api-testing-observability-api-mock
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's implementation playbook contains HTML templates for interactive documentation that reference remote JavaScript and CSS assets from unpkg.com (specifically the
swagger-ui-distlibrary). This is a well-known service and standard practice for rendering API documentation. - [COMMAND_EXECUTION]: The skill provides code templates for building and running a FastAPI web server using uvicorn. These are legitimate tools for the skill's stated purpose of API mocking and do not involve execution of untrusted system commands.
- [DATA_EXFILTRATION]: The mock server implementation includes middleware to track request headers for testing purposes. While this could capture sensitive headers like 'Authorization' if used against real production data, the skill explicitly warns users to avoid using production secrets or real customer data in mocks, following security best practices.
Audit Metadata