api-idempotency-testing
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external "supplied material" such as API contracts, idempotency-key rules, and database observations to generate test design findings, creating a potential attack surface.
- Ingestion points: The skill explicitly requests external documentation, requirements, and execution results as inputs in
SKILL.mdandprompts/api-idempotency-testing.md. - Boundary markers: Instructions require a "six-part input audit" (known, missing, conflicting, stale, out_of_scope, assumptions) to logically separate and audit input types.
- Capability inventory: Both
SKILL.mdand the core prompt strictly prohibit the execution of tests, editing of requirements or code, or treating designs as coverage or release evidence. - Sanitization: The skill relies on natural language instructions for data handling and does not specify programmatic sanitization or escaping mechanisms for the supplied material.
Audit Metadata