gateway
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a pure documentation and instructional framework for API design. It does not contain scripts, binaries, or active code that could execute malicious commands on the host system.
- [SAFE]: The instructions explicitly follow security best practices, such as the Principle of Least Agency for AI-facing endpoints and mandatory BOLA (Broken Object Level Authorization) checks at the object level in every endpoint design.
- [SAFE]: No obfuscation techniques, such as hidden Unicode characters or Base64-encoded instructions, were found. Examples provided in the documentation (like JWTs or cursors) are clearly identified as placeholders and use standard formats.
- [SAFE]: The skill maintains strict data exposure boundaries, instructing the agent to never put sensitive data in URLs or logs and to validate third-party API data as untrusted input.
- [SAFE]: The metadata and collaboration patterns are consistent with the stated purpose of the skill, and all external references are to well-known standards (IETF, RFC, OWASP) or trusted documentation sources.
Audit Metadata