save-web-page
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
monolithCLI tool using the commandmonolith --isolate -o <name>.html <url>. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external web content from arbitrary URLs provided by the user for the purpose of saving them locally.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites, which presents a surface for indirect prompt injection.
- Ingestion points: External URLs are fetched by the
monolithtool and saved to the local filesystem (e.g., in~/AI/web/). - Boundary markers: No specific boundary markers or 'ignore' instructions are provided for the agent when processing or reading the saved content later.
- Capability inventory: The skill uses shell command execution to run the
monolithutility. - Sanitization: No sanitization or validation of the downloaded HTML content is performed by the skill instructions; it relies on the
--isolateflag of the tool which restricts some external resource loading within the saved file.
Audit Metadata