apideck-codegen

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches OpenAPI specifications from Apideck's official domain (specs.apideck.com) and references the vendor's GitHub repository for source files. These are trusted vendor resources.
  • [COMMAND_EXECUTION]: The skill provides instructions for installing and running various CLI tools via npm, brew, docker, and npx. This includes industry-standard tools like openapi-generator-cli and speakeasy, as well as vendor-specific utilities like @apideck/portman and @apideck/oas-format-filter.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it processes external OpenAPI specifications for code generation. However, the data sources are restricted to the vendor's own verified infrastructure.
  • Ingestion points: OpenAPI specification URLs (e.g., https://specs.apideck.com/crm.yml) provided to code generation commands in SKILL.md.
  • Boundary markers: None identified in the provided instructions.
  • Capability inventory: The skill utilizes command execution for package installation, code generation, and documentation rendering across multiple platforms.
  • Sanitization: No explicit sanitization of the downloaded specifications is described beyond the validation performed by the standard generation tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:33 PM