testing-api-manual

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes instructions to install the jq utility using sudo apt-get. While sudo requires administrative privileges, it is used here in a conventional way for installing a legitimate developer tool from official package repositories.
  • [DATA_EXFILTRATION]: Instructions reference reading a .env.local file and local data paths for configuration. These operations are performed locally as part of the development workflow and do not involve exfiltrating sensitive data to external or untrusted domains.
  • [COMMAND_EXECUTION]: Provides common CLI commands such as curl, docker, and python3 to interact with a local FastAPI endpoint and manage containers. These tools are appropriate for the skill's stated purpose of API testing and debugging and do not execute remote code from untrusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 09:56 PM