baoyu-url-to-markdown
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system commands such as
ps auxto manage and reuse existing Chrome browser instances andosascripton macOS to ensure the browser window is focused during interactive sessions. - [EXTERNAL_DOWNLOADS]: Connects to
https://defuddle.md/to provide high-quality markdown conversion as a fallback for local extraction and downloads media assets (images and videos) directly from the target web pages. - [DATA_EXPOSURE]: Manages session persistence by exporting and restoring sensitive session cookies (like
auth_tokenfor X/Twitter) to a local JSON file (x-session-cookies.json) within the Chrome profile directory. This data remains local and is used to maintain authenticated states for scraping restricted content. - [INDIRECT_PROMPT_INJECTION]: Processes untrusted data from the web (HTML/Markdown). The skill mitigates risks by sanitizing HTML (stripping scripts, styles, and dangerous tags) and converting the final output to markdown before it is read by the agent.
Audit Metadata