site-extract
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes requests to
api.firecrawl.devto utilize its specialized scraping and branding extraction service. This is a core feature of the skill, and the domain is the official endpoint for the Firecrawl service. - [EXTERNAL_DOWNLOADS]: Both
basic-extract.shandfirecrawl-extract.shusecurlto fetch content from user-provided target URLs and official service endpoints. - [EXTERNAL_DOWNLOADS]: The skill fetches visual assets (logos, screenshots) and references
fonts.googleapis.comfor font extraction, which are standard operations for building a brand profile from a live website. - [COMMAND_EXECUTION]: The skill utilizes shell scripts (
scripts/basic-extract.sh,scripts/firecrawl-extract.sh) to perform data processing. These scripts use common utilities likegrep,sed,jq, andpython3to parse and structure the extracted data. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites (HTML, text content, metadata) into the workspace as
extract.mdandextract.json. - Ingestion points: Raw HTML/markdown fetched from user-provided URLs in both
basic-extract.shandfirecrawl-extract.sh. - Boundary markers: The skill uses a structured extraction process and explicit instructions to "Preserve exact language where possible. Quote, do not paraphrase." and "Distinguish observed facts from inference," which helps segregate untrusted data from instructions.
- Capability inventory: File system writes (workspace directory), network operations via
curl(scraping), and shell command execution for data parsing. - Sanitization: The scripts perform basic data cleaning via
sedandgrepand usejson.dumps(Python) orjqto safely format data into JSON output files.
Audit Metadata