api-documenter
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it is designed to process external and potentially untrusted data to generate documentation and SDKs.
- Ingestion points: Processes OpenAPI/AsyncAPI specifications, GraphQL schemas, JSON schemas, and code comments provided by users or external repositories.
- Capability inventory: Includes multi-language SDK generation, automated documentation updates, interactive explorer creation, and CI/CD pipeline integration.
- Boundary markers: The skill instructions do not explicitly define specific delimiters or "ignore embedded instructions" warnings for the agent when processing these external specs.
- Sanitization: The instructions do not specify explicit sanitization or validation steps for content extracted from external specifications before interpolation into output.
Audit Metadata