best-openapi-design
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill defines a rigorous framework for API design, focusing on resource identity and standard HTTP methods. It explicitly requires separating authentication (validating identity) from authorization (evaluating access to resources), which is a key security best practice. The instructions also enforce the use of RFC 9457 Problem Details for standardized error reporting, preventing sensitive data leakage in error responses.
- [COMMAND_EXECUTION]: The skill includes a local Python script (scripts/check_resource_paths.py) designed to lint API paths for naming convention violations. Analysis of the script confirms it uses only Python standard libraries (argparse, re, sys, pathlib, urllib.parse) and does not perform network requests, file system modifications, or access sensitive user data.
Audit Metadata