structured-data-extraction
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, or persistence mechanisms were found in the skill's code or documentation.
- [COMMAND_EXECUTION]: The skill executes a provided Python script (
scripts/extract.py) to perform its primary function of scraping and parsing web data. This script uses standard Python modules and does not execute arbitrary shell commands. - [EXTERNAL_DOWNLOADS]: The Python script performs network requests to retrieve data from external URLs provided by the user. These requests are handled safely using the
urlliblibrary with appropriate timeouts and SSL verification. - [PROMPT_INJECTION]: The skill creates an indirect prompt injection surface by processing data from external websites. Malicious actors could place instructions in a site's structured data to influence the AI agent. The skill follows best practices by using structured reporting templates to separate external data from agent instructions.
Audit Metadata