osv-api-reference
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation for the OSV API, a service maintained by Google for vulnerability research. It contains no executable scripts or dynamic instructions.
- [EXTERNAL_DOWNLOADS]: The skill references the official OSV API endpoint and documentation hosted on Google's GitHub repository. These are well-known and trusted resources.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for ingesting external vulnerability data. 1. Ingestion points: Vulnerability data returned from OSV API endpoints described in SKILL.md. 2. Boundary markers: The reference does not define specific markers for the agent to use when processing API responses. 3. Capability inventory: Documents network access via curl and PowerShell for data retrieval. 4. Sanitization: Not applicable to a reference document.
Audit Metadata