schemathesis-fuzzing

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats were identified in this skill. The instructions and scripts promote standard, secure usage of the Schemathesis testing framework.
  • [COMMAND_EXECUTION]: The skill provides standard CLI commands for installing and running Schemathesis (e.g., pip install, schemathesis run). These are documented correctly and target legitimate usage for API testing.
  • [EXTERNAL_DOWNLOADS]: The skill references official documentation and repositories for Schemathesis (GitHub and ReadTheDocs). These are well-known, trusted services and do not represent a security risk.
  • [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables ($API_TOKEN, secrets.STAGING_API_TOKEN) for handling authentication, which is the recommended practice for avoiding hardcoded secrets.
  • [PROMPT_INJECTION]: The markdown content contains natural instructional language without any attempts to override agent behavior or bypass safety guardrails.
  • [OBFUSCATION]: No encoded content, zero-width characters, or homoglyph attacks were detected in any of the files.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 08:26 AM