schemathesis-fuzzing
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats were identified in this skill. The instructions and scripts promote standard, secure usage of the Schemathesis testing framework.
- [COMMAND_EXECUTION]: The skill provides standard CLI commands for installing and running Schemathesis (e.g.,
pip install,schemathesis run). These are documented correctly and target legitimate usage for API testing. - [EXTERNAL_DOWNLOADS]: The skill references official documentation and repositories for Schemathesis (GitHub and ReadTheDocs). These are well-known, trusted services and do not represent a security risk.
- [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables (
$API_TOKEN,secrets.STAGING_API_TOKEN) for handling authentication, which is the recommended practice for avoiding hardcoded secrets. - [PROMPT_INJECTION]: The markdown content contains natural instructional language without any attempts to override agent behavior or bypass safety guardrails.
- [OBFUSCATION]: No encoded content, zero-width characters, or homoglyph attacks were detected in any of the files.
Audit Metadata