api-design
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and guidance tool for API design conventions.
- [SAFE]: Instructions promote secure practices, such as explicitly defining inbound access policies and validating TokenX claims (issuer, audience, signature).
- [SAFE]: The skill correctly advises against insecure practices like using wildcards in access policies, trusting user-provided IDs in request bodies, and logging sensitive data (PII or tokens).
- [SAFE]: External references are limited to legitimate organizational resources (apikatalog.nav.no).
Audit Metadata