The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines a workflow to scan API route definitions and generate .http files. This creates an ingestion surface where data from scanned source code (such as route paths, names, and descriptions) is directly written to the file system using file system modules. An attacker who controls the source code being scanned could potentially inject malicious content into the generated HTTP request files.
Ingestion points: The scanRoutes function and the RouteInfo objects processed in scripts/generate-http-files.ts and scripts/http-gen.ts serve as the primary entry points for external data.
Boundary markers: No boundary markers or "ignore embedded instructions" warnings are utilized when processing route metadata.
Capability inventory: The skill uses fs.mkdirSync and fs.writeFileSync in the generator scripts to perform file system write operations.
Sanitization: The generator script performs simple string interpolation without sanitization or escaping of the route metadata before writing it to the .http files.

vscode-rest-client-generator