microlink-api
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves processing data from external URLs, which represents an attack surface for indirect prompt injection. \n
- Ingestion points: Untrusted content is ingested via the target URLs provided to the
urlparameter in various API calls and workflow examples (SKILL.md, api-reference.md). \n - Boundary markers: The provided instructions do not include specific delimiters or guidance for the agent to ignore or isolate instructions found within the scraped content. \n
- Capability inventory: The skill enables fetching metadata, performing custom scraping, executing JavaScript (
evaluate,function), and generating assets, all of which involve interacting with external network resources. \n - Sanitization: No explicit sanitization or filtering of the target page's content is described in the skill's instructions. \n- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the
microlink.iopackage via NPM and use the Microlink CLI (SKILL.md). These references target the official resources of the skill's author, microlinkhq. \n- [DYNAMIC_EXECUTION]: The Microlink API provides features for executing JavaScript during the scraping process, as documented in the deep reference (api-reference.md). \n - Browser-side execution: The
evaluateparameter allows for running JavaScript in the context of the browser rendering the target page. \n - Server-side execution: The
functionparameter allows for executing custom JavaScript on the Microlink service's infrastructure with access to the browser session and page content.
Audit Metadata