insomnia-collection-generator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill scans external codebases to identify API routes and metadata. Maliciously crafted content within the scanned files could influence the generated output.\n
- Ingestion points: The
scanRoutesfunction inscripts/insomnia-gen.tsreads from the user-provided source directory.\n - Boundary markers: None mentioned for the scanner.\n
- Capability inventory: The skill uses
fs.writeFileSyncto save generated content to the local filesystem.\n - Sanitization: No explicit sanitization is shown for route names or bodies before they are included in the JSON output.
Audit Metadata