openapi-first

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains purely instructional content and templates for Java development using OpenAPI. No malicious patterns such as prompt injection, obfuscation, or unauthorized command execution were found.
  • [EXTERNAL_DOWNLOADS]: References to the openapi-generator-maven-plugin (version 7.5.0) from org.openapitools are legitimate and consistent with the skill's stated purpose of API-first development.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests external OpenAPI specifications, it lacks dangerous capabilities (e.g., shell command execution or network exfiltration) that would allow for exploitation via malicious data in those specifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 01:01 PM