api-designer
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npxfor executing@redocly/cliand@stoplight/prism-cli. These are well-known utilities from established companies (Redocly and Stoplight) in the API development ecosystem.- [COMMAND_EXECUTION]: The core workflow involves executing linting and mocking commands via the shell (npx @redocly/cli lint openapi.yamlandnpx @stoplight/prism-cli mock openapi.yaml). These commands are standard for API design and validation.- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and processing OpenAPI specification files (openapi.yaml), which are then passed to validation tools. This represents a standard attack surface for skills processing external documentation. - Ingestion points: The skill reads and acts upon
openapi.yamlas part of its core workflow defined inSKILL.md. - Boundary markers: No specific delimiters or warnings for the agent to ignore instructions within the YAML files are present.
- Capability inventory: The agent is authorized to execute shell commands via
npxas described inSKILL.md. - Sanitization: There is no explicit sanitization step for the content of the API specification before it is processed by the linting tools.
Audit Metadata