api-testing-observability-api-mock
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard development tools and templates for API mocking. Analysis of all 10 threat categories revealed no malicious behavior or safety violations.
- [EXTERNAL_DOWNLOADS]: The skill references Swagger UI assets from unpkg.com in its documentation generator. This is a standard practice for providing interactive API documentation and uses a well-known, trusted CDN.
- [COMMAND_EXECUTION]: Provides infrastructure-as-code templates for Docker and Kubernetes to facilitate mock service deployment. These are legitimate resources for the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process API contracts to generate mock behaviors.
- Ingestion points:
resources/implementation-playbook.md(loading OpenAPI/AsyncAPI specifications). - Boundary markers: The implementation utilizes
yaml.safe_loadto ensure that untrusted YAML content is parsed without executing arbitrary code. - Capability inventory: Code generation for API server routes and response logic.
- Sanitization: Includes contract validation logic to verify that generated responses match the provided schema.
Audit Metadata