api-test-mode-design
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No security threats were identified. The skill's components are limited to informational markdown files and evaluation data intended for instruction.\n- [NO_CODE]: The skill contains no executable scripts (such as Python, JavaScript, or Shell) and does not define any external dependencies or remote downloads.\n- [INDIRECT_PROMPT_INJECTION]: Although the skill processes user input via clarifying questions, it possesses no dangerous capabilities—such as file system modification, network access, or tool execution—that could be exploited through prompt injection.\n- [CREDENTIALS_SAFE]: The skill mentions API key prefixes (e.g., sk_test_) and standard test values (e.g., card numbers from Stripe's documentation) strictly for instructional purposes. No real secrets or sensitive credentials are hardcoded.
Audit Metadata