server-api-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a best-practices guide for API development, promoting secure coding standards. It includes specific instructions for parameterized queries, authz enforcement, and preventing sensitive data leaks in error responses.- [INDIRECT_PROMPT_INJECTION]: The skill addresses the ingestion of untrusted data but provides defensive guidelines to mitigate risks.
- Ingestion points: Request path parameters, query parameters, bodies, headers, and webhook payloads as described in
references/current-guidance.md. - Boundary markers: Instructions explicitly call for field allowlists and normalization.
- Capability inventory: The skill itself does not contain executable code or subprocess calls.
- Sanitization: The documentation mandates strict validation and normalization of all external inputs before they reach business logic.
Audit Metadata