external-api-integration
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard Ruby libraries (gems) such as
faraday,faraday-retry,stoplight, andvcr. These are well-established packages in the Ruby ecosystem and are linked to their official documentation and source repositories on GitHub and GitLab. - [DATA_EXFILTRATION]: The skill proactively addresses security risks by providing patterns for sanitizing logs to prevent the leakage of authorization tokens (e.g., using
log.filterin Faraday middleware). It also correctly advises usingRails.application.credentialsfor managing API keys rather than hardcoding them. - [COMMAND_EXECUTION]: No dangerous shell commands or execution patterns were detected. The skill focuses on application-level Ruby code for HTTP interactions and explicitly warns against unsafe practices like SSRF when fetching URLs from parameters.
- [PROMPT_INJECTION]: No malicious instruction overrides or jailbreak attempts were found. The content consists of legitimate technical documentation and code examples intended to improve code quality and reliability.
- [INDIRECT_PROMPT_INJECTION]: The skill describes services that ingest data from external APIs. While any external data source presents an entry point for potential prompt injection if fed directly into an LLM, the skill's patterns promote structured handling (JSON parsing) and sanitization of this data. The ingestion points are API response bodies, and the capabilities are limited to standard database updates and network calls.
Audit Metadata