Skills
Navigate
skills/vchirrav-eng/product-security-ai-skills/api-security-schemathesis/Gen Agent Trust Hub

api-security-schemathesis

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the schemathesis CLI tool to automate API testing, involving shell command execution and local file output for reports.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external OpenAPI or GraphQL schemas provided via URL. 1. Ingestion points: Target URLs provided to the schemathesis run command in SKILL.md. 2. Boundary markers: None specified for the schema content. 3. Capability inventory: CLI execution (schemathesis) and file system writes (schemathesis-report.txt). 4. Sanitization: Relies on the external schemathesis tool to safely parse and process the schema data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 06:47 PM
Security Audit — agent-trust-hub — api-security-schemathesis