The Agent Skills Directory

[SAFE]: The skill is designed for the transformation of API data into documentation and does not exhibit any dangerous behaviors such as unauthorized network access, file system modification, or credential theft.
[DATA_EXPOSURE]: The skill follows security best practices by using placeholders such as '' and '$TOKEN' in generated documentation examples, avoiding the leakage of actual sensitive information.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from API definitions and source code (SKILL.md). While it lacks explicit boundary markers or sanitization for these inputs, the risk is negligible as the skill's functionality is limited to formatting text and does not involve high-risk capabilities like command execution or data exfiltration.

api-documentation