api-design
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a knowledge base and instruction set for designing HTTP APIs. It covers pagination, error handling (RFC 9457), idempotency, feature flags, and server-sent events (SSE). The instructions emphasize best security practices, such as authorizing every resource access, avoiding the exposure of internal details in error messages, and ensuring identity is verified through trusted tokens.
- [SAFE]: All external URL references target well-known official documentation (RFC Editor, MDN, ExpressJS, GraphQL), reputable technology companies (Microsoft/Azure GitHub), or the author's own GitHub organization ('Quegenx'). According to the security analysis rules, resources from the vendor 'quegenx' (e.g., github.com/Quegenx/agent-skills) are considered vendor-owned infrastructure and do not escalate severity.
- [SAFE]: The code snippets provided in 'FLAGS.md' and 'RELIABILITY.md' are illustrative templates for implementing feature flagging and idempotency logic. They use standard Node.js APIs (e.g., node:crypto) and do not contain obfuscated code, hidden network operations, or credential harvesting patterns.
Audit Metadata