api-v2
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
@zavudev/sdkNode.js package and thezavudevPython package. These are official resources provided by the vendor 'zavudev' for interacting with their API. - [COMMAND_EXECUTION]: Instructions are provided for using
npx zavudev deployto manage function deployments. This is a standard CLI operation within the vendor's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting and acting upon data retrieved from external API endpoints.
- Ingestion points: Data is received via API responses from
https://api.zavu.dev/v2as documented inSKILL.md. - Boundary markers: No explicit instruction delimiters or 'ignore' warnings are used in the provided code examples.
- Capability inventory: The skill demonstrates network communication capabilities using
fetch,curl, and the vendor SDK. - Sanitization: The examples utilize standard JSON parsing (
res.json(),JSON.stringify()) but do not include explicit sanitization of the content before further processing.
Audit Metadata