api-documenter
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No prompt injection, DAN patterns, or safety bypass instructions were found in the skill definition or documentation.
- [COMMAND_EXECUTION]: The skill provides utility scripts for OpenAPI management. These scripts use strict regex validation for all command-line inputs (names, versions, URLs) to ensure they conform to expected formats before being used in template generation, preventing injection attacks.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external API descriptions, its capabilities are limited to structured file writing and validation. The use of strict OpenAPI schemas and local validation scripts provides effective boundaries against malicious content in processed data.
- [METADATA_POISONING]: Frontmatter metadata includes standard platform hooks for session logging. Analysis indicates these are legitimate configuration parameters for activity tracking and do not involve unauthorized data exfiltration or deceptive instructions.
- [SAFE]: No hardcoded credentials, sensitive file path access, or unauthorized network operations were identified in the codebase.
Audit Metadata