resonate-http-service-design-python
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and code patterns for integrating the Resonate SDK with Python web frameworks. No malicious patterns or bypasses were detected.
- [DATA_EXFILTRATION]: Network operations are confined to the intended communication with the Resonate coordination server. The code demonstrates secure configuration using environment variables for the server endpoint.
- [COMMAND_EXECUTION]: The skill uses SDK-specific RPC and context-managed execution handles. It does not use unsafe system calls, shell execution, or subprocesses with unvalidated input.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or private keys were found. Placeholders and environment variables are used appropriately for configuration.
- [SAFE]: Indirect Prompt Injection analysis: Ingestion points are the FastAPI route handlers defined in SKILL.md. Boundary markers and sanitization are implemented via Pydantic models. Capability inventory is limited to durable function orchestration. No unsafe interpolation of untrusted data into sensitive contexts was observed.
Audit Metadata