api-designer
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- Prompt Injection (SAFE): No attempts to override agent behavior or bypass safety constraints were found. The instructions are strictly limited to API design methodology.
- Data Exposure & Exfiltration (SAFE): No file system access or network operations were identified.
- Unverifiable Dependencies & Remote Code Execution (SAFE): No package managers are used, and no remote code is downloaded or executed.
- Indirect Prompt Injection (LOW): The skill processes user-provided requirements to generate documentation. While it lacks specific delimiters for untrusted input, it possesses no side-effect capabilities (no file-write or subprocess calls), resulting in a negligible risk profile.
- Dynamic Execution (SAFE): No runtime code generation or unsafe deserialization patterns exist within the instructions.
Audit Metadata