api-integration-architect
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an integration pattern that ingests data from external API sources, which represents a potential surface for indirect prompt injection attacks.
- Ingestion points: External API response bodies are processed by the
APIClientclass inSKILL.mdusingresponse.json(). - Boundary markers: The instructions lack explicit guidance on using protective delimiters or 'ignore' instructions when the agent processes data fetched from external endpoints.
- Capability inventory: The skill template includes full network request capabilities via the
httpxlibrary and logging functionality. - Sanitization: While the skill suggests redacting sensitive data in logs and using schema validation, it does not provide patterns for sanitizing payloads against embedded malicious instructions.
- [COMMAND_EXECUTION]: The debugging section provides the agent with specific shell commands to execute for network diagnostics.
- Evidence: The connectivity checklist in
SKILL.mdinstructs the agent to runcurl -v {base_url}/healthto verify API availability.
Audit Metadata