manage-api-catalog
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on standardizing API discovery using RFC 9727 (Linkset). It provides instructions for managing
/.well-known/api-catalogfiles. - [SAFE]: It includes explicit security guardrails aligned with OWASP ASI, recommending domain validation for all URLs to prevent redirection attacks (Goal Hijack) and schema validation to prevent supply chain risks.
- [SAFE]: The
allowed-toolslist in the frontmatter is restricted to standard file operations and network fetches required for validating and deploying API catalogs. There is no evidence of malicious command execution or unauthorized data access. - [SAFE]: The external references (e.g.,
isitagentready.com) are to relevant industry discovery tools and documentation, used here for verification purposes.
Audit Metadata