data in the Python ecosystem. - [COMMAND_EXECUTION]: The skill's primary function involves executing a Python script that reads, modifies, and writes to local OpenAPI specification files. This behavior is consistent with the skill's documented purpose of inferring schemas and includes a safety measure by creating a backup file (e.g.,
spec.yaml.backup) before overwriting the original.
Audit Metadata