configure-sdk-options
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
speakeasyCLI (e.g.,speakeasy run,speakeasy quickstart) for SDK management. These are legitimate, official tools from the skill's author, speakeasy-api. - [EXTERNAL_DOWNLOADS]: The Go development guide includes instructions to install
ifacemakerandmockeryfrom GitHub. These are well-established, standard utilities within the Go ecosystem and are treated as safe references to a well-known service. - [INDIRECT_PROMPT_INJECTION]: The skill identify and process local project files to generate SDK configurations.
- Ingestion points: The skill reads local files like
openapi.yaml,gen.yaml, and.speakeasy/workflow.yamlto facilitate SDK configuration. - Boundary markers: The skill uses structured YAML templates to define configuration blocks, which inherently limits the interpretation of embedded content by the agent.
- Capability inventory: Includes execution of the
speakeasyCLI and modifications to local project configuration files. - Sanitization: The skill focus is on structured data fields within defined YAML schemas, significantly reducing the risk of malicious instruction execution from ingested data.
Audit Metadata