analyzing-malicious-url-with-urlscan

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate tools for cybersecurity analysis and phishing defense. No malicious patterns, obfuscation, or unauthorized data access were detected.
  • [EXTERNAL_DOWNLOADS]: The scripts/agent.py and scripts/process.py files use the requests library to interact with well-known security services, specifically URLScan.io (urlscan.io) and VirusTotal (virustotal.com). These network operations are central to the skill's purpose and target established, reputable domains.
  • [DATA_EXFILTRATION]: The skill transmits user-provided URLs to external scanning services for analysis. This is documented behavior. Sensitive data management follows best practices by using environment variables (URLSCAN_API_KEY, VT_API_KEY) for authentication tokens instead of hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 04:54 PM
Security Audit — agent-trust-hub — analyzing-malicious-url-with-urlscan