api-design-review
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a rigorous framework for principal-level API architecture reviews, prioritizing consumer compatibility and data integrity.
- [SAFE]: Extensive reference documentation is included, covering security best practices for OWASP API risks, authentication (JWT, OAuth2), and authorization logic.
- [SAFE]: The validation script (
scripts/validate_scenarios.py) is a local utility used for ensuring documentation consistency; it does not download external code or perform unauthorized file access. - [SAFE]: Instructions emphasize security-first principles, including input bounding, rate limiting, and the prevention of sensitive data leakage in error responses.
Audit Metadata