api-designer
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill provides architectural guidance and templates consistent with professional API design standards.
- [EXTERNAL_DOWNLOADS]: Recommends using well-known API development tools from Redocly and Stoplight via npx. These are industry-standard utilities for linting and mocking API specifications.
- [COMMAND_EXECUTION]: Instructs the user to run validation and mocking commands in the shell. These operations are restricted to the local workspace and align with the primary purpose of the skill as a developer assistant.
- [PROMPT_INJECTION]: Indirect prompt injection surface exists as the skill processes user-supplied business requirements to generate API specifications. 1. Ingestion points: User-provided business requirements and data models. 2. Boundary markers: None explicitly defined. 3. Capability inventory: Shell execution via npx for @redocly/cli and @stoplight/prism-cli. 4. Sanitization: Content is processed into YAML format for standard parser-based validation tools.
Audit Metadata