api-documentation

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a documentation utility that assists in generating API references for various protocols. It does not perform network operations, exfiltrate data, or attempt to escalate privileges.
  • [COMMAND_EXECUTION]: The scripts/analyze-api-docs.sh script uses standard Linux utilities like find and grep to analyze local source code. All user-provided inputs (SOURCE, API_PATH) are properly quoted within the script to prevent shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any remote downloads or execution of external scripts. It checks for the presence of local CLI tools (e.g., swagger-cli, protoc) but does not attempt to install them.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes external source code to generate documentation, it does so through static analysis tools and outputs structured data, minimizing the risk of indirect prompt injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 04:47 AM