api-design
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The script
scripts/create-openapi-spec.mdutilizes dynamic context injection (!commandsyntax) to automatically detect project metadata during execution. It runsgrepcommands to identify the web framework, API version, and endpoint count from local source files. This is a functional feature of the platform used for project-specific automation. - [DATA_EXPOSURE]: A dynamic context command in
scripts/create-openapi-spec.mdscans environment files (.env*) specifically for variables such asAPI_URLorBASE_URL. Although environment files are sensitive, this operation is restricted to identifying public-facing configuration for populating API documentation templates and does not attempt to access credentials or secrets.
Audit Metadata