skills/maragudk/fabrik/save-web-page/Gen Agent Trust Hub

save-web-page

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the monolith CLI tool using the command monolith --isolate -o <name>.html <url>.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external web content from arbitrary URLs provided by the user for the purpose of saving them locally.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites, which presents a surface for indirect prompt injection.
  • Ingestion points: External URLs are fetched by the monolith tool and saved to the local filesystem (e.g., in ~/AI/web/).
  • Boundary markers: No specific boundary markers or 'ignore' instructions are provided for the agent when processing or reading the saved content later.
  • Capability inventory: The skill uses shell command execution to run the monolith utility.
  • Sanitization: No sanitization or validation of the downloaded HTML content is performed by the skill instructions; it relies on the --isolate flag of the tool which restricts some external resource loading within the saved file.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 12:18 AM
Security Audit — agent-trust-hub — save-web-page