website-screenshot

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Employs the 'orth' command-line utility to execute operations against the Notte and Brand.dev services.
  • [EXTERNAL_DOWNLOADS]: Downloads website metadata and image screenshots from external domains provided by the user or example instructions.
  • [PROMPT_INJECTION]: Presents a surface for indirect prompt injection when scraping web pages. Ingestion points: website content returned by the 'notte /scrape' tool as described in SKILL.md. Boundary markers: no delimiters or specific 'ignore' instructions are used to isolate untrusted web data. Capability inventory: ability to execute shell commands via the 'orth run' tool. Sanitization: the instructions do not specify any filtering or safety validation for the ingested website content.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 05:57 PM