api-security
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional markdown content focused on API security auditing best practices.
- [PROMPT_INJECTION]: No evidence of prompt injection, jailbreak attempts, or instructions to bypass safety guidelines was found.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file path access, or unauthorized network operations were detected. The skill mentions security headers and auth mechanisms only as targets for audit.
- [OBFUSCATION]: No obfuscated text, encoded strings, zero-width characters, or hidden URLs were identified.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill does not contain commands to install external packages or execute remote scripts. References to security libraries are for informational purposes only.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any dynamic shell execution placeholders (
!command). - [PRIVILEGE_ESCALATION]: No commands for escalating privileges or modifying system permissions were found.
- [PERSISTENCE_MECHANISMS]: No attempts to achieve system persistence through shell profiles, cron jobs, or registry modifications were detected.
Audit Metadata