openapi
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing established development packages such as
openapi-typescript,openapi-fetch, andzod-openapifrom the official NPM registry for type-safe API development. - [EXTERNAL_DOWNLOADS]: HTML documentation examples reference official content delivery networks (CDNs) including
unpkg.comfor Swagger UI andcdn.redoc.lyfor Redoc documentation rendering. - [COMMAND_EXECUTION]: Provides standard command-line interface instructions for common developer tasks, including
npxfor generating TypeScript types anddocker runfor hosting local API documentation using the official Swagger UI image. - [INDIRECT_PROMPT_INJECTION]: Since the skill involves the agent reading and processing OpenAPI specification files (YAML/JSON), there is a theoretical surface for instructions embedded in schema descriptions or examples. However, this risk is inherent to the primary purpose of API documentation processing and is mitigated by standard agent safety guardrails.
Audit Metadata