baoyu-url-to-markdown

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes system commands such as ps aux to manage and reuse existing Chrome browser instances and osascript on macOS to ensure the browser window is focused during interactive sessions.
  • [EXTERNAL_DOWNLOADS]: Connects to https://defuddle.md/ to provide high-quality markdown conversion as a fallback for local extraction and downloads media assets (images and videos) directly from the target web pages.
  • [DATA_EXPOSURE]: Manages session persistence by exporting and restoring sensitive session cookies (like auth_token for X/Twitter) to a local JSON file (x-session-cookies.json) within the Chrome profile directory. This data remains local and is used to maintain authenticated states for scraping restricted content.
  • [INDIRECT_PROMPT_INJECTION]: Processes untrusted data from the web (HTML/Markdown). The skill mitigates risks by sanitizing HTML (stripping scripts, styles, and dangerous tags) and converting the final output to markdown before it is read by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 08:18 AM
Security Audit — agent-trust-hub — baoyu-url-to-markdown