public-grpc-api-design
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill focuses on architectural design, proto governance, and API versioning. It correctly identifies security best practices, such as disabling server reflection in production, enforcing TLS, and sanitizing error details to prevent internal data exposure.
- [NO_CODE]: The skill consists entirely of instructional documentation and reference materials. It does not contain any executable scripts, binaries, or automated tool configurations that could be exploited for command execution or remote access.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file paths, or unauthorized network exfiltration patterns were identified. The auth sections recommend standard industry practices like OAuth2 and JWT.
- [PROMPT_INJECTION]: The instructions are aimed at guiding the agent's design logic and do not contain attempts to bypass safety filters or override system-level instructions.
- [OBFUSCATION]: No hidden content, base64-encoded payloads, homoglyphs, or zero-width character attacks were found in the skill body or references.
Audit Metadata