baoyu-url-to-markdown

Pass

Audited by Gen Agent Trust Hub on Aug 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill launches a local browser instance using child_process.spawn to perform page rendering and capture. It specifically targets Google Chrome, Chromium, or Microsoft Edge executables on the user's system.
  • [EXTERNAL_DOWNLOADS]: The instructions recommend using npx -y bun to run the scripts, which may download the bun runtime or its dependencies if not already present.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted web content from any URL provided by the user. While it sanitizes HTML by removing script tags and style attributes before conversion to markdown, the resulting markdown is intended for LLM consumption, creating a surface for indirect instructions embedded in the webpage text.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 16, 2026, 10:53 PM