web-content-fetcher
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install several well-known and reputable Node.js packages, including Playwright (Microsoft), JSDOM, and Mozilla Readability. It also involves downloading the Chromium browser binary as part of the Playwright setup process.
- [COMMAND_EXECUTION]: The skill uses
curlfor fetching static web content andnodeto execute local extraction scripts. These operations are core to the skill's purpose of fetching and parsing web data. - [DYNAMIC_EXECUTION]: The
scripts/fetch_js_content.jsutility employs Playwright'spage.evaluatemethod to run extraction logic within a headless browser context. This is a standard and necessary technique for scraping JavaScript-rendered websites. - [INDIRECT_PROMPT_INJECTION]: The skill fetches untrusted data from external websites and processes it using the Task agent, which creates a potential surface for indirect prompt injection.
- Ingestion points: External URLs fetched via
curlor the Playwright-basedfetch_js_content.jsscript (SKILL.md,references/workflows.md). - Boundary markers: The instructions do not currently include explicit boundary markers or directives for the agent to ignore instructions that might be embedded in the fetched content.
- Capability inventory: The skill utilizes
Bash(for curl/node) and the powerfulTaskagent capability for content extraction. - Sanitization: The provided scripts use the Mozilla Readability algorithm to strip HTML tags and structure content, which provides structural sanitization but does not filter natural language instructions within the text content.
Audit Metadata