api-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill takes arbitrary user-supplied API request data as input for validation, which presents a surface for indirect prompt injection.
- Ingestion points: API method, URL, headers, body, and authentication tokens provided by the user (SKILL.md).
- Boundary markers: Absent. The instructions do not specify delimiters or tell the agent to ignore instructions embedded within the user-provided API details.
- Capability inventory: The skill analyzes text and provides a verdict. It also facilitates a multi-step chain by instructing the agent to invoke the 'API Documentation skill' based on user response.
- Sanitization: Absent. There is no requirement for the agent to sanitize or escape the content of the API request before processing.
- [EXTERNAL_DOWNLOADS]: The skill references configuration and license information from LambdaTest's official GitHub repository.
Audit Metadata