api-documenter
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and provides a framework for the agent to act as a technical writer and documentation specialist. No evidence of malicious behavior or security violations was found.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies surfaces for ingesting untrusted data, which is inherent to its primary purpose.
- Ingestion points: External API specifications (OpenAPI, AsyncAPI, GraphQL), code comments, and annotations.
- Boundary markers: None provided in the instructions.
- Capability inventory: The skill does not include any accompanying scripts, executables, or tools that would facilitate command execution or network operations; it relies on the agent's existing environment capabilities.
- Sanitization: No specific sanitization or validation steps for incoming data are defined in the instructions.
Audit Metadata