skills/mukul975/anthropic-cybersecurity-skills/performing-api-security-testing-with-postman/Gen Agent Trust Hub
performing-api-security-testing-with-postman
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The orchestration script
scripts/agent.pyexecutes thenewmanCLI runner viasubprocess.runto perform automated API security scans. The command is safely implemented using an argument list rather than a shell string, which prevents command injection risks. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of
newmanandnewman-reporter-htmlextravia the Node Package Manager (NPM). These are legitimate, well-known industry tools maintained by the Postman organization for API testing and reporting.
Audit Metadata