generate-postman-collection
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local source code files which could potentially contain malicious instructions designed to influence the agent's behavior. 1. Ingestion points: The agent reads config/routes.rb, controllers in app/controllers/api/, and test specifications in spec/requests/api/. 2. Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore embedded instructions within these files. 3. Capability inventory: The skill can read local files, execute git commands, and write to the local file system. 4. Sanitization: No mechanisms for filtering or sanitizing the content of the analyzed files are specified.
- [COMMAND_EXECUTION]: The skill utilizes shell commands to detect changes in the codebase. Evidence: The instruction to use git diff to check for changes in config/routes.rb, app/controllers/api/, and spec/requests/api/.
Audit Metadata