content-parser
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.marswave.aito extract content from user-provided URLs. This is the primary function of the skill. The destination is a specific service provider and is used for its intended purpose without exfiltration of sensitive local data. - [COMMAND_EXECUTION]: The skill uses
curlandjqwithin bash scripts to interact with the Marswave API. These commands are statically defined in the workflow for polling task status and handling API responses. No arbitrary or user-injected shell commands were detected. - [CREDENTIALS_SAFE]: API keys are managed via the environment variable
LISTENHUB_API_KEY. The skill includes explicit instructions for the agent to check for this key and stop if missing, following a standard configuration pattern. It warns against displaying full keys in output. - [DATA_EXPOSURE]: The skill reads and writes configuration to a local directory (
.listenhub/content-parser/config.json) and saves extracted content to the current working directory. It does not access sensitive system paths or credentials files.
Audit Metadata