api-graphql
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides procedural guidance for security assessments, which is a legitimate use case for AI agents in cybersecurity.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing data from external API endpoints (SKILL.md), which constitutes a data ingestion surface. This surface is necessary for its purpose as an auditing tool. Evidence: Ingestion Point: GraphQL API responses; Boundary Markers: Absent; Capability Inventory: Execution of graphw00f, clairvoyance, and inql; Sanitization: Absent.
Audit Metadata