api-testing-observability-api-mock
Pass
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Prompt Injection (SAFE): No instruction bypass or safety filter override patterns were detected within the skill's instructions.\n- Data Exposure (SAFE): No hardcoded credentials, sensitive file paths, or unauthorized network operations were identified.\n- Indirect Prompt Injection (LOW): The skill is susceptible to indirect prompt injection when processing untrusted external API definitions. Mandatory Evidence Chain: 1. Ingestion points: API contracts and expected behaviors provided via $ARGUMENTS. 2. Boundary markers: Absent; no clear delimiters for untrusted data. 3. Capability inventory: Generates mock responses, state transitions, and server documentation. 4. Sanitization: Absent; the skill does not explicitly sanitize or validate the input contracts before processing.
Audit Metadata