imini-api-integration

Warn

Audited by Snyk on May 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires fetching the live catalog at https://docs.imini.ai/llms.txt (via scripts/fetch_imini_catalog.py) and then fetching model OpenAPI YAMLs (e.g. https://docs.imini.ai/en/openapi/images/nano-banana-pro.yaml) at runtime, and those fetched files are parsed and used to generate integration code and map request/ prompt fields—i.e., remote content directly controls the generated instructions and is a required dependency.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 12, 2026, 03:15 PM
Issues
1
Security Audit — snyk — imini-api-integration