link-checker
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several well-known developer tools from official registries, including
linkcheckervia PyPI,lycheevia Cargo, andbroken-link-checkervia NPM. These are established utilities for the stated task of link validation. - [COMMAND_EXECUTION]: The instructions and scripts provide examples for running command-line utilities (
lychee,blc,linkchecker) and integrating them into automated environments like GitHub Actions and GitLab CI. - [DATA_EXFILTRATION]: The monitoring service example in
references/rule.mddemonstrates how to send email alerts usingnodemailer. It correctly advises using environment variables (process.env.EMAIL_USER,process.env.EMAIL_PASS) rather than hardcoding credentials, which is a standard security best practice. - [SAFE]: The skill's primary function is to process HTML files or URLs to identify broken links. While the provided Node.js scripts ingest external data (HTML content), this behavior is the intended purpose of the skill and does not pose an atypical security risk beyond the inherent surface area of a link-checking tool.
Audit Metadata