imini-api-integration
Warn
Audited by Snyk on May 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires fetching the live catalog at https://docs.imini.ai/llms.txt (via scripts/fetch_imini_catalog.py) and then fetching model OpenAPI YAMLs (e.g. https://docs.imini.ai/en/openapi/images/nano-banana-pro.yaml) at runtime, and those fetched files are parsed and used to generate integration code and map request/ prompt fields—i.e., remote content directly controls the generated instructions and is a required dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata