url-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from files to identify and validate URLs, creating a surface for indirect prompt injection where malicious data could influence agent behavior.\n
- Ingestion points: The
scripts/validate-urls.pyscript reads the entire content of a file specified by the user viafile_path.read_text().\n - Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore embedded commands within the files being processed.\n
- Capability inventory: The skill has the capability to read local files and perform network HEAD requests to external URLs via the
requestslibrary.\n - Sanitization: While the script validates URL syntax using regular expressions and
urllib.parse, it does not sanitize the input text for potential prompt injection attacks or restrict the destination of the network requests (e.g., to prevent SSRF against internal services).
Audit Metadata