9router-web-fetch
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references configuration and setup guidelines from the vendor's official GitHub repository (raw.githubusercontent.com/decolua/9router).
- [COMMAND_EXECUTION]: The documentation provides examples of using curl to interact with the 9Router API for model discovery and content extraction.
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by fetching arbitrary content from the internet.
- Ingestion points: External URL content retrieved via the POST /v1/web/fetch endpoint.
- Boundary markers: None are defined in the skill instructions to separate fetched content from agent instructions.
- Capability inventory: The skill enables network operations via API but does not include local file-writing or system-level command execution capabilities.
- Sanitization: The skill does not implement or describe filtering or sanitization of the retrieved web data.
Audit Metadata