api-testing-observability-api-mock
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external API specifications to generate mock configurations, serving as an entry point for untrusted data that could potentially influence the agent's behavior.
- Ingestion points:
ContractMockServer.load_contractinresources/implementation-playbook.mdreads from external contract files. - Boundary markers: No explicit boundary markers or instruction filtering are implemented in the contract parsing logic.
- Capability inventory: The skill generates server logic, routes, and data fixtures based on external specifications.
- Sanitization: No sanitization of the contract content is performed prior to processing.
- [DYNAMIC_EXECUTION]: The skill includes templates for dynamic script generation, allowing the creation of runtime-modifiable behavior based on request data.
- Evidence: The implementation playbook includes functions like
create_dynamic_stub,create_pytest_integration, andimplement_throttlingthat return executable Python code strings as templates. - [EXTERNAL_DOWNLOADS]: The documentation template references resources from a well-known CDN service for interactive Swagger UI rendering.
- Evidence: The
create_interactive_docsfunction inresources/implementation-playbook.mdincludes CDN links tounpkg.comfor Swagger UI assets.
Audit Metadata