dynamic-api-integration
Warn
Audited by Socket on Mar 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The fragment represents a comprehensive, primarily benign template for dynamic API integration via OpenAPI specs with clear safeguards (env-based secrets, max_iterations, response truncation). No hardcoded credentials or covert data sinks are present. However, the presence of extensive curl/WebFetch templates and instruction to execute external calls means the risk is non-zero if an agent improperly executes user-provided templates or logs sensitive data. Overall, the content is coherent with its stated purpose and proportionate, but the dual-use nature of executable HTTP request templates warrants cautious runtime handling to prevent credential leakage or uncontrolled API-call loops.
Confidence: 75%Severity: 75%
Audit Metadata