integrate-api-client
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources, creating a potential attack surface for indirect prompt injection.\n
- Ingestion points: The skill reads project source code, OpenAPI specifications (via Orval), and handles API responses at runtime.\n
- Boundary markers: The skill instructs the agent to "enforce type safety" and "use Zod schemas" to prevent untyped data processing.\n
- Capability inventory: The skill utilizes write_file, edit_file, and execute_command to implement and test API integrations.\n
- Sanitization: Instructions mandate strict schema validation and error normalization for all external inputs.\n- [DYNAMIC_EXECUTION]: The skill employs the Orval codegen pipeline to automatically generate API client code, hooks, and mocks from OpenAPI specifications.\n
- Evidence: Use of automated codegen is a central part of the 2026 integration standards described in the skill instructions.\n
- Context: This is a standard development practice for ensuring type safety and reducing manual errors, but it involves the generation and subsequent execution of code derived from external definitions.
Audit Metadata