api-error-design
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown-based design documentation, OpenAPI specification fragments, and JSON evaluation examples. No executable scripts, binary files, or automated commands are included.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit and process API error responses which are technically external data. However, it lack any capabilities to execute code, make network requests, or perform file system operations, and provides structured guidance for manual or supervised design reviews.
- [DATA_EXPOSURE_EXFILTRATION]: All code snippets use placeholder domains (e.g., example.com) and dummy identifiers (e.g., req_7c8d9e0f). A negative example illustrating a security risk correctly identifies the exposure of internal database errors as an anti-pattern to avoid.
Audit Metadata