url-to-markdown-api
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches content from any user-provided URL, which is a standard surface for indirect prompt injection where malicious instructions embedded in web pages could influence the agent's behavior.
- Ingestion points: The skill ingests data via the URL extraction endpoint as described in SKILL.md.
- Boundary markers: There are no instructions for the agent to use delimiters or ignore-embedded-instructions headers when processing the fetched content.
- Capability inventory: The skill allows the agent to read and process external data, which is then typically used to generate responses or inform further tool usage.
- Sanitization: No mention of sanitization or filtering to remove potential instructions from the extracted web content.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the 'scavio' package from PyPI and NPM, which are vendor-provided libraries for interacting with the extraction API.
Audit Metadata