cheerio-parsing
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide and set of code examples for web scraping and HTML parsing using Cheerio. It does not contain any malicious patterns such as obfuscation, credential theft, or unauthorized command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for fetching and parsing untrusted content from external websites (e.g., using
axios.get(url)). While this introduces a potential attack surface where an agent could be influenced by malicious instructions embedded in scraped HTML, the skill follows best practices for data normalization and extraction, and does not suggest executing the content as code. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Node.js packages including
cheerio,axios,got,node-fetch, andp-limit. These are reputable libraries widely used in the industry for the purposes described.
Audit Metadata