website-screenshot
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs the 'orth' command-line utility to execute operations against the Notte and Brand.dev services.
- [EXTERNAL_DOWNLOADS]: Downloads website metadata and image screenshots from external domains provided by the user or example instructions.
- [PROMPT_INJECTION]: Presents a surface for indirect prompt injection when scraping web pages. Ingestion points: website content returned by the 'notte /scrape' tool as described in SKILL.md. Boundary markers: no delimiters or specific 'ignore' instructions are used to isolate untrusted web data. Capability inventory: ability to execute shell commands via the 'orth run' tool. Sanitization: the instructions do not specify any filtering or safety validation for the ingested website content.
Audit Metadata