web-archive-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and extracts text from archived web pages, creating a surface where malicious instructions embedded in those pages could influence the agent's behavior.
- Ingestion points: The
scripts/search_archive.pyscript fetches raw HTML content fromweb.archive.orgusing therequestslibrary and processes it via theextract_textfunction. - Boundary markers: The instructions do not define specific delimiters or "ignore" warnings to prevent the agent from obeying instructions found within the fetched content.
- Capability inventory: The skill has capabilities for network access (HTTP GET via
requests) and standard output, which are used to retrieve and display the archived data. - Sanitization: The
extract_textfunction inscripts/search_archive.pyperforms basic sanitization by using regular expressions to strip<script>,<style>, and other HTML tags before displaying the text to the agent. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to interact with the Wayback Machine's CDX API and fetch archived page snapshots.
- The script
scripts/search_archive.pymakes HTTP GET requests toweb.archive.org/cdx/search/cdxfor metadata andweb.archive.org/web/for page content. - These operations target a well-known service and are necessary for the skill's primary functionality.
Audit Metadata