api-docs-generator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill templates reference external scripts from well-known services (cdn.redoc.ly and unpkg.com) to render interactive API documentation.- [REMOTE_CODE_EXECUTION]: Documents the installation and usage of industry-standard CLI tools like @openapitools/openapi-generator-cli and @stoplight/spectral-cli for automation tasks.- [INDIRECT_PROMPT_INJECTION]: The skill acts as a transformation layer for user-provided API specifications, which constitutes a potential injection surface.
- Ingestion points: Processes user-defined API endpoints, parameters, and schemas described in the workflow.
- Boundary markers: Absent in the documentation templates.
- Capability inventory: Performs file generation (OpenAPI YAML) and code generation (client SDKs).
- Sanitization: No explicit sanitization or validation of the input metadata is shown in the provided code snippets.
Audit Metadata