versioning-apis
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses a potential surface for indirect prompt injection as it analyzes untrusted external data.
- Ingestion points: The skill uses
GrepandReadto audit existing endpoint definitions and OpenAPI specifications from the user's project directory (SKILL.md,implementation.md). - Boundary markers: No specific delimiters or instructions to ignore instructions within the analyzed codebase are provided to the agent.
- Capability inventory: The skill utilizes
Write,Edit, and a scopedBash(api:version-*)tool to modify the project structure and generate code, which could be exploited if malicious instructions were present in the source files being audited. - Sanitization: There are no explicit validation or sanitization steps mentioned for the content read from external files.
Audit Metadata