sf-agent-api-review
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a pure documentation resource providing a security and resilience rubric for API audits. It contains no executable scripts or dynamic commands.
- [CREDENTIALS_UNSAFE]: The checklist explicitly instructs reviewers to verify that secrets are not stored in insecure locations like browser memory or source control, promoting secure practices.
- [PROMPT_INJECTION]: The rubric includes specific safety checks for treating external agent output as untrusted and requiring sanitization before rendering, which helps mitigate risks associated with untrusted data in the systems being audited.
Audit Metadata