api-documentation
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation utility that assists in generating API references for various protocols. It does not perform network operations, exfiltrate data, or attempt to escalate privileges.
- [COMMAND_EXECUTION]: The
scripts/analyze-api-docs.shscript uses standard Linux utilities likefindandgrepto analyze local source code. All user-provided inputs (SOURCE,API_PATH) are properly quoted within the script to prevent shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill does not perform any remote downloads or execution of external scripts. It checks for the presence of local CLI tools (e.g.,
swagger-cli,protoc) but does not attempt to install them. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external source code to generate documentation, it does so through static analysis tools and outputs structured data, minimizing the risk of indirect prompt injection attacks.
Audit Metadata