api-documentation-generator
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and provided examples are focused on the legitimate task of documenting APIs. All URLs provided in the documentation and examples point to well-known service documentation or use standard placeholders.- [PROMPT_INJECTION]: The skill demonstrates a surface area for indirect prompt injection as it is designed to ingest and process untrusted data from user codebases.
- Ingestion points: The skill analyzes codebase files to extract endpoints, routes, request/response bodies, and authentication patterns (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters provided to guide the agent in distinguishing between code metadata and potentially malicious instructions embedded in code comments or data structures.
- Capability inventory: The skill relies on file-reading capabilities to perform its primary function of code analysis.
- Sanitization: The instructions do not define methods for sanitizing or validating the content extracted from the codebase.
Audit Metadata