apifox-import-export
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to search for and execute local project-specific generators (such as
openapi,swagger, orroutegen) to generate API specifications from source code. This is a standard and expected behavior for a developer-oriented tool. - [PROMPT_INJECTION]: The skill processes external data formats (OpenAPI, Postman, Apifox native files) as inputs. While these are untrusted data sources that could theoretically contain indirect prompt injections, the skill implements multiple quality gates and verification steps (Step 3, 4, and 5) to validate the integrity and completeness of the data before it is imported.
- [DATA_EXFILTRATION]: The skill manages the export of API project data to the local filesystem using the authenticated
apifoxCLI tool. This is the primary function of the skill and involves no unauthorized or suspicious network activity.
Audit Metadata