opper-api
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the live OpenAPI specification from
https://api.opper.ai/v3/openapi.yamlto ensure accurate API interactions. - [EXTERNAL_DOWNLOADS]: A version-check mechanism is implemented that fetches
https://skills.opper.ai/versions.jsonand potentially updates the skill's instructions fromhttps://skills.opper.ai/opper-api/SKILL.md. These resources are hosted on the vendor's infrastructure. - [COMMAND_EXECUTION]: Examples provided include shell commands using
curlto interact with the Opper API, piped intogreporjqfor processing. These are standard utility usage examples. - [INDIRECT_PROMPT_INJECTION]: The skill documents the use of server-side tools like
opper:web_search, which ingests external data. The Opper platform provides built-in governance rules (guard,comply) to mitigate risks associated with untrusted content. - [SAFE]: All identified endpoints, repositories, and packages are owned by the vendor
opper-aior are well-known, trusted industry tools.
Audit Metadata