baoyu-url-to-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill launches a local browser instance using
child_process.spawnto perform page rendering and capture. It specifically targets Google Chrome, Chromium, or Microsoft Edge executables on the user's system. - [EXTERNAL_DOWNLOADS]: The instructions recommend using
npx -y bunto run the scripts, which may download thebunruntime or its dependencies if not already present. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted web content from any URL provided by the user. While it sanitizes HTML by removing script tags and style attributes before conversion to markdown, the resulting markdown is intended for LLM consumption, creating a surface for indirect instructions embedded in the webpage text.
Audit Metadata