data-feeds
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
scripts/datasets.shandscripts/fetch.sh) to interact with the Bright Data API. It usesjqto safely construct JSON payloads from user-provided arguments, mitigating standard command injection risks when building the API request body. However, as with any skill executing shell commands, the agent has the capability to run these scripts with arbitrary arguments provided by the user. - [DATA_EXFILTRATION]: The skill interacts with the external domain
api.brightdata.comto send URLs for scraping and retrieve structured data. This is the primary intended function of the skill. While it sends user-provided URLs to a third-party service, this behavior is transparently documented and is the core purpose of the tool. The skill handles theBRIGHTDATA_API_KEYvia an environment variable, which is a standard and recommended security practice for managing secrets in such environments.
Audit Metadata