api-contract-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and implementation examples for API contract testing using established tools like Pact and JSON Schema. All code samples follow industry standard practices.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing data from external API responses, which is correctly managed through structural schema validation.
- Ingestion points: API response bodies are retrieved and evaluated in
SKILL.md,references/python-json-schema.md, andreferences/java-rest-assured.md. - Boundary markers: Data boundaries are structurally defined by the validation schemas provided in the examples.
- Capability inventory: The skill utilizes network utilities (
fetch,requests,REST Assured) and shell commands within CI/CD workflows (npx pact-broker). - Sanitization: All external data is subjected to strict structural validation using matchers and JSON schemas, mitigating the risk of processing unexpected or malicious content.
Audit Metadata