senior-backend
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
api_scaffolder.pyscript processes OpenAPI specifications to generate boilerplate code. This creates an indirect prompt injection surface where a malicious specification file could potentially influence the generated code output. This is a characteristic of code scaffolding tools rather than a malicious implementation.- [COMMAND_EXECUTION]: The skill instructions and workflows involve executing local Python utility scripts to perform development tasks such as generating routes, analyzing database schemas, and running performance tests.- [EXTERNAL_DOWNLOADS]: Theapi_load_tester.pyutility performs network requests to target URLs provided by the user for benchmarking purposes. This is the intended primary purpose of the tool.
Audit Metadata