linkup-fetch
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes documentation with example shell commands using
curlto access Linkup's REST API endpoints. - [DATA_EXFILTRATION]: The skill facilitates network communication with official Linkup API domains (
api.linkup.so) to retrieve web data. These operations are consistent with the vendor's intended functionality and do not represent unauthorized data exfiltration. - [PROMPT_INJECTION]: This skill functions by fetching external web content, which inherently introduces a surface for indirect prompt injection.
- Ingestion points: Untrusted content retrieved from arbitrary URLs via the Fetch API (
SKILL.md). - Boundary markers: None identified in the provided instructions.
- Capability inventory: No dangerous scripts, subprocess calls, or file-system write operations are present in the skill files.
- Sanitization: No content sanitization or filtering is documented for the retrieved data.
Audit Metadata