design-api

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate developer tool that provides architectural guidance and code templates for REST API design. It promotes security best practices such as input validation via Zod and centralized error handling to prevent sensitive information disclosure.
  • [COMMAND_EXECUTION]: The workflow includes standard development commands (npx tsc, npm test) used to verify type safety and run test suites. These are benign and appropriate for a software development skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes existing local project files (models, handlers, middleware) to ensure consistency. This ingestion of local context is a standard feature for coding assistants and does not involve risky capabilities such as arbitrary network access or unauthorized file modification.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 11:56 PM