defuddle
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the defuddle package globally using 'npm install -g defuddle'. This introduces an external dependency that is not pinned to a specific version or hash.
- [COMMAND_EXECUTION]: The instructions involve executing shell commands using the defuddle utility, including capabilities to parse remote URLs and write output to local files (e.g., '-o content.md').
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from arbitrary external URLs.
- Ingestion points: Content retrieved from websites via 'defuddle parse ' (SKILL.md).
- Boundary markers: No delimiters or specific instructions to ignore embedded malicious instructions are provided to the agent.
- Capability inventory: The skill facilitates shell command execution and file system writes.
- Sanitization: The skill does not specify any sanitization, validation, or escaping of the fetched content before it is processed by the agent.
Audit Metadata