testing-api-tester
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/discover_endpoints.shemploys standard system utilities likefind,grep, andsedto identify API route patterns in local directories. These operations are performed safely using local-only paths. - [REMOTE_CODE_EXECUTION]: The skill does not facilitate the execution of remote code. The
scripts/generate_test_skeleton.pytool creates test code based on JSON specifications but does not execute the resulting scripts or any external payloads. - [DATA_EXFILTRATION]: No evidence of sensitive data access or exfiltration was found. The network calls demonstrated in the reference test suite are directed towards localhost or environment-configured testing endpoints.
- [PROMPT_INJECTION]: The skill instructions are focused on API testing methodology and do not contain any instructions aimed at overriding system prompts or bypassing security controls.
Audit Metadata