rest-api-design
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-supplied domain information to generate API documentation, creating a surface for potential indirect injection. * Ingestion points: User-provided domain entities, relationships, and acceptance criteria provided in the domain context. * Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within user data. * Capability inventory: The skill uses Read, Grep, Glob, Write, and Edit tools, which allow for reading and modifying files in the environment. * Sanitization: No explicit sanitization or validation of the input domain data is performed before it is used to generate the output API design.
Audit Metadata