extract-openapi-from-code
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill includes instructions to install widely-used third-party packages such as drf-spectacular, flask-openapi3, and @nestjs/swagger. These are legitimate tools for API documentation and are not associated with malicious behavior.
- [COMMAND_EXECUTION] (SAFE): Standard development commands like 'python manage.py', 'uvicorn', and 'npm run' are included to facilitate the schema extraction process. These are appropriate within the context of the provided developer guides.
- [DATA_EXFILTRATION] (SAFE): While 'curl' is used, it targets 'localhost' and '127.0.0.1' to retrieve locally hosted schema files. No unauthorized network communication to external or untrusted domains was detected.
- [PROMPT_INJECTION] (SAFE): The content is purely instructional and does not contain attempts to override agent instructions or bypass safety filters.
Audit Metadata