api-spec-validator
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install the
anypoint-cli-v4tool and theanypoint-cli-api-project-pluginfrom the official NPM registry. These tools are provided by the vendor (MuleSoft/Salesforce) for managing API lifecycle tasks. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
anypoint-cli-v4command-line interface to validate API specifications. It also includes several Python scripts (add_operation_ids.py,add_descriptions.py,add_examples.py,fix_delete_head_examples.py,generate_docs.py,improve_operation_ids.py, andinfer_schemas.py) that perform local file system operations to read, modify, and write API specification files. - [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data in the form of OpenAPI specifications provided by the user. It manages this risk by employing
yaml.safe_loadfor parsing and provides structured guidance for the AI to handle API responses (e.g., specific recovery instructions for 400 errors). The capability inventory includes local file modification and CLI execution, which are standard for an API development toolset.
Audit Metadata