static-site-cloner
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data by fetching website content using the
web_fetchtool as described inSKILL.md. This represents a surface for indirect prompt injection attacks. - Ingestion points: The
web_fetchfunction is used to retrieve HTML/markdown content from external URLs provided by the user. - Boundary markers: There are no explicit instructions or delimiters defined to separate the fetched external content from the agent's operational instructions.
- Capability inventory: The skill is designed to generate HTML, CSS, and JavaScript code based on the analyzed content.
- Sanitization: No sanitization or validation mechanisms are mentioned for the fetched content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill references well-known placeholder services
placeholder.comandpicsum.photosinSKILL.mdfor image generation. These are standard developer tools used according to their intended purpose.
Audit Metadata