api-and-interface-design
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of educational resources and best practices for software engineering. No malicious code, prompt injections, or unauthorized data exfiltration patterns were detected across the instructional content or code snippets.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a strong security posture by explicitly warning users that third-party API responses must be treated as untrusted data to prevent instruction-like text from influencing agent behavior.
- [COMMAND_EXECUTION]: Commands included in the reference guides (such as
npm audit,npx lighthouse, andgit difffor secret scanning) are standard tools for development, auditing, and maintenance purposes. - [EXTERNAL_DOWNLOADS]: Referenced packages and tools are limited to well-known, legitimate libraries in the JavaScript and TypeScript ecosystems, used for testing (Jest, Playwright) and auditing (axe-core, pa11y).
Audit Metadata