web-extract
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates web data extraction through the ZooData service. All scripts and instructions are consistent with this stated purpose.
- [COMMAND_EXECUTION]: The provided Python script (
scripts/webtools.py) is a CLI wrapper for making HTTP requests. It uses Python's standard library (urllib) and does not execute arbitrary shell commands or external processes. - [CREDENTIALS_UNSAFE]: The skill requires an API key (
ZOODATA_API_KEY). It follows industry-standard practices by retrieving the key from environment variables or a local configuration file (~/.zoodata/config.json). Credentials are only transmitted to the officialapi.zoodata.aiendpoint over HTTPS. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to
api.zoodata.aito fetch web content and search results. This behavior is expected and essential for the tool's functionality. - [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The skill only processes data requested by the user and interacts solely with the vendor's API.
- [PROMPT_INJECTION]: The instructions in
SKILL.mdare purely functional and do not contain attempts to override agent behavior or bypass safety filters.
Audit Metadata