html-extraction-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external websites via scraping and parsing techniques.
- Ingestion points: Untrusted data enters the agent context through
curlcommands and HTML parsing logic (e.g., BeautifulSoup in Python snippets) used to fetch and process remote web pages (SKILL.md). - Boundary markers: The instructions focus on structured data (JSON-LD, Meta tags) but do not explicitly define boundary markers or 'ignore' instructions for the LLM when processing this external content.
- Capability inventory: The skill uses
curlfor network requests and provides Python logic for DOM traversal and field extraction. - Sanitization: The skill includes a
clean(s)function that performs HTML unescaping and Unicode normalization (NFKC) to handle non-breaking spaces and odd quotes. - [EXTERNAL_DOWNLOADS]: The skill references external resources and configuration commands.
- Vendor Tools: It provides a command to register an external Model Context Protocol (MCP) server:
claude mcp add --transport http manypi https://mcp.manypi.com/mcp -s user(SKILL.md). - External Repositories: It references a GitHub repository
manypicom/sales-skillsfor related functionalities like lead data scraping and CRM hygiene (SKILL.md). - Network Requests: The provided examples use
curlto fetch content from external URLs (e.g.,example.com,manypi.com).
Audit Metadata