omniroute-compression
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to an API endpoint specified by the
OMNIROUTE_URLenvironment variable. Sensitive credentials are managed via theOMNIROUTE_KEYenvironment variable, which is a standard security practice to avoid hardcoding secrets.\n- [EXTERNAL_DOWNLOADS]: The skill references a setup guide located in a external GitHub repository (diegosouzapw/OmniRoute). This is a static reference for user configuration and does not include automated script execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes a preview feature that takes user-provided text as input for compression.\n - Ingestion points: User-provided text is passed to the
textfield of the/api/compression/previewendpoint.\n - Boundary markers: The examples do not specify the use of delimiters or ignore instructions for the processed text.\n
- Capability inventory: The skill is capable of performing network operations using
curl.\n - Sanitization: No explicit sanitization or filtering of the input text is described in the skill instructions.
Audit Metadata