fetch-url-as-markdown
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the host agent to execute a bundled Python CLI script (
scripts/fetch_url.py) to perform the web scraping and extraction tasks locally.\n- [EXTERNAL_DOWNLOADS]: The skill depends on thetrafilaturaPython package, which users are instructed to install from PyPI. This is a well-known and established open-source library for web scraping.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to fetch and clean content from external URLs, which creates a potential attack surface for indirect prompt injection if the source website contains instructions intended to manipulate the agent.\n - Ingestion points: The
fetch_url_as_markdownfunction inscripts/fetch_url.pyingests data from arbitrary user-provided URLs usingtrafilatura.fetch_response.\n - Boundary markers: The script outputs metadata in a YAML frontmatter block, but the main content body lacks specific delimiters to isolate potentially malicious instructions from the agent's processing logic.\n
- Capability inventory: While the skill itself is limited to fetching and printing content, the host agent typically possesses additional tools (file access, terminal access) that could be targeted via injection.\n
- Sanitization: The script performs structural extraction to provide clean Markdown but does not include sanitization logic to detect or filter instructions targeted at LLMs within the page content.
Audit Metadata