fetch
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to ingest data from arbitrary external URLs and provide it to the agent as markdown, HTML, or screenshots, creating an attack surface for instructions hidden in web content.
- Ingestion points: Content is retrieved from user-specified URLs via the
bdata scrapeCLI command or theapi.brightdata.com/requestREST endpoint. - Boundary markers: The skill does not provide or mandate any delimiters or explicit boundary instructions to help the agent differentiate between the fetched content and its own instructions.
- Capability inventory: The skill utilizes CLI execution (
bdata) and network requests to external domains (api.brightdata.com). - Sanitization: The skill explicitly states that "Nothing is parsed for you," indicating that raw, unsanitized content is passed directly to the agent's context.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
bdataCLI tool, specifically using thebdata scrapecommand to perform web fetching operations. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.brightdata.com. This domain is an official resource owned by the skill vendor, brightdata.
Audit Metadata