openapi-design
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a collection of documentation and templates for API design based on official industry standards. All referenced external resources are official documentation sites or reputable open-source tools. No malicious patterns, obfuscation, or unauthorized access attempts were detected during the analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined requirements to generate specifications, which is a standard surface for indirect prompt injection. 1. Ingestion points: User-provided API requirements and design inputs (SKILL.md). 2. Boundary markers: Absent. No specific delimiters or instructions to ignore embedded commands are used when processing requirements. 3. Capability inventory: The skill uses tools for file system modification (Write, Edit) and external search (mcp__perplexity__search). 4. Sanitization: No specific sanitization or validation of user-provided requirements is implemented.
Audit Metadata