apifox-mock
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates JavaScript (.js) and TypeScript (.ts) files based on predefined templates. This is used to create mock responses and logic for API testing and development within the project's directory structure.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and parses local source code files to drive the generation of mock data, presenting a potential surface for indirect injection if the source files are untrusted.
- Ingestion points: API controller files and interface definitions located in @/api/xxx/controller and interface/apiTypes/.
- Boundary markers: No specific delimiters or instructions to ignore embedded content are mentioned.
- Capability inventory: The skill reads local files and writes generated script files to the project filesystem.
- Sanitization: There is no mention of sanitizing or validating the content of the parsed source files before using them in the generation process.
Audit Metadata