api-development
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): No instructions were found that attempt to override agent behavior or safety guidelines.
- [Data Exposure & Exfiltration] (SAFE): No sensitive credentials or file paths are hardcoded or accessed. Code snippets use placeholders for variables like SECRET_KEY.
- [Unverifiable Dependencies & Remote Code Execution] (SAFE): All dependencies are standard Python packages from official registries. No remote scripts are downloaded or executed.
- [Indirect Prompt Injection] (LOW): The skill ingests external data through API models. It uses Pydantic for validation, which limits the attack surface. 1. Ingestion:
create_datain SKILL.md. 2. Boundaries: Pydantic schemas. 3. Capabilities: Database persistence. 4. Sanitization: Schema enforcement. - [Dynamic Execution] (SAFE): No use of
eval(),exec(), or dynamic code generation was found.
Audit Metadata