broken-link-checker
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script using a shell command in SKILL.md. It passes a user-provided variable ($TARGET_URL) directly into the command line, which could be exploited for command injection if the underlying platform does not properly sanitize the input.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes content from arbitrary external websites.
- Ingestion points: The scripts/checker.py script fetches HTML content from external URLs defined by the user.
- Boundary markers: There are no explicit instructions or delimiters provided to ensure the agent ignores instructions that may be embedded within the external HTML content.
- Capability inventory: The skill allows for network requests to external domains and execution of shell commands.
- Sanitization: The skill lacks mechanisms to sanitize or filter the content retrieved from the web before it is analyzed by the AI agent.
Audit Metadata