skills/oakoss/agent-skills/openapi/Gen Agent Trust Hub

openapi

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing established development packages such as openapi-typescript, openapi-fetch, and zod-openapi from the official NPM registry for type-safe API development.
  • [EXTERNAL_DOWNLOADS]: HTML documentation examples reference official content delivery networks (CDNs) including unpkg.com for Swagger UI and cdn.redoc.ly for Redoc documentation rendering.
  • [COMMAND_EXECUTION]: Provides standard command-line interface instructions for common developer tasks, including npx for generating TypeScript types and docker run for hosting local API documentation using the official Swagger UI image.
  • [INDIRECT_PROMPT_INJECTION]: Since the skill involves the agent reading and processing OpenAPI specification files (YAML/JSON), there is a theoretical surface for instructions embedded in schema descriptions or examples. However, this risk is inherent to the primary purpose of API documentation processing and is mitigated by standard agent safety guardrails.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:50 AM