api-sdk-generator
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides boilerplate code and patterns for creating API clients in Python and TypeScript. Analysis of the provided templates shows they follow industry standards for security and error handling.
- [DATA_EXPOSURE_&_EXFILTRATION]: The skill correctly instructs the agent to redact secrets and bodies when raising errors (
raise APIError(resp.status_code, "Request failed") # redact bodies/secrets). It also recommends constraining base URLs to trusted HTTPS origins and avoiding leaking authorization to redirects. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing API specifications to generate code, it includes warnings to validate envelopes and encode path identifiers. The risk is minimized by the instructional nature of the skill which requires the agent to produce static code drafts rather than executing code directly against unknown endpoints.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill only generates code drafts for the user to review and implement.
Audit Metadata