API Test Case Generator

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:33 PM UTC
• Version:
  1.2.0

Overview

This skill is a local OpenAPI/Swagger test-case generator, and its file reading and report writing match that purpose.

Install this only if you intend to let the agent read your OpenAPI/Swagger files and generate local case files. Use a dedicated output directory, and avoid running it over repositories containing sensitive API descriptions unless that data is acceptable in the agent workflow.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 75% confidence
• Finding: The activation text is broad enough to match many generic API testing or test-case requests, which can cause the skill to trigger in contexts where the user did not intend repo scanning, file operations, or this specific workflow. Because the skill contains imperative instructions to run scripts and inspect files, over-broad routing increases the chance of unnecessary sensitive file access and unintended action selection.

VirusTotal

59/59 vendors flagged this skill as clean.