Back to skill

Security audit

API Docs Generator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple markdown-only API documentation formatter with no hidden access, installation scripts, or persistent behavior.

Safe to install for generating API docs from pasted endpoint lists. Do not paste secrets such as API keys, tokens, or sensitive internal URLs unless you are comfortable having them appear in the generated documentation.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.