molten-landing
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a bundled Python script,
scripts/audit_metrics.py, to perform technical audits of landing pages. The script is executed via the command line usingpython3. - [EXTERNAL_DOWNLOADS]: The
scripts/audit_metrics.pyscript uses theurllib.requestmodule to fetch content from arbitrary, user-supplied URLs for analysis. This allows the agent to interact with external web resources outside of a restricted whitelist. - [DATA_EXFILTRATION]: The combination of local file system access (reading HTML/CSS files) and the ability to make external network requests via the audit script creates a potential path for exfiltrating sensitive local data if the agent's instructions are overridden to target internal files.
Audit Metadata