sdk-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides professional architectural guidance for designing and maintaining API client libraries across multiple languages.
- [SAFE]: Security best practices are integrated throughout the documentation, including specific instructions to handle credentials via environment variables, avoid logging secrets, and implement least-privilege authorization.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies workflows for processing external data sources, such as OpenAPI specifications and API responses (references/api_contracts_and_client_modeling.md). It addresses this attack surface by recommending strict type mapping, native parsing, and robust validation. The skill frontmatter defines no tool-access capabilities, and its instructions focus on secure implementation and data sanitization.
Audit Metadata