http-fetch
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard HTTP client utility using Python's built-in
urlliblibrary. It includes appropriate security checks such as restricting protocols tohttp://andhttps://to prevent file-system access or other protocol-based attacks. - [SAFE]: The code correctly handles response truncation via the
max-bytesparameter, preventing memory exhaustion attacks from large remote payloads. - [SAFE]: The skill uses
urllib.request.Requestwithout custom header injection capabilities, reducing the risk of header-based exploitation. All external interactions are driven by the operator-supplied URL.
Audit Metadata