api-integration
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for API design patterns such as Webhooks, Saga, and Outbox patterns.
- [DATA_EXFILTRATION]: No network operations or sensitive file access patterns were detected. Code examples use placeholders (e.g.,
<sig>,<uuid>) and standard libraries for signature verification. - [REMOTE_CODE_EXECUTION]: There are no commands or instructions that download or execute external scripts or packages.
- [PROMPT_INJECTION]: The instructions do not contain attempts to bypass safety filters or override system prompts. The 'After Completing' section includes a conditional flow to suggest security patterns, which is a standard user-interaction design.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets are present. The examples correctly demonstrate using variables and secrets (e.g.,
secret.encode()) for security operations like HMAC signing.
Audit Metadata