analyzing-malicious-url-with-urlscan
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate tools for cybersecurity analysis and phishing defense. No malicious patterns, obfuscation, or unauthorized data access were detected.
- [EXTERNAL_DOWNLOADS]: The
scripts/agent.pyandscripts/process.pyfiles use therequestslibrary to interact with well-known security services, specifically URLScan.io (urlscan.io) and VirusTotal (virustotal.com). These network operations are central to the skill's purpose and target established, reputable domains. - [DATA_EXFILTRATION]: The skill transmits user-provided URLs to external scanning services for analysis. This is documented behavior. Sensitive data management follows best practices by using environment variables (
URLSCAN_API_KEY,VT_API_KEY) for authentication tokens instead of hardcoding them.
Audit Metadata