dynamic-api-integration

Warn

Audited by Socket on Mar 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The fragment represents a comprehensive, primarily benign template for dynamic API integration via OpenAPI specs with clear safeguards (env-based secrets, max_iterations, response truncation). No hardcoded credentials or covert data sinks are present. However, the presence of extensive curl/WebFetch templates and instruction to execute external calls means the risk is non-zero if an agent improperly executes user-provided templates or logs sensitive data. Overall, the content is coherent with its stated purpose and proportionate, but the dual-use nature of executable HTTP request templates warrants cautious runtime handling to prevent credential leakage or uncontrolled API-call loops.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 3, 2026, 02:59 AM
Package URL
pkg:socket/skills-sh/oimiragieo%2Fagent-studio%2Fdynamic-api-integration%2F@ff7ac5f8bb07ba9670ae6670469c998780f05db5