The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes TypeScript snippets (scripts/generate-http-files.ts and scripts/http-gen.ts) that utilize the standard Node.js fs module to perform file system operations. Specifically, it uses fs.mkdirSync and fs.writeFileSync to create directories and generate .http files based on API route metadata. This functionality is consistent with the skill's primary purpose as a code generator.
[INDIRECT_PROMPT_INJECTION]: The skill describes a workflow that involves scanning application source code to extract API route definitions. This ingestion of external, untrusted data represents a potential attack surface, although the logic provided is strictly template-driven.
Ingestion points: The scanRoutes function (referenced in scripts/http-gen.ts) is designed to read route definitions from the user's source directory (e.g., ./src).
Boundary markers: The skill does not define explicit boundary markers or instructions to ignore embedded prompts within the source data.
Capability inventory: The skill possesses file-writing capabilities (fs.writeFileSync) which are used to output the results of the scanned data.
Sanitization: The generation logic performs basic regex-based parameter conversion (url.replace) but lacks validation for other metadata fields like route names or descriptions.

vscode-rest-client-generator