api-publish
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'ap' CLI binary and the API Gateway release from 'github.com/wso2/api-platform'. These are official releases from a well-known vendor.
- [EXTERNAL_DOWNLOADS]: Instructions fetch documentation and policy catalogs from raw.githubusercontent.com/wso2/*, which is the official repository for the vendor's platform documentation.
- [COMMAND_EXECUTION]: The skill uses bundled shell scripts ('scripts/install-ap-cli.sh' and 'scripts/setup-gateway.sh') to automate binary installation and Docker container management. These operations are standard for dev-tooling skills and stay within the user's home directory (~/.local/bin and ~/wso2-api-gateway).
- [COMMAND_EXECUTION]: The skill executes 'ap' CLI commands and 'curl' requests to interact with the gateway's management API. This includes generating API keys and deploying configurations, which is the primary purpose of the skill.
Audit Metadata