The Agent Skills Directory

[SAFE]: No security issues were detected. The skill follows best practices by providing tools for security posture analysis (e.g., detecting weak JWT algorithms or unencrypted Basic Auth) rather than introducing vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill declares dependencies on standard, well-known libraries including requests, pydantic, jsonschema, and authlib. These are industry-standard packages for API interaction and data validation.
[REMOTE_CODE_EXECUTION]: The skill provides logic to generate API client code in Python, JavaScript, and TypeScript. This generation is performed as string manipulation within the endpoint_mapper script; the skill does not attempt to execute this generated code or provide a mechanism for remote execution.
[DATA_EXFILTRATION]: While the auth_handler processes authentication headers and credentials for validation purposes, all processing occurs locally within the provided scripts. There are no network operations that transmit sensitive data to external or unknown domains.
[SAFE]: The skill includes an indirect prompt injection surface as it ingests and parses external API code and OpenAPI specifications. However, the analysis shows that the ingestion is handled via static regex-based parsing and the skill lacks the capabilities (such as file writes or network exfiltration) necessary to weaponize such an injection. Boundary markers and sanitization are handled by the calling agent's context.

API Integration Helper