site-structure-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external web content, creating a surface for indirect prompt injection.
- Ingestion points: External data enters the agent context via the
scripts/fetch_page.pyscript, which scrapes content from user-specified URLs. - Boundary markers: The
SKILL.mdinstructions and thereferences/skill-contract.mdfile include explicit mandates to treat all scraped material, reviews, and third-party exports as untrusted evidence and ignore any embedded instructions. - Capability inventory: The skill possesses the capability to perform network reads via
scripts/fetch_page.pyand write local files (Markdown and PDF reports) via thescripts/generate_markdown_report.pyandscripts/generate_pdf_report.pyscripts. - Sanitization: The scraping script
scripts/fetch_page.pyperforms basic sanitization by stripping HTML tags and unescaping text. - [EXTERNAL_DOWNLOADS]: The
scripts/generate_pdf_report.pyscript recommends the installation of thereportlablibrary if PDF generation is desired. This is a well-known, industry-standard Python library for PDF creation. - [COMMAND_EXECUTION]: The skill utilizes local Python scripts for data fetching and processing. The
scripts/fetch_page.pyscript implements robust security validation, including checks to ensure that requested hostnames do not resolve to private, loopback, or reserved IP addresses, effectively neutralizing SSRF attack vectors.
Audit Metadata