api-patterns
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The script
scripts/api_validator.pyis a read-only linter that scans local project files for API design patterns. It uses standard Python libraries (re,json,pathlib) and does not invoke shell commands or execute untrusted code. - [DATA_EXFILTRATION] (SAFE): While the script reads file content to perform checks, it contains no network functionality and does not write to any files. It only outputs analysis results to the console.
- [PROMPT_INJECTION] (SAFE): The markdown files contain educational content regarding API design and security testing (e.g., OWASP Top 10). There are no instructions designed to bypass agent constraints or override system prompts.
- [EXTERNAL_DOWNLOADS] (SAFE): The skill does not define external dependencies in
package.jsonorrequirements.txt, and the validator script does not download remote resources. - [CREDENTIALS_UNSAFE] (SAFE): No hardcoded secrets, API keys, or private tokens were identified in the codebase or documentation.
Audit Metadata