skills/zavudev/zavu-skills/api-v2/Gen Agent Trust Hub

api-v2

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the @zavudev/sdk Node.js package and the zavudev Python package. These are official resources provided by the vendor 'zavudev' for interacting with their API.
  • [COMMAND_EXECUTION]: Instructions are provided for using npx zavudev deploy to manage function deployments. This is a standard CLI operation within the vendor's ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting and acting upon data retrieved from external API endpoints.
  • Ingestion points: Data is received via API responses from https://api.zavu.dev/v2 as documented in SKILL.md.
  • Boundary markers: No explicit instruction delimiters or 'ignore' warnings are used in the provided code examples.
  • Capability inventory: The skill demonstrates network communication capabilities using fetch, curl, and the vendor SDK.
  • Sanitization: The examples utilize standard JSON parsing (res.json(), JSON.stringify()) but do not include explicit sanitization of the content before further processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 09:34 PM