stripe-inspired-api-design-rules
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a documentation-only reference containing design principles, naming conventions, and architectural patterns for building JSON HTTP APIs. It contains no executable scripts, system commands, or network-bound operations.- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to analyze untrusted external data, specifically OpenAPI specifications, API design proposals, and code review content.
- Ingestion points: User-provided OpenAPI YAML/JSON files, API design proposal documents, and pull request bodies as described in the
SKILL.mdfile. - Boundary markers: Absent; the skill does not provide specific delimiters to isolate user-provided content from the agent's internal reasoning.
- Capability inventory: The skill is entirely instructional and does not provide or utilize any internal tools for code execution, file system access, or network operations.
- Sanitization: Absent; the skill relies on the agent's foundational safety guardrails when processing the requested data according to the provided guidelines.
Audit Metadata